[6bone] non-global address space for IXs (was: 2001:478:: as /48)

Haesu haesu@towardex.com
Sun, 7 Sep 2003 18:14:08 -0400


<snip>
> 
> Running uRPF towards our upstream doesn't help that much (we *do* have
> access-list based filters that prevent spoofed packets carrying our
> source addresses from coming in that way) but is much more likely to
> break things.

I second that;although using loose-check uRPF on  upstreams would work fine in
general. My consensus is that 'why should I recv a packet if it does not
exist in routing table?' 

-hc

-- 
Sincerely,
  Haesu C.
  TowardEX Technologies, Inc.
  WWW: http://www.towardex.com
  E-mail: haesu@towardex.com
  Cell: (978) 394-2867