andre d4f49f008f Add the option versrcreach to verify that a valid route to the
source address of a packet exists in the routing table.  The
default route is ignored because it would match everything and
render the check pointless.

This option is very useful for routers with a complete view of
the Internet (BGP) in the routing table to reject packets with
spoofed or unrouteable source addresses.

Example:

 ipfw add 1000 deny ip from any to any not versrcreach

also known in Cisco-speak as:

  ip verify unicast source reachable-via any

Reviewed by:	luigi
2004-04-23 14:28:38 +00:00
..
2004-04-18 06:24:51 +00:00
2004-02-21 21:32:15 +00:00
2004-04-21 15:27:36 +00:00
2004-04-20 14:53:35 +00:00
2004-04-20 13:36:44 +00:00
2004-04-11 06:02:24 +00:00
2004-04-16 05:22:11 +00:00