SMURF amplifier block list

Michael Shields shields at crosslink.net
Tue Apr 14 10:38:42 UTC 1998


In article <Pine.BSF.3.96.980414033154.4326B-100000 at workhorse.iMach.com>,
"Forrest W. Christian" <forrestc at iMach.com> wrote:
> On another note, could someone please mention again which IOS has the cool
> "drop all packets from an interface which we don't have a matching route
> pointing the other direction" feature?

11.1CC.  I think the command is `ip verify unicast reverse-path' in
the interface config.

It works on the CEF table, so you *must* enable CEF, or it will just
drop all packets.
-- 
Shields, CrossLink.



More information about the NANOG mailing list