RE: Using Policy Routing to stop DoS attacks

[Jim Deleskie <jdeleski () rci rogers com>]

> If you fooled the router into thinking that the reverse path for the
> source is on another another interface and then used strict unicast RPF
> checking, that may accomplish what you want without using ACLs.  I don't
> know what impact it would have on your CPU however, you'll have to
> investigate or provide more details.


However you'd also risk loosing any traffic that was asymmetric in nature.


-Jim