From 6101ba8940f02888fd096f4e8e458624ec5f0ff2 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Mon, 15 Apr 2019 09:32:33 +0200
Subject: [PATCH] sysct, remove duplicates. closes
 https://github.com/opnsense/core/issues/3410

---
 src/etc/config.xml.sample | 20 +++++---------------
 1 file changed, 5 insertions(+), 15 deletions(-)

diff --git a/src/etc/config.xml.sample b/src/etc/config.xml.sample
index 097b0eac6..0d8b892d6 100644
--- a/src/etc/config.xml.sample
+++ b/src/etc/config.xml.sample
@@ -51,15 +51,6 @@
       <tunable>net.inet.ip.accept_sourceroute</tunable>
       <value>default</value>
     </item>
-    <item>
-      <descr><![CDATA[
-        Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects
-        to the end stations should not be required. This option enables the NIC to drop all inbound ICMP redirect
-        packets without returning a response.
-      ]]></descr>
-      <tunable>net.inet.icmp.drop_redirect</tunable>
-      <value>default</value>
-    </item>
     <item>
       <descr><![CDATA[
         This option turns off the logging of redirect packets because there is no limit and this could fill
@@ -73,11 +64,6 @@
       <tunable>net.inet.tcp.drop_synfin</tunable>
       <value>default</value>
     </item>
-    <item>
-      <descr><![CDATA[Enable sending IPv4 redirects]]></descr>
-      <tunable>net.inet.ip.redirect</tunable>
-      <value>default</value>
-    </item>
     <item>
       <descr><![CDATA[Enable sending IPv6 redirects]]></descr>
       <tunable>net.inet6.ip6.redirect</tunable>
@@ -211,7 +197,11 @@
       <value>0</value>
     </item>
     <item>
-      <descr><![CDATA[Enable/disable dropping of ICMP Redirect packets]]></descr>
+      <descr><![CDATA[
+        Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects
+        to the end stations should not be required. This option enables the NIC to drop all inbound ICMP redirect
+        packets without returning a response.
+      ]]></descr>
       <tunable>net.inet.icmp.drop_redirect</tunable>
       <value>1</value>
     </item>