Re: How to *ENABLE* icmp redirect on windows xp workstation ?
- From: "Ace Fekay [MVP]" <PleaseAskMe@xxxxxxxxxxxxxx>
- Date: Fri, 16 May 2008 21:10:40 -0400
In news:d3a4a149-54f3-4d0d-8b7f-610efbab1e4d@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
Zealot <Zealot0630@xxxxxxxxx> typed:
Hi:
I have some problem with icmp redirect.
I already set the register key HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Services\Tcpip\Parameters\EnableICMPRedirects to 1,
and let icmp redirect bypass the windows firewall.
I checked that gateway send the icmp redirect packet, but it seems
that windows just ignore it.
Thanks.
What operating system version? It may be ignoring it. Many places offer how
to disable it, such as the following link, but this link also explains why
Windows 2000 will ignore it.
Cannot Disable ICMP Redirects By Changing "EnableICMPRedirect" Registry
Value
http://support.microsoft.com/default.aspx?scid=kb;en-us;293626
I'm highly curious: What was the design intentions behind it's requirement
in your infrastructure especially using a Windows machine? Reason why I'm
asking is it's normally used for between routers for route information and
it's use is not considered a "best practice," whereas a Windows host simply
has only one default gateway (the router) and the gateway handles routing.
Unless you have multiple gateways?
For those of you out there not familiar with this feature, here you go:
ICMP Redirects explanation:
http://www.cymru.com/gillsr/documents/icmp-redirects-are-bad.htm
A little old, but the idea is the same:
Explanation of ICMP Redirect Behavior
http://support.microsoft.com/kb/q195686/
--
Regards,
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer
For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Infinite Diversities in Infinite Combinations
.
- Follow-Ups:
- References:
- Prev by Date: Re: Slow window share download, but fast ftp download?
- Next by Date: Re: Windows 2003 File Share Acces is Denied
- Previous by thread: How to *ENABLE* icmp redirect on windows xp workstation ?
- Next by thread: Re: How to *ENABLE* icmp redirect on windows xp workstation ?
- Index(es):
Relevant Pages
|