Re: [ILUG] [OT] Cisco router ip question

From: Ronan Kirby (ronan at domain mediasat.ie)
Date: Thu 24 Feb 2000 - 11:45:45 GMT


> Anyone out there know how to do this? or even if its possible, I want to do
> this to stop spoofed ip packets from leaving my router destined for the
> net...

You can stop spoofed packets leaving your network by applying "Reverse
Path Filtering" on the router. As far as I know all versions of IOS
support it. T'will stop smurf attacks etc. from your network. Any
packets with faked source IPs will just be dropped.

Hope this helps,

Ronan



This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:05:29 GMT