tcpdump showed me there are some ICMP-redirect in my network (KVM virtual-machines, bridged network). I decided to take a closer look on them and how my system behaves and how it looks. I found it doesn't work as it should:Let say I'm on 1.1.1.1 and I ping 2.2.2.2:# ping 2.2.2.2PING 2.2.2.2 (2.2.2.2) 56(84) bytes of data.64 bytes from 2.2.2.2: icmp_seq=1 ttl=63 time=0.569 msFrom 4.4.4.4: icmp_seq=2 Redirect Host(New nexthop: 3.3.3.3)64 bytes from 2.2.2.2: icmp_seq=2 ttl=63 time=0.690 msFrom 4.4.4.4: icmp_seq=3 Redirect Host(New nexthop: 3.3.3.3)as you can see I get multiple redirects to 3.3.3.3 which looks fine but for some reason my host (1.1.1.1) ignores it.# sysctl -a|grep accept_redirectsnet.ipv4.conf.all.accept_redirects = 1net.ipv4.conf.default.accept_redirects = 1net.ipv4.conf.eth0.accept_redirects = 1net.ipv4.conf.lo.accept_redirects = 1and there is no entry for that new route in ip route list and ip route list cache is empty.Kernel version is:# uname -aLinux foo.bar 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt20-1+deb8u3 (2016-01-17) x86_64 GNU/LinuxChanging /proc/sys/net/ipv4/conf/*/accept_redirects values 0|1, networking restart or even reboot didn't worked.I wish to accept ICMP redirects - any ideas ?UPDATE:# ip -d routeunicast default via 4.4.4.4 dev eth0  proto boot  scope global unicast 1.1.1.0/24 dev eth0  proto kernel  scope link  src 1.1.1.1unicast 4.4.4.4 dev eth0  proto boot  scope link 
How to accept ICMP redirects?
linux;icmp
ICMP redirects are sent to define a better route/gateway to a destination.As you have to have an IP address in the same network as the gateway/exit for a route, the route will only be inserted in the routing table if all the following conditions are true: accept_redirects is set to 1 the machine in question has an interface with an address that belongs to the network of the gateway it does not have an IP address in the same network as the destination route.otherwise the route will be discarded. I would not accept blindly redirects as there known security implications with spoofed ICMP redirects. ICMP redirects may also mask transient network malfunctions, or network design mistakes.What are ICMP redirects and should they be blocked?