Re: How to *ENABLE* icmp redirect on windows xp workstation ?



In news:d3a4a149-54f3-4d0d-8b7f-610efbab1e4d@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
Zealot <Zealot0630@xxxxxxxxx> typed:
Hi:

I have some problem with icmp redirect.

I already set the register key HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Services\Tcpip\Parameters\EnableICMPRedirects to 1,
and let icmp redirect bypass the windows firewall.

I checked that gateway send the icmp redirect packet, but it seems
that windows just ignore it.

Thanks.

What operating system version? It may be ignoring it. Many places offer how
to disable it, such as the following link, but this link also explains why
Windows 2000 will ignore it.

Cannot Disable ICMP Redirects By Changing "EnableICMPRedirect" Registry
Value
http://support.microsoft.com/default.aspx?scid=kb;en-us;293626


I'm highly curious: What was the design intentions behind it's requirement
in your infrastructure especially using a Windows machine? Reason why I'm
asking is it's normally used for between routers for route information and
it's use is not considered a "best practice," whereas a Windows host simply
has only one default gateway (the router) and the gateway handles routing.
Unless you have multiple gateways?

For those of you out there not familiar with this feature, here you go:
ICMP Redirects explanation:
http://www.cymru.com/gillsr/documents/icmp-redirects-are-bad.htm

A little old, but the idea is the same:
Explanation of ICMP Redirect Behavior
http://support.microsoft.com/kb/q195686/


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations


.



Relevant Pages

  • ICMP Redirect Behavior
    ... IP of the router it is showing a ICMP redirect.. ... ICMP Host redirect from gateway 172.16.2.222 ...
    (SunManagers)
  • How to *ENABLE* icmp redirect on windows xp workstation ?
    ... I have some problem with icmp redirect. ... I already set the register key HKEY_LOCAL_MACHINE\SYSTEM ... and let icmp redirect bypass the windows firewall. ...
    (microsoft.public.windows.server.networking)