Home page logo
/

nanog logo nanog mailing list archives

Re: SMURF amplifier block list
From: shields () crosslink net (Michael Shields)
Date: 14 Apr 1998 10:38:42 +0000

In article <Pine.BSF.3.96.980414033154.4326B-100000 () workhorse iMach com>,
"Forrest W. Christian" <forrestc () iMach com> wrote:
On another note, could someone please mention again which IOS has the cool
"drop all packets from an interface which we don't have a matching route
pointing the other direction" feature?

11.1CC.  I think the command is `ip verify unicast reverse-path' in
the interface config.

It works on the CEF table, so you *must* enable CEF, or it will just
drop all packets.
-- 
Shields, CrossLink.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]