[c-nsp] uRPF Core Internet Routers

Dobbins, Roland rdobbins at arbor.net
Tue Apr 16 23:45:20 EDT 2013

On Apr 17, 2013, at 9:37 AM, Lee wrote:

> Seems to me that the utility of filtering just packets supposedly coming from unannounced IPv4 address space is not all that useful in

My reply included both loose-check and strict-check.

> If someone is going to spoof traffic, it's no harder for them to spoof traffic from advertised than non-advertised space.

Sure - but allocated <> advertised, non-allocated <> not advertised.

Loose-check uRPF also is a prerequisite for S/RTBH.

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the cisco-nsp mailing list