nanog mailing list archives
Re: Land and Cisco question
From: Alan Barrett <apb () iafrica com>
Date: Sun, 23 Nov 1997 11:54:06 +0200 (GMT+0200)
Randy Bush said:
for each interface on a router block tcp which is both to and from that interface
I don't think that's sufficient. What about spoofed packets arriving via interface A, with IP source and destination both set to the address of interface B? --apb (Alan Barrett)
Current thread:
- Land and Cisco question Hank Nussbacher (Nov 22)
- Re: Land and Cisco question John Bashinski (Nov 22)
- <Possible follow-ups>
- Re: Land and Cisco question Hank Nussbacher (Nov 22)
- Re: Land and Cisco question Randy Bush (Nov 22)
- Re: Land and Cisco question Alex Bligh (Nov 22)
- Re: Land and Cisco question Paul Ferguson (Nov 22)
- Re: Land and Cisco question Alan Barrett (Nov 23)
- Re: Land and Cisco question Joe Shaw (Nov 23)
- Re: Land and Cisco question Randy Bush (Nov 23)
- why not peer with LS disabling networks ? Lyndon Levesley (Nov 23)
- Re: why not peer with LS disabling networks ? John Hawkinson (Nov 23)
- Re: why not peer with LS disabling networks ? Randy Bush (Nov 23)
- Re: why not peer with LS disabling networks ? Paul Ferguson (Nov 24)
- Re: why not peer with LS disabling networks ? Network Operations Center (Nov 24)
- Re: why not peer with LS disabling networks ? John Hawkinson (Nov 24)
- Re: why not peer with LS disabling networks ? Neil J. McRae (Nov 25)
- Re: Land and Cisco question Randy Bush (Nov 22)
- Re: Land and Cisco question Dean Anderson (Nov 24)