device: disable ICMP redirects

The xfrm layer does this by checking for secpath, but we don't use
secpath, so instead we have to jigger the config value ourselves.

This is nearly always desired, since this is often how a wheel-spoke VPN
works. There's very little use case for redirects with wireguard.

This should be reverted if we ever move the test directly into
ip_forward in net/ipv4/ip_forward.c near the call to
ip_rt_send_redirect.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

0 files changed, 0 insertions, 0 deletions