OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: ICMP record route

From: Alain Deschamps (obsd-techalain.deschamps.name)
Date: Sat Aug 02 2003 - 03:03:45 CDT


On Fri, 1 Aug 2003 15:35:35 -0600, you wrote:

>I feel the OpenBSD is responding fine, but the main problem I have is
>that it does not forward ICMP packets with the record route options set.
>I have verified that with my system (OpenBSD 3.2 stable).
>
>--Gopu
>
>-----Original Message-----
>From: Federico G. Schwindt [mailto:fgschlodoss.net]
>Sent: Friday, August 01, 2003 2:01 PM
>To: Pillai, Gopakumar (Gopu)
>Cc: techopenbsd.org
>Subject: Re: ICMP record route
>
>
>On Fri, Aug 01, 2003 at 02:26:40PM -0600, Pillai, Gopakumar (Gopu)
>wrote:
>> I am running OpenBSD 3.2 stable. I found that it does not reply to
>> ICMP requests with record route option (tested with "ping -R"
>> command).
>>
>> More than that, when I setup my OpenBSD box to forward packets between
>
>> interfaces, it does not forward ICMP record route packets.
>>
>> Is this a bug or is it disabled by default in the system?
>>
>> If disabled, how can I enable it.
>>
>> Couldn't find any help on this subject hence bugging you all
>>
>> Thanks in advance
>
> it works fine for me in -current, don't remember 3.2, tho.
> this belongs to misc anyway.
>
>PING 192.168.1.1 (192.168.1.1): 56 data bytes
>64 bytes from 192.168.1.1: icmp_seq=0 ttl=63 time=0.798 ms
>RR: 192.168.1.14
> 192.168.1.1
> 192.168.1.1
> 10.10.1.1
> xx.xx.xx (xx.xx.xx.xx)
>64 bytes from 192.168.1.1: icmp_seq=1 ttl=63 time=0.554 ms (same
>route)
>64 bytes from 192.168.1.1: icmp_seq=2 ttl=63 time=0.504 ms (same
>route)
>--- 192.168.1.1 ping statistics ---
>
> f.-

By default IP options are dropped by pf.
Search allow-opts in man pf.conf

AD