Land and Cisco question
Joe Shaw
jshaw at insync.net
Mon Nov 24 08:17:12 UTC 1997
On Sun, 23 Nov 1997, Owen DeLong wrote:
>
> > Randy Bush said:
> > > for each interface on a router
> > > block tcp which is both to and from that interface
> >
> > I don't think that's sufficient. What about spoofed packets arriving via
> > interface A, with IP source and destination both set to the address of
> > interface B?
> >
> > --apb (Alan Barrett)
> >
> >
> If you do it with an access-list in then it doesn't matter. Even a spoofed packet
> will be blocked prior to arriving where it can do harm.
>
> Owen
Like the cat in the hat, but I think I follow. I'll come back to this
when I'm well and hopefully I'll actually get what you're saying. This
flu is killer.
Wait... Ok. So I could still kill external links, regardless of source
routing. I was only thinking of internal links. If I'm still wrong,
somebody let me know.
Joe Shaw - jshaw at insync.net
NetAdmin - Insync Internet Services.
More information about the NANOG
mailing list