#!/bin/sh
# DF-0518 root setup — enable ipforwarding + icmplim logging so the
# demonstration of un-rate-limited icmp_error() can run from the
# unprivileged maxx user.  Realistic router-box precondition per the
# finding's threat model.
set -e
sysctl net.inet.ip.forwarding=1
sysctl net.inet.icmp.icmplim=200
sysctl net.inet.icmp.icmplim_output=1
echo "SETUP_EXIT=$?"