Is malicious asymmetrical routing still a thing?

Grant Taylor gtaylor at tnetconsulting.net
Fri Mar 10 00:00:43 UTC 2023


On 3/9/23 1:39 PM, William Herrin wrote:
> I would hope folks are implementing uRPF on commodity broadband 
> connections. That's one place it works great.

I would hope so too.

I also would hope that uRPF was enabled by default on SOHO routers.

And yet ... I'm routinely disappointed.

CADIA has a Spoofer probe project that tests this very thing.  I see 
periodic announcements to various mailing lists about their monthly 
results.  --  I'll find one if you care to know more.



-- 
Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4017 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20230309/0fa7a05a/attachment.bin>


More information about the NANOG mailing list