[c-nsp] uRPF Core Internet Routers

[Dobbins, Roland]

On Apr 17, 2013, at 9:37 AM, Lee wrote:

> Seems to me that the utility of filtering just packets supposedly coming from unannounced IPv4 address space is not all that useful in

My reply included both loose-check and strict-check.

> If someone is going to spoof traffic, it's no harder for them to spoof traffic from advertised than non-advertised space.

Sure - but allocated <> advertised, non-allocated <> not advertised.

Loose-check uRPF also is a prerequisite for S/RTBH.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton