Re: Reflexive AL and CBAC

From: Dimitris Vassilopoulos (Dimitris.Vassilopoulos@eurodyn.com)
Date: Thu Oct 17 2002 - 11:37:39 GMT-3

• Next message: chenyan: "serial interface up and down"
• Previous message: dburnett: "Re: EBGP Multihop's necessity with loopback addresses"
• Maybe in reply to: Sam.MicroGate@usa.telekom.de: "Reflexive AL and CBAC"
• Next in thread: mdye@bevillcntr.org: "RE: Reflexive AL and CBAC"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Both produce the same output.

Accepting packets from the outside only if they are responses from oubound
connections
was impossible before reflexive acls were figured (using non firewall IOS).

After reflexive acls were introduced, routers running simple IP software can
have basic
"firewall" behaivour.

Dimitris

• Next message: chenyan: "serial interface up and down"
• Previous message: dburnett: "Re: EBGP Multihop's necessity with loopback addresses"
• Maybe in reply to: Sam.MicroGate@usa.telekom.de: "Reflexive AL and CBAC"
• Next in thread: mdye@bevillcntr.org: "RE: Reflexive AL and CBAC"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:49 GMT-3