SMURF amplifier block list

Michael Shields shields at
Tue Apr 14 10:38:42 UTC 1998

In article <Pine.BSF.3.96.980414033154.4326B-100000 at>,
"Forrest W. Christian" <forrestc at> wrote:
> On another note, could someone please mention again which IOS has the cool
> "drop all packets from an interface which we don't have a matching route
> pointing the other direction" feature?

11.1CC.  I think the command is `ip verify unicast reverse-path' in
the interface config.

It works on the CEF table, so you *must* enable CEF, or it will just
drop all packets.
Shields, CrossLink.

More information about the NANOG mailing list