Re: how to generate a host/network unreachable

Dave Carmean (dlc@silcom.com)
Tue, 4 Jun 1996 11:47:42 -0700 (PDT)

In a previous message, Robert Forsman wrote:
>
>
> We have a Livingston Firewall/Router. We currently have 6 class Cs routed
> to us, but we haven't used them all yet. What I would like is a way to
> specify that if a packet destined for certain addresses comes in, and it would
> normally go out the default route (because the router has no idea where to
> send it) it should generate a "network unreachable" or some such ICMP
> response instead of initiating a ping-pong.

Just place an outbound filter on the "OUT" port denying packets
with a destination address for your "INSIDE" networks.

> Obviously some gear can do this or any packet that was destined for the void
> would play ping-pong forever.

Only until the Time-To-Live expires.

> Did I miss a section of the manual? This should definitely go in the
> cookbook.
>

-- 
David Carmean		WB6YZM		DC574		<dlc@silcom.com>
	System/Network Administration, Silicon Beach Communications
Unsolicited commercial e-mail not accepted.  Violators will be prosecuted.