ItsyourIP.com

Tag: routing-table

  • Unable to delete Stale/Obsolete statc routes in Cisco IOS

    Today, I had to troubleshoot a very peculiar problem on my Cisco Catalyst 3750 switches in two different sites. To cut a long story short, both the sites originally had IPSec VPNs over ADSL internet andtherefore static routes added to pass through their VPN firewalls. However, with a recent WAN migration with leased lines, all traffic moved to the WAN routers.

    However, the Static Routes became stale (obsolete) and we were unable to delete the static routes. The routes are not in the running config (no “ip route command in config”) and a reboot wouldn’t help.

    (more…)

  • Solaris Security – Disable ICMP Redirect in Sun Solaris

    Solaris Operating Environment by default is configured to both accept and send  the ICMP Redirect messages. According to RFCs, only a router or a gateway device should send an ICMP Redirect message and any other hosts should only be able to receive the ICMP Redirects. If the Solaris server is not acting as a Router or a Gateway then sending ICMP Redirect message should be disabled. The same applies to accepting ICMP Redirect messages if the solaris server is not required to receive ICMP Redirect messages (say a single Router/Gateway network/subnets scenario) as a malicous hacker could send fake ICMP redirect messages to modify the routing table on the host and potentialy cause a Denial of Service attack.

    (more…)