On Thu, Mar 16, 2000 at 07:06:31AM +0100, Mikael Schmidt wrote:
> my ISP notified me a week ago that my internal ip, 192.168.1.1, is leaking 
> out on their net.

Leaking of internal addresses should be avoided on every border router by
simply filtering all outbound packets (requiring valid sender ip).

This is also good for preventing your users (or customers in case of a ISP)
to spoof ip.

With that filter in place you will easyly find the offending packets in your
logfile.

Greetings
Bernd
-- 
  (OO)      -- [EMAIL PROTECTED] --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes@irc  +497257930613  BE5-RIPE
(O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to