Re: Hide trace-route -

From: Richard Gallagher (rgallagh@cisco.com)
Date: Tue May 11 2004 - 12:26:28 GMT-3


Well you can drop locally generated packets with PBR:

access-list 101 permit icmp any any eq .......

route-map drop-local
  match ip add 101
  set interface null0

ip local policy route-map drop-local

HTH, Rich

On Tue, 2004-05-11 at 17:19, Dan wrote:
> If only I was told about it earlier :)
>
> Can you please provide a url for that? Thanks!
>
> On Tue, 11 May 2004 23:12:16 +0800, William Chen <kwchen@netvigator.com>
> wrote:
>
> > No, you can't do that, coz outbound ACL doesn't filter locally generated
> > traffic.
> >
> > Best Regards,
> > William Chen
> >
> > ----- Original Message -----
> > From: "Dong Lin" <dlin22@comcast.net>
> > To: <ccielab@groupstudy.com>
> > Sent: Tuesday, May 11, 2004 10:05 AM
> > Subject: Re: Hide trace-route -
> >
> >
> >> Maybe an ACL can do the trick. Simply block your own response but allow
> >> others to go through.
> >>
> >>
> >> ----- Original Message -----
> >> From: "Casey, Paul (6822)" <Paul.Casey@o2.com>
> >> To: <ccielab@groupstudy.com>
> >> Sent: Monday, May 10, 2004 6:05 PM
> >> Subject: Hide trace-route -
> >>
> >>
> >> > Hi,
> >> >
> >> > I want to make a router invisible to a trace route session, so when a
> >> user
> >> > does a trace-route they don't see this router but will see futher
> > upstream
> >> > routers ok.
> >> >
> >> > How can I do this.
> >> >
> >> > Thanks in advance..
> >> >
> >> >
> >> >
> >> > Paul Casey
> >> > Core Networks department
> >> > Products & Services, Create & Optimise
> >> > Technology
> >> > O2 Ireland
> >> >
> >> > Desk: +353 1 6096822
> >> > Fax:+353 86 5 8143310
> >> > Mobile: +353 86 8143310
> >> > Email: paul.casey@o2.com
> >> > Web: www.o2.com
> >> >
> >> >
> >> >
> >>
> > ****************************************************************************
> >> ************
> >> > Please note as of 31st March 2004 we will not be accepting any email
> >> to
> >> > Digifone.com addresses. From this date please send all emails to
> >> O2.com.
> >> > This E-mail is from O2. The E-mail and any files
> >> > transmitted with it are confidential and may also be privileged and
> >> intended
> >> > solely for the use of the individual or entity to whom they are
> > addressed.
> >> > Any unauthorised direct or indirect dissemination, distribution or
> > copying
> >> > of this message and any attachments is strictly prohibited. If you
> >> have
> >> > received the E-mail in error please notify postmaster@O2.com or
> >> > telephone ++ 353 1 6095000.
> >> >
> >> >
> >>
> > ****************************************************************************
> >> *************
> >> >
> >> >
> >> _______________________________________________________________________
> >> > Please help support GroupStudy by purchasing your study materials
> >> from:
> >> > http://shop.groupstudy.com
> >> >
> >> > Subscription information may be found at:
> >> > http://www.groupstudy.com/list/CCIELab.html
> >>
> >> _______________________________________________________________________
> >> Please help support GroupStudy by purchasing your study materials from:
> >> http://shop.groupstudy.com
> >>
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> > _______________________________________________________________________
> > Please help support GroupStudy by purchasing your study materials from:
> > http://shop.groupstudy.com
> >
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:09 GMT-3