ip verify unicast rpf vs acls on cisco routers?

2003-03-24 Thread McKenzie Family
To drop spoofed packets can you just implement ip verify unicast rpf on border routers instead of creating a whole bunch of spoofing ACL's? Or should you put both? Regards --- SurfControl E-mail Filter puts the brakes on spam,

Checkpoint NG - SMTP Guard Features

2003-02-20 Thread McKenzie Family
Hi. Is there a feature on the Checkpoint NG that enforces RFC 821 (4.5.1) on commands. (Simmilar to PIX's MailGuard? Regards, Nick

Re: how to search all machines on a network.

2002-12-09 Thread McKenzie Family
Cheops.. Will do OS regonition, and give you a nice little diagram at the end of it...

Re: IIS running with least privs..

2002-11-06 Thread McKenzie Family
Guys, Is it possible to make the IIS application itself run with as little as possible privs on the windows box itself? Its to my understanding that it runs with system privs... Can this be changed some how? Or is it essential? Regards

Cisco PIX - Anti Spoof - ip verify reverse -path

2002-10-21 Thread McKenzie Family
Hi guys, Can the command IP verify reverse-path command (http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/gl. htm#xtocid11) be used on internal firewalls??? ie...Will internal source addresses be knocked back if this is put in on an internal FW if a route is present?