North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Land and Cisco question
>>> for each interface on a router >>> block tcp which is both to and from that interface >> I don't think that's sufficient. What about spoofed packets arriving via >> interface A, with IP source and destination both set to the address of >> interface B? > no ip source-route should fix it. <insert replay of we don't peer with LSR inhibitors discussion> Though temp inhibit until YFRV deploys fixed code is understandable. randy
|