North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Land and Cisco question

  • From: Owen DeLong
  • Date: Mon Nov 24 01:04:33 1997 
> Randy Bush said:
> > for each interface on a router
> >   block tcp which is both to and from that interface
> 
> I don't think that's sufficient.  What about spoofed packets arriving via
> interface A, with IP source and destination both set to the address of
> interface B? 
> 
> --apb (Alan Barrett)
> 
> 
If you do it with an access-list in then it doesn't matter.  Even a spoofed packet
will be blocked prior to arriving where it can do harm.

Owen