[16166] in North American Network Operators' Group
Re: SMURF amplifier block list
daemon@ATHENA.MIT.EDU (Michael Shields)
Tue Apr 14 06:42:46 1998
From: shields@crosslink.net (Michael Shields)
Mail-Copies-To: never
To: "Forrest W. Christian" <forrestc@iMach.com>
Cc: "Alex P. Rudnev" <alex@Relcom.EU.net>, Vadim Antonov <avg@pluris.com>,
Karl Denninger <karl@mcs.net>, Dean Anderson <dean@av8.com>,
"Jay R. Ashworth" <jra@scfn.thpl.lib.fl.us>, nanog@merit.edu
Date: 14 Apr 1998 10:38:42 +0000
In-Reply-To: "Forrest W. Christian"'s message of "Tue, 14 Apr 1998 03:39:10 -0600 (MDT)"
In article <Pine.BSF.3.96.980414033154.4326B-100000@workhorse.iMach.com>,
"Forrest W. Christian" <forrestc@iMach.com> wrote:
> On another note, could someone please mention again which IOS has the cool
> "drop all packets from an interface which we don't have a matching route
> pointing the other direction" feature?
11.1CC. I think the command is `ip verify unicast reverse-path' in
the interface config.
It works on the CEF table, so you *must* enable CEF, or it will just
drop all packets.
--
Shields, CrossLink.
