[13998] in North American Network Operators' Group
Re: Land and Cisco question
daemon@ATHENA.MIT.EDU (Dean Anderson)
Mon Nov 24 20:03:46 1997
In-Reply-To: <Pine.NEB.3.95.971123115214.274B-100000@apb.iafrica.com>
Date: Mon, 24 Nov 1997 19:38:49 -0500
To: Alan Barrett <apb@iafrica.com>, nanog@merit.edu
From: Dean Anderson <dean@av8.com>
At 4:54 AM -0500 11/23/97, Alan Barrett wrote:
>Randy Bush said:
>> for each interface on a router
>> block tcp which is both to and from that interface
>
>I don't think that's sufficient. What about spoofed packets arriving via
>interface A, with IP source and destination both set to the address of
>interface B?
In this case the packets must eventually be transmitted via interface B and
Interface B transmit rules should take care of that.
--Dean
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Plain Aviation, Inc dean@av8.com
LAN/WAN/UNIX/NT/TCPIP http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
