RE: Source Address Verification

2001-02-02 Thread Burke, Thomas G.
Yes, but the kernel has to be compiled to support it (The default kernels have this compiled in, so no worry) > -Original Message- > From: Tanner, Robby [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 6:10 PM > To: '[EMAIL PROTECTED]' > Subject

RE: Source Address Verification

2001-02-01 Thread Tanner, Robby
According to the HOWTO, all I need to do is echo "1" > /proc/sys/net/ipv4/conf/*/rp_filter to enable source address verification (see page 38). "The best way to protect from IP spoofing is called Source Address Verification, and it is done by the routing code, and not firewalling at all." __

RE: Source Address Verification

2001-02-01 Thread Burke, Thomas G.
[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 4:33 PM > To: '[EMAIL PROTECTED]' > Subject: RE: Source Address Verification > > But isn't that what SAV does? > > > > -Original Message- > > From: Burke, Thomas G. [mailto:[EMA

RE: Source Address Verification

2001-02-01 Thread Tanner, Robby
But isn't that what SAV does? > -Original Message- > From: Burke, Thomas G. [mailto:[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 3:28 PM > To: '[EMAIL PROTECTED]' > Subject: RE: Source Address Verification > > > never hurts to make s

RE: Source Address Verification

2001-02-01 Thread Burke, Thomas G.
never hurts to make sure someone is really coming from where they say they are... > -Original Message- > From: Tanner, Robby [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 3:31 PM > To: '[EMAIL PROTECTED]'; 'Linux Group (Saskatoon)'; 'Linux (LOSURS > Q&A)' > Subject: