Re: SMURF amplifier block list

[shields () crosslink net (Michael Shields)]

In article <Pine.BSF.3.96.980414033154.4326B-100000 () workhorse iMach com>,
"Forrest W. Christian" <forrestc () iMach com> wrote:
> On another note, could someone please mention again which IOS has the cool
> "drop all packets from an interface which we don't have a matching route
> pointing the other direction" feature?

11.1CC.  I think the command is `ip verify unicast reverse-path' in
the interface config.

It works on the CEF table, so you *must* enable CEF, or it will just
drop all packets.
-- 
Shields, CrossLink.