[6bone] non-global address space for IXs (was: 2001:478:: as /48)
Haesu
haesu@towardex.com
Sun, 7 Sep 2003 18:14:08 -0400
<snip>
>
> Running uRPF towards our upstream doesn't help that much (we *do* have
> access-list based filters that prevent spoofed packets carrying our
> source addresses from coming in that way) but is much more likely to
> break things.
I second that;although using loose-check uRPF on upstreams would work fine in
general. My consensus is that 'why should I recv a packet if it does not
exist in routing table?'
-hc
--
Sincerely,
Haesu C.
TowardEX Technologies, Inc.
WWW: http://www.towardex.com
E-mail: haesu@towardex.com
Cell: (978) 394-2867