North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
RE: ORBS block
> access-list 104 deny ip 220.127.116.11 0.0.0.255 any > access-list 104 deny ip 18.104.22.168 0.0.0.255 any For core routers and other not-access-list-friendly a #conf t ip route 22.214.171.124 255.255.255.0 nul0 ip route 126.96.36.199 255.255.255.0 nul0 may be a choice. It will, though, generate some SYN-flooding that would have to be dealed with at some point. Does someone know if routes to nul0 will make "ip unicast verify reverse-path" drop packets from those addresses ? Rubens Kuhl Jr.