Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Oct 1999 11:38:46 +0200
From:      sthaug@nethelp.no
To:        avalon@coombs.anu.edu.au
Cc:        jkb@best.com, roberto@keltia.freenix.fr, freebsd-security@FreeBSD.ORG
Subject:   Re: anti-spoofing
Message-ID:  <67021.939893926@verdi.nethelp.no>
In-Reply-To: Your message of "Thu, 14 Oct 1999 19:24:19 %2B1000 (EST)"
References:  <199910140924.TAA27074@cheops.anu.edu.au>

next in thread | previous in thread | raw e-mail | index | archive | help
> >  deny   ip 224.0.0.0 0.15.255.255 any log
> 
> That's a bad range to block - well, maybe not if you have no intention of using multicast.

No, it's a good range to block. Always. Because you never want to have
multicast addresses as *source* address.

Steinar Haug, Nethelp consulting, sthaug@nethelp.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?67021.939893926>