Is possible to disable "automatic ping" to default gateway ?

[Manuel Plaza]

Hi all,

With the following lines in file:
"/etc/rc.config.d/nddconf"
should be disabled the automatic ping to default gateway ?

Thanks in advance,

Manuel

[RAC_1 · Accepted solution]

I think you are looking for ndd parameter
ip_ire_gw_probe. disable the gateway probe. To sustain the reboots you will have to put it in /etc/rc.config.d/nddconf file.

ndd -h ip_ire_gw_probe will give the help on this parameter
ndd -get /dev/ip ip_ire_gw_probe will give you the current setting.
ndd -set /dev/ip ip_ire_gw_probe 0 Will set to one-i.e will disable it.

Anil

[Ralph Grothe]

On an 11.00 box I found this IP tunable

# uname -srv; ndd -get /dev/ip ip_respond_to_echo_broadcast
HP-UX B.11.00 U
1

If you don't want your box to respond to echo requests you would possibly have to set this to 0?
But I'm not sure since I didn't find tis tunable on an 11i box and there's no help text available

# ndd -h ip_respond_to_echo_broadcast
Unknown tunable parameter: ip_respond_to_echo_broadcast

By a 1st google I came accross this

http://www.cromwell-intl.com/security/security-stack-hardening.html

[Ralph Grothe]

Sorry, for my misleading you.
Of course RAC seems right with his tunable.

[RAC_1]

It seems that ip_ire_gw_probe seems to be available only on 11.11.

I checked for 11.0, and could not get ip_ire_gw_probe. What is the equivalent of ip_ire_gw_probe on 11.0??

There is ip_ire_gw_probe_interval on 11.0

Anil

[Ralph Grothe]

Maybe not quite appropiate since this relates to the Solaris TCP/IP stack.
But I think both HP-UX and Solaris share quite a few of the Streams tunable names.
Maybe you can find the explenations for the Solaris tunables useful anyway?

http://www.sean.de/Solaris/soltune.html

[RAC_1]

Ralph,

I checked it and found that there is ip_respond_to_echo_broadcast on 11.0, BUT it is not supported.

DOES IT mean that the problem of "dead gateway probe" Could be addressed on 11.0???

May be GURUS here, will have some answer.

Anil

[rick jones]

ip_ire_gw_probe may not appear in the output of ndd -h, but you should also check "ndd /dev/ip \?" and I think you will see it there, even on 11.0.

Of course, given the "age" of 11.0, it might be a good idea to consider an upgrade :)