nanog mailing list archives

RE: ORBS block


From: "Rubens Kuhl Jr." <rkuhljr () uol com br>
Date: Thu, 16 Dec 1999 20:05:59 -0200


access-list 104 deny ip 202.36.148.5 0.0.0.255 any
access-list 104 deny ip 202.36.147.16 0.0.0.255 any

For core routers and other not-access-list-friendly a
#conf t
ip route 202.36.148.0 255.255.255.0 nul0
ip route 202.36.147.0 255.255.255.0 nul0


may be a choice. It will, though, generate some SYN-flooding that would have
to be dealed with at some point.

Does someone know if routes to nul0 will make "ip unicast verify
reverse-path" drop packets from those addresses ?




Rubens Kuhl Jr.







Current thread: