Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 4 Oct 1999 00:10:28 +0200
From:      Ollivier Robert <roberto@keltia.freenix.fr>
To:        FreeBSD Security ML <freebsd-security@FreeBSD.ORG>
Subject:   Re: anti-spoofing
Message-ID:  <19991004001028.A1795@keltia.freenix.fr>
In-Reply-To: <10882.991003@cityline.ru>
References:  <10882.991003@cityline.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
According to Dmitriy Bokiy:
> Where can I find _the complete_ list of addresses to be blocked?

RFC-1918.

It includes the following networks:

        10.0.0.0/8      (in old pre-CIDR world, a A-class network)
        172.16.0.0/12   (in old pre-CIDR world, 16 B-class networks)
        192.168.0.0/16  (in old pre-CIDR world, 256 C-class networks).

Don't forget to refuse your own prefixes on your incoming interface... That
is, if you have a.b.c.d/n, you need to refuse this prefix on the incoming
interface of your router.
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr
FreeBSD keltia.freenix.fr 4.0-CURRENT #74: Thu Sep  9 00:20:51 CEST 1999



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991004001028.A1795>