Andre Oppermann
22b5770b99
Add the option versrcreach to verify that a valid route to the ...
source address of a packet exists in the routing table. The
default route is ignored because it would match everything and
render the check pointless.
This option is very useful for routers with a complete view of
the Internet (BGP) in the routing table to reject packets with
spoofed or unrouteable source addresses.
Example:
ipfw add 1000 deny ip from any to any not versrcreach
also known in Cisco-speak as:
ip verify unicast source reachable-via any
Reviewed by: luigi
2004-04-23 14:28:38 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-13 02:58:06 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-01 20:31:49 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-20 11:41:57 +00:00
2004-04-04 13:32:00 +00:00
2004-04-04 04:17:07 +00:00
2004-04-15 16:12:12 +00:00
2004-04-13 11:24:43 +00:00
2004-04-09 19:58:40 +00:00
2004-04-23 14:28:38 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-13 11:24:43 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-13 02:58:06 +00:00
2004-04-13 11:24:43 +00:00
2004-04-13 11:24:43 +00:00
2004-04-09 19:58:40 +00:00
2004-03-31 18:38:02 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
2004-04-09 19:58:40 +00:00
22b5770b99