Turn off HP-UX ICMP to gateway? (points!)

[Christian Deutsch_1]

Hi folks,

If I got this right, by default, HP-UX sends ICMP packets to the gateway before e.g. an ssh connection can be established via the gateway.

If I wanted to configure the gateway's firewall to discard all ICMP packets, is it possible to configure HP-UX such that it will not try to send ICMP packets to the gateway and then refuse to allow ssh to connect through the gateway?

Interestingly Solaris does not send such ICMP packets by default (if I got that right).

Points will be assigned for all helpful answers.

Thanks, Christian

[Steven E. Protter · Accepted solution]

Shalom Christian,

This is the default behavior of HP-UX 11.00.

It can be changed with the ndd command or permanently in /etc/rc.config.d/nddconf

ndd -set /dev/ip ip_ire_gw_probe 0

SEP

[Christian Deutsch_1]

Shalom Steven,

Perfect!

Toda rabba :-)

Would this then be the correct entry for nddconf?

TRANSPORT_NAME[0]=/dev/ip
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0

Christian

[Luk Vandenbussche]

Christian,

The correct entry is


TRANSPORT_NAME[0]=ip !!! (without /dev)
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0

[Christian Deutsch_1]

Thanks Luk,

This one was a simple question so only 5 points, sorry...

Christian