Re: philosophical question regarding NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Re: philosophical question regarding NAT
From: Ian Laurie <iml@xxxxxxxxxx>
Date: Wed, 11 May 2005 09:12:09 +0000
In-reply-to: <d5q590$fsv$1@sea.gmane.org> (from Vasilii.Alferov@gmail.com on Tue May 10 21:25:19 2005)
References: <1115723584l.29661l.0l@server.moose.blogdns.org> <d5q590$fsv$1@sea.gmane.org>
Sender: netfilter-bounces@xxxxxxxxxxxxxxxxxxx

More effective solution is to enable rp_filter in kernel using proc
filesystem or sysctl. It prevents anyone from spoofing IP addresses.


DOH!!  How right you are..... rp_filter slipped my mind completely.

Thank you for reminding me.

Ian

References:
- philosophical question regarding NAT
  - From: Ian Laurie
- Re: philosophical question regarding NAT
  - From: Vasilii.Alferov

Prev by Date: Re: Two link adsl on the same server
Next by Date: no Tarpit for debian kernel
Previous by thread: Re: philosophical question regarding NAT
Next by thread: Re: philosophical question regarding NAT
Index(es):
- Date
- Thread

[Index of Archives] [Linux Netfilter Development] [Linux Kernel Networking Development] [Netem] [Berkeley Packet Filter] [Linux Kernel Development] [Advanced Routing & Traffice Control] [Bugtraq]

Powered by Linux