From owner-freebsd-isp@FreeBSD.ORG  Fri Oct  3 06:35:08 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 29E3016A4BF
	for <freebsd-isp@freebsd.org>; Fri,  3 Oct 2003 06:35:08 -0700 (PDT)
Received: from mx01.bos.ma.towardex.com (a65-124-16-8.svc.towardex.com
	[65.124.16.8])	by mx1.FreeBSD.org (Postfix) with ESMTP id 4D7C54400D
	for <freebsd-isp@freebsd.org>; Fri,  3 Oct 2003 06:35:06 -0700 (PDT)
	(envelope-from haesu@mx01.bos.ma.towardex.com)
Received: by mx01.bos.ma.towardex.com (TowardEX ESMTP 3.0p11_DAKN, from userid
	1001)	id 0CD0C2F902; Fri,  3 Oct 2003 09:35:26 -0400 (EDT)
From: Haesu <haesu@towardex.com>
To: Tom <tom@sdf.com>, freebsd-isp@freebsd.org
Message-ID: <20031003133526.GA90744@scylla.towardex.com>
References: <20031003034611.GA59149@scylla.towardex.com>
	<20031002235823.M82361@light.sdf.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20031002235823.M82361@light.sdf.com>
User-Agent: Mutt/1.4.1i
Subject: Re: uRPF on FreeBSD
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
Date: Fri, 03 Oct 2003 13:35:08 -0000
X-Original-Date: Fri, 3 Oct 2003 09:35:26 -0400
X-List-Received-Date: Fri, 03 Oct 2003 13:35:08 -0000

> 
>   Usually RPF is just done with ACLs (ipfw) on FreeBSD.  It can be a
> simple as have a simple input list on each interface that only permits
> sources that are known to be on that interface.  Since most systems aren't
> running a routing protocol, so there aren't many routes and/or they don't
> change often, it is probably the simplest way of doing this.
> 

Yea... I hear that.. Although it'd be nice to have it on FreeBSD :)

Even Linux has that :-/ (Though... I think Linux only does strictmode? I don't remember..)

-hc

-- 
Haesu C.
TowardEX Technologies, Inc.
Consulting, colocation, web hosting, network design and implementation
http://www.towardex.com | haesu@towardex.com
Cell: (978)394-2867     | Office: (978)263-3399 Ext. 170
Fax: (978)263-0033      | POC: HAESU-ARIN