RE: ICMP re-directs ? Just turn them off ?

["Peter Mueller" <pmueller@xxxxxxxxxxxx>]

> icmp redirects are useful. I personally would leave them on unless
> you've got a good reason to turn them off. One day in the distant
> future, you're going to rearrange your setup and suddenly it won't
> work anymore and you're going to have the devil of a time figuring
> out why. 

If you do decide to leave them on, consider rate limiting.

-m limit --limit 5/second -j ACCEPT

P