19.1.3 update question

[keropiko]

Hi to all,

i have just updated my system from 19.1.2 to 19.1.3.

Looking at the changelog, i read: "system: new tunables factory default to prevent ICMP redirects being sent (net.inet.icmp.drop_redirect=1)"

Now, after updating, i rebooted my system, but the default value remained "0".

I have also presed the "Default" red button, applied and rebooted, but again the default values remains "0".

I cannot verify many of the other changes, this is one of the few i just controlled, and i don't know, should i change it manually to "1" or only by fresh install the default value turns to "1".

Thank you.

[keropiko]

hi, has anyone checked if this option changed after the upgrade to 19.1.3 or 19.1.4 ? Or should it be done manually?

Thanks.

[AhnHEL]

Apparently this only affected new installs or resets to factory defaults.  Although, hitting the Default button created a duplicate tunable with a different value at the bottom of the list for net.inet.ip.redirect and net.inet.icmp.drop_redirect.  I've reported this issue for you.

https://github.com/opnsense/core/issues/3410

Should be sorted now and can be patched

Code Select Expand

opnsense-patch -c core 4fc9696