nanog mailing list archives

Re: Cisco vulnerability and dangerous filtering techniques


From: Scott McGrath <mcgrath () fas harvard edu>
Date: Wed, 23 Jul 2003 12:32:25 -0400




Another argument for OSPF authentication it seems. However we are still out of luck in the STP announcements unless you configure all the neat little *guard features (bpdu,root etc) from Cisco et al.



On Wednesday, July 23, 2003, at 12:34 PM, alex () yuriev com wrote:


Like I said, it's not going to be perfect, but it is better than blindly
spewing out evil packets.

Between me and you, ospf packets or bad stp packets are a lot more dangerous
than the whack a cisco router. Just try it.

Alex


Current thread: