Hi all, Is there by any chance work being done on pf to include functionality that is present in FreeBSD ipfw, that checks if packet entered router via correct interface as pointed out by routing table?
I know there is antispoof, but it's simple check of connected network and interface address, not full lookup to routing table contents. On ipfw it's called verrevpath (checking if routing table points for this source IP to the interface it came on) and versrcreach (the same but default and blackhole routes don't count). -- this space was intentionally left blank | Łukasz Bromirski you can insert your favourite quote here | lukasz:bromirski,net _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"
