Great Circle Associates Firewalls
(October 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Will Cisco be fooled by ICMP messages ??
From: lavondes @ tidtest . total . fr (Michel Lavondes)
Date: Fri, 21 Oct 94 14:02:23 GMT
To: firewalls @ greatcircle . com
In-reply-to: <H00000f7000f29f8 @ MHS>; from "Tong_Esmond/HP-HongKong_om1 @ sgp . hp . com" at Oct 21, 94 7:29 pm
Reply-to: lavondes @ tidtest . total . fr

Tong_Esmond/HP-HongKong_om1 @
 sgp .
 hp .
 com wrote :
> 
> Hello all,
> 
>   Is anybody has any information that whether Cisco Router with
> 9.X software will be fooled by ICMP Redirect messge ?  Is yes,
> is there any way to prevent it ??
> 
I hope not, since AFAIK routers (as opposed to hosts) are supposed to
ignore ICMP redirs as per RFC1009. I never tried it, though ...

Also, version 9.1.x has gone through a loooooong process of bug-fixing, so I
can't give a definite answer without knowing what version you're thinking
about.

HTH.
-- 
Michel Lavondes
E-Mail : lavondes @
 tidtest .
 total .
 fr
         lavondes%tidtest .
 total .
 fr @
 pegase .
 total .
 fr (if previous addr rejected)
Tel : +33-1-4135-4198
Fax : +33-1-4135-4189


References:
Indexed By Date Previous: ISDN CID
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Next: validity of RFC 1597 ...
From: Greg Sylvain <gms @ spaceworks . com>
Indexed By Thread Previous: Re: Will Cisco be fooled by ICMP messages ??
From: Tong_Esmond/HP-HongKong_om1 @ sgp . hp . com
Next: Re: Will Cisco be fooled by ICMP messages ??
From: Tony Li <tli @ cisco . com>

Google
 
Search Internet Search www.greatcircle.com