ORBS block

Thu Dec 16 22:05:59 UTC 1999

> access-list 104 deny ip 202.36.148.5 0.0.0.255 any
> access-list 104 deny ip 202.36.147.16 0.0.0.255 any

For core routers and other not-access-list-friendly a
#conf t
ip route 202.36.148.0 255.255.255.0 nul0
ip route 202.36.147.0 255.255.255.0 nul0

may be a choice. It will, though, generate some SYN-flooding that would have
to be dealed with at some point.

Does someone know if routes to nul0 will make "ip unicast verify
reverse-path" drop packets from those addresses ?

Rubens Kuhl Jr.