I tried just tried to migrate a MITM attack using
hping3 with ICMP Redirects in my testlab.
hping3 -I eth0 -C 5 -K 1 -a 192.168.2.1 --icmp-ipdst 192.168.2.15 --icmp-gw 192.168.2.100 --icmp-ipsrc 192.168.2.105 192.168.2.105
I'm at 192.168.2.100, the victim is at 192.168.2.105, the DNS-Server is at 220.127.116.11 and the (real) gateway is at 192.168.2.1. Now I wanted to bring the victim to redirect all traffic for the DNS-Server through my Laptop. The generated packets look well in wireshark but the Vicitim (Windows 7) isn't changing its routing table based on the redirect packet.
I looked this up and found some posts implying that Windows 7 in general does not accept ICMP Redirects as an advice for routing. Are there any current Operation Systems that still accept ICMP Redirects?