blocking same src/dst traffic (land attacks?)
dufresne at sysinfo.com
Fri Apr 1 08:56:01 CEST 2005
-----BEGIN PGP SIGNED MESSAGE-----
On Fri, 1 Apr 2005, Akolinare wrote:
>> What type of rule could you write to block same src/dst traffic. This is
>> inregards to blocking land attacks coming in from the outside interface.
> I have rules blocking incoming traffic with source ip-addresses from my own network. If you don't have a transit gateway this should be a simple solution to avoid land attacks.
Is all that really needed? I was of the impression that;
echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter
did the trick...
admin & senior security consultant: sysinfo.com
...Love is the ultimate outlaw. It just won't adhere to rules.
The most any of us can do is sign on as it's accomplice. Instead
of vowing to honor and obey, maybe we should swear to aid and abet.
That would mean that security is out of the question. The words
"make" and "stay" become inappropriate. My love for you has no
strings attached. I love you for free...
-Tom Robins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the netfilter