North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: ORBS block

  • From: Rubens Kuhl Jr.
  • Date: Thu Dec 16 17:08:32 1999 
> access-list 104 deny ip 202.36.148.5 0.0.0.255 any
> access-list 104 deny ip 202.36.147.16 0.0.0.255 any

For core routers and other not-access-list-friendly a
#conf t
ip route 202.36.148.0 255.255.255.0 nul0
ip route 202.36.147.0 255.255.255.0 nul0


may be a choice. It will, though, generate some SYN-flooding that would have
to be dealed with at some point.

Does someone know if routes to nul0 will make "ip unicast verify
reverse-path" drop packets from those addresses ?




Rubens Kuhl Jr.