Date: Mon, 8 Mar 2004 11:21:19 -0500 From: Barney Wolff <barney@databus.com> To: current@freebsd.org Subject: [hrlinneweh@sbcglobal.net: Re: Source address validation (was Re: UUNet Offer New Protection Against DDoS)] Message-ID: <20040308162119.GA39373@pit.databus.com>
next in thread | raw e-mail | index | archive | help
The following may be of some interest, given the recent laudable effort to add urpf to fbsd. I'll note that anyone with does want default to validate any source address can always add 0/1 and 128/1 instead of default to achieve the same effect. ----- Forwarded message from Henry Linneweh <hrlinneweh@sbcglobal.net> ----- Delivered-To: nanog@merit.edu Date: Mon, 8 Mar 2004 07:09:50 -0800 (PST) From: Henry Linneweh <hrlinneweh@sbcglobal.net> Subject: Re: Source address validation (was Re: UUNet Offer New Protection Against DDoS) To: nanog-post@rsuc.gweep.net, nanog@merit.edu Here is some insight on this issue What is Unicast Reverse Path Forwarding (uRPF)? Can a default route 0.0.0.0/0 be used to perform a uRPF check? http://www.cisco.com/warp/public/105/44.html#Q18 -Henry ----- End forwarded message ----- -- Barney Wolff http://www.databus.com/bwresume.pdf I'm available by contract or FT, in the NYC metro area or via the 'Net.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040308162119.GA39373>