[c-nsp] RES: RES: Bogon Filter - Least Resource/CPU intensive method?

[Leonardo Gama Souza]

Hi Ziv,

There is a nice white paper on cisco.com:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/prod_white_paper0900aecd80313fac.pdf

[]´s

-----Mensagem original-----
De: Ziv Leyes [mailto:zivl at gilat.net] 
Enviada em: domingo, 9 de março de 2008 05:51
Para: Leonardo Gama Souza; cisco-nsp
Assunto: RE: [c-nsp] RES: Bogon Filter - Least Resource/CPU intensive method?

Will someone be kind and share some sample config for rpf and/or implementation recommendations such as required platforms, IOS and so?
Thanks in advance,

Ziv



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Leonardo Gama Souza
Sent: Wednesday, March 05, 2008 4:59 PM
To: cisco-nsp
Subject: [c-nsp] RES: Bogon Filter - Least Resource/CPU intensive method?



Does loose rpf indeed drop packets sourced from null routes?  I know
strict does for certain, and is the least intensive method of blocking
packets sourced from a particular IP/subnet.


Yes, it does. And it works pretty well.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/





************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************





 
 
************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************