On 31 March 2010 19:27, N. Arley Dealey <arley.dea...@gmail.com> wrote: > It would appear to me that antispoof and URPF achieve similar results. Is > there a reason to prefer one over the other?
Not at all. antispoof blocks ip packets that came in from the wrong interface, while URPF blocks packets from "aliens" (no entry in routing table for the source address). Just look at the output of pfctl -sr -- The best the little guy can do is what the little guy does right
