RE: Source Address Verification

2001-02-02 Thread Burke, Thomas G.
: RE: Source Address Verification > > According to the HOWTO, all I need to do is echo "1" > > /proc/sys/net/ipv4/conf/*/rp_filter to enable source address verification > (see page 38). > > "The best way to protect from IP spoofing is called Source Addres

RE: Source Address Verification

2001-02-01 Thread Tanner, Robby
According to the HOWTO, all I need to do is echo "1" > /proc/sys/net/ipv4/conf/*/rp_filter to enable source address verification (see page 38). "The best way to protect from IP spoofing is called Source Address Verification, and it is done by the routing code, and not

Source Address Verification

2001-02-01 Thread Tanner, Robby
In the ipchains HowTo, it mentions that source address verification can be turned using a little script. This apparently eliminates IP spoofing without having to write specific rules for IPChains. As a relative new-comer, I am looking for some feedback regarding this. Should I or should I not

RE: Source Address Verification

2001-02-01 Thread Burke, Thomas G.
[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 4:33 PM > To: '[EMAIL PROTECTED]' > Subject: RE: Source Address Verification > > But isn't that what SAV does? > > > > -Original Message- > > From: Burke, Thomas G. [mailto:[EMA

RE: Source Address Verification

2001-02-01 Thread Tanner, Robby
But isn't that what SAV does? > -Original Message- > From: Burke, Thomas G. [mailto:[EMAIL PROTECTED]] > Sent: Thursday, February 01, 2001 3:28 PM > To: '[EMAIL PROTECTED]' > Subject: RE: Source Address Verification > > > never hurts to make s

RE: Source Address Verification

2001-02-01 Thread Burke, Thomas G.
'Linux (LOSURS > Q&A)' > Subject: Source Address Verification > > In the ipchains HowTo, it mentions that source address verification can be > turned using a little script. This apparently eliminates IP spoofing > without having to write specific rules for IPCh

RE: IP Source Address Verification

2000-10-26 Thread Ed Lazor
At 01:00 PM 10/26/2000 -0400, you wrote: >This is normal... Filesize is in k, I believe... If you are unshure, hust >type "more to see the contents of the file. Confirmed. thanks for the help =) -Ed ___ Redhat-list mailing list [EMAIL PROTECTED]

RE: IP Source Address Verification

2000-10-26 Thread Burke, Thomas G.
IP Source Address Verification > > Is this now built into RedHat 6.2+ ? > > I was following the IPCHAINS-HOWTO and it gives instructions on how to > turn > on Source Address Verification. I tried and noticed the following command > > seemed to have no effect: > &

Re: IP Source Address Verification

2000-10-26 Thread Steve Dixon
If you cat the file it should show a 1 in it. Ed Lazor wrote: > > Is this now built into RedHat 6.2+ ? > > I was following the IPCHAINS-HOWTO and it gives instructions on how to turn > on Source Address Verification. I tried and noticed the following command > seemed

IP Source Address Verification

2000-10-26 Thread Ed Lazor
Is this now built into RedHat 6.2+ ? I was following the IPCHAINS-HOWTO and it gives instructions on how to turn on Source Address Verification. I tried and noticed the following command seemed to have no effect: echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter The size of the file remain