Managing ACL exceptions (was Re: Filter NTP traffic by packet size?)

Sat Mar 1 02:41:39 UTC 2014

On Mar 1, 2014, at 9:14 AM, Keegan Holley <no.spam at comcast.net> wrote:

> +1 in my experience uRPF get’s enabled, breaks something or causes confusion (usually related to multi-homing) and then get’s disabled.

Enabling loose-check - even with allow-default - is useful solely for S/RTBH, if nothing else.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton