North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: address spoofing

  • From: bmanning
  • Date: Thu Apr 22 20:53:20 1999 
> > anyone have clues other than net slime and misconfigured nats?
> 
> I actually have never seen a NAT box do this (but would like to hear
> about such cases). The NAT implementations I've worked with have been
> extremely good about avoiding leaks.

On a related issue, yesterday I discovered a number of sites that
claimed to have a firewall in place with RFC 1918 space on one side
and Internet space on the other.  on investigation, it turned out
that the firwall was a router, routing the RFC 1918 space and consisted of 
specific ACLs for services.

I came away impressed.

--bill