Preventing Spoof Attacks

From: graham@cisco-engineer.com
Date: Thu May 17 2007 - 11:21:31 ART


With regards to preventing ip spoofing;

 

Does the:

            ip verify unicast reverse-path

serve the same function as a :

Deny ip <inside ip's> <inside mask> any

 

If asked in the lab to prevent spoof attacks on an a subnet from the
outside, which is the "most correct" method to use or are both perfectly
valid methods

  _____

I am using the free version of SPAMfighter for private users.
It has removed 742 spam emails to date.
Paying users do not have this message in their emails.
Try SPAMfighter <http://www.spamfighter.com/len> for free now!



This archive was generated by hypermail 2.1.4 : Fri Jun 01 2007 - 06:55:21 ART