From owner-freebsd-security Tue Jan 18 11:19:52 2000 Delivered-To: freebsd-security@freebsd.org Received: from pau-amma.whistle.com (pau-amma.whistle.com [207.76.205.64]) by hub.freebsd.org (Postfix) with ESMTP id 92FF2150E8 for ; Tue, 18 Jan 2000 11:17:45 -0800 (PST) (envelope-from dhw@whistle.com) Received: (from dhw@localhost) by pau-amma.whistle.com (8.9.2/8.9.2) id LAA76938; Tue, 18 Jan 2000 11:17:45 -0800 (PST) Date: Tue, 18 Jan 2000 11:17:45 -0800 (PST) From: David Wolfskill Message-Id: <200001181917.LAA76938@pau-amma.whistle.com> To: matt@ARPA.MAIL.NET Subject: Re: TCP/IP Cc: freebsd-security@freebsd.org In-Reply-To: Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Date: Tue, 18 Jan 2000 12:53:12 -0500 >From: matt >I would love to talk my uplink (uunet.ca) into filtering certain things >before they pass it on to my router, wish they would =/ Besides that, I >filter syn,fin, icmp, all udp except ntp/dns, besides that, I don't think >there is much that I can do. Put another router in series with it. Use an RFC 1918 "private net" numbering scheme for that (pathological) network, which then becomes an effective "demarc" between uunet.ca's responsibility/ability and yours. This generalizes, within reason. (Yes, it adds latency, too....) Cheers, david -- David Wolfskill dhw@whistle.com UNIX System Administrator voice: (650) 577-7158 pager: (888) 347-0197 FAX: (650) 372-5915 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message