North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Land and Cisco question

  • From: Randy Bush
  • Date: Sun Nov 23 10:46:05 1997

>>> for each interface on a router
>>>   block tcp which is both to and from that interface
>> I don't think that's sufficient.  What about spoofed packets arriving via
>> interface A, with IP source and destination both set to the address of
>> interface B? 
> no ip source-route should fix it.

<insert replay of we don't peer with LSR inhibitors discussion>  Though temp
inhibit until YFRV deploys fixed code is understandable.

randy