Hi, On Sat, Mar 16, 2013 at 03:59:25PM -0700, Laurent Geyer wrote: > Curious, how does uRPF help under this scenario? Although the source address > is spoofed, the target is stil valid destination address.
uRPF helps everybody else - those of your customers with infected machines
(and don't claim there aren't any) will not be able to initiate reflection
attacks against other folks.
gert,
deploying uRPF since 10+ years "it's really not that hard"
(PS: and yes, the fact that Sup720 can't do IPv6 uRPF in hardware stinks)
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpBkWfiyocp5.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
