Re: PF: antispoof vs URPF

2010-04-06 Thread N. Arley Dealey
Many thanks to all who have replied. For my needs (which are pretty simple), Occam dictates using antispoof. But I've learned much about URPF from the discussion. It's been very interesting.

Re: PF: antispoof vs URPF

2010-04-05 Thread Stuart Henderson
On 2010-04-04, Eugene Yunak wrote: > On 4 April 2010 18:56, Pete Vickers wrote: >> On 31. mars 2010, at 20.01, Claudio Jeker wrote: >> >>> On Wed, Mar 31, 2010 at 08:08:01PM +0300, Eugene Yunak wrote: On 31 March 2010 19:27, N. Arley Dealey wrote: > It would appear to me that antispoof

Re: PF: antispoof vs URPF

2010-04-04 Thread Eugene Yunak
On 4 April 2010 18:56, Pete Vickers wrote: > On 31. mars 2010, at 20.01, Claudio Jeker wrote: > >> On Wed, Mar 31, 2010 at 08:08:01PM +0300, Eugene Yunak wrote: >>> On 31 March 2010 19:27, N. Arley Dealey wrote: It would appear to me that antispoof and URPF achieve similar results. Is t

Re: PF: antispoof vs URPF

2010-04-04 Thread Pete Vickers
On 31. mars 2010, at 20.01, Claudio Jeker wrote: > On Wed, Mar 31, 2010 at 08:08:01PM +0300, Eugene Yunak wrote: >> On 31 March 2010 19:27, N. Arley Dealey wrote: >>> It would appear to me that antispoof and URPF achieve similar results. Is >>> there a reason to prefer one over the other? >> >> N

Re: PF: antispoof vs URPF

2010-03-31 Thread Claudio Jeker
On Wed, Mar 31, 2010 at 08:08:01PM +0300, Eugene Yunak wrote: > On 31 March 2010 19:27, N. Arley Dealey wrote: > > It would appear to me that antispoof and URPF achieve similar results. Is > > there a reason to prefer one over the other? > > Not at all. antispoof blocks ip packets that came in fr

Re: PF: antispoof vs URPF

2010-03-31 Thread Dave Anderson
On Wed, 31 Mar 2010, Eugene Yunak wrote: >On 31 March 2010 19:27, N. Arley Dealey wrote: >> It would appear to me that antispoof and URPF achieve similar results. Is >> there a reason to prefer one over the other? > >Not at all. antispoof blocks ip packets that came in from the wrong >interface,

Re: PF: antispoof vs URPF

2010-03-31 Thread Eugene Yunak
On 31 March 2010 19:27, N. Arley Dealey wrote: > It would appear to me that antispoof and URPF achieve similar results. Is > there a reason to prefer one over the other? Not at all. antispoof blocks ip packets that came in from the wrong interface, while URPF blocks packets from "aliens" (no entr

PF: antispoof vs URPF

2010-03-31 Thread N. Arley Dealey
It would appear to me that antispoof and URPF achieve similar results. Is there a reason to prefer one over the other?