[26271] in North American Network Operators' Group
RE: ORBS block
daemon@ATHENA.MIT.EDU (Rubens Kuhl Jr.)
Thu Dec 16 17:07:54 1999
From: "Rubens Kuhl Jr." <rkuhljr@uol.com.br>
To: <nanog@merit.edu>
Cc: "Dean Anderson" <dean@av8.com>
Date: Thu, 16 Dec 1999 20:05:59 -0200
Message-ID: <005501bf4811$bc42c6c0$5cf1e7c8@users.uol.com.br>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
In-Reply-To: <3.0.32.19991216164216.01051ed8@odie.av8.com>
Errors-To: owner-nanog-outgoing@merit.edu
> access-list 104 deny ip 202.36.148.5 0.0.0.255 any
> access-list 104 deny ip 202.36.147.16 0.0.0.255 any
For core routers and other not-access-list-friendly a
#conf t
ip route 202.36.148.0 255.255.255.0 nul0
ip route 202.36.147.0 255.255.255.0 nul0
may be a choice. It will, though, generate some SYN-flooding that would have
to be dealed with at some point.
Does someone know if routes to nul0 will make "ip unicast verify
reverse-path" drop packets from those addresses ?
Rubens Kuhl Jr.
