ICMP redirects

Hi, I want my machine to ignore ICMP redirects in Debian Wheezy (Linux
kernel)

Does

net.ipv4.conf.all.accept_redirects = 0

in /etc/sysctl.conf make kernel to ignore ICMP redirects for all interfaces

or

1) do I have to set it for particular interface like
net.ipv4.conf.eth0.accept_redirects = 0

or

2) do I have to set a rule in iptables like

iptables -A INPUT -i eth0 -p icmp --icmp-type 5 -j DROP

Thanks in advance.

Best regards
Georgi


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/52186BAE.1000102@oles.biz