[c-nsp] RES: Bogon Filter - Least Resource/CPU intensive method?

Ziv Leyes zivl at gilat.net
Sun Mar 9 04:51:15 EDT 2008


Will someone be kind and share some sample config for rpf and/or implementation recommendations such as required platforms, IOS and so?
Thanks in advance,

Ziv



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Leonardo Gama Souza
Sent: Wednesday, March 05, 2008 4:59 PM
To: cisco-nsp
Subject: [c-nsp] RES: Bogon Filter - Least Resource/CPU intensive method?



Does loose rpf indeed drop packets sourced from null routes?  I know
strict does for certain, and is the least intensive method of blocking
packets sourced from a particular IP/subnet.


Yes, it does. And it works pretty well.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/





************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************





 
 
************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************




More information about the cisco-nsp mailing list