Re: Getting "ICMP Host redirect from gateway" response

On Wed, 30 May 2007, in the Usenet newsgroup comp.os.linux.networking, in
article <f3j6cq$9t5$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>, Burkhard Ott wrote:

Am Tue, 29 May 2007 19:40:11 -0500 schrieb Moe Trin:

Burkhard Ott wrote:

If 192.168.0.253 has 192.168.0.254 as default gw and your host using
192.168.0.253 as default gw

I suspect you'll get a ICMP Type 3 Code 0 "Network unreachable" rather
than a redirect. Where would you be redirected to? A "redirect" occurs

No, you'll be redirected because .253 and .254 are reacheable via
broadcast and .253 has .254 as default gw so he should send a redirect
to all hosts (.1-.252) this message.


Yes, I missed the .253 vs .254 - you are correct about a redirect here.
The "Network unreachable" will be generated by the first host that
realizes that's an RFC3330 address. Why do you think that ALL hosts
would receive and act on the redirect? The error is a unicast message,
not a broadcast.

Agreed - many O/S ignore them to prevent Denial Of Service attacks

Also wrong, not denial of service you could route all packets to your host
if you send a redirect to the hosts, there is a big difference because if
your host act as an router nobody will feel this difference (all requests
will be answered). So now you can sniff for username:passwd etc.
If you DOS a host/router everybody will send an email to his system
administrator and he will check that in a short time.

No, I said Denial Of Service, and I meant it. This has been used by windoze
hax0r kiddiez since they discovered networking in 1995/6 to knock their
"friends" off the Internet for some period of time (in the case of win95,
until it blue screened, and the kid had to reboot).

Old guy
.

Relevant Pages

  • Re: disallow surfing to certain sites?
    ... I suggest you edit your hosts file. ... let's say you want to disallow surfing to nastysite.com. ... If you wanted to do something like redirect the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: 2 versions of same page, same datacenter, different cache?
    ... my hosts are doing? ... Windows is case insensitive, ... Or at least redirect one to the ... Get started with a SEO report of your site: ...
    (alt.internet.search-engines)
  • Re: Web site- DNS-Zone-Alias.
    ... >>> the web server that hosts www.mydomain1.com. ... >>> be configured to redirect these sites to www.mydomain1.com. ... >> I still think the asp redirect is probably an easier option. ...
    (microsoft.public.windows.server.dns)
  • Re: Citibank phish
    ... "Dear CitiBank valued member, ... Did you report it to the hosts of the site? ...
    (uk.finance)