Re: (PM) filter for land attach

Wayne Bouchard (web@typo.org)
Fri, 21 Nov 1997 23:21:40 -0700 (MST)

Not really.. you take an interface, and inbound to the interface, you
deny packets originating from that interface address. (You'll never
see a packet sourced from the router appear on an external
interface.. like talking to yourself via telephone.) Classic IP spoof
filter.

> On Fri, 21 Nov 1997, Russ Hughes wrote:
>
> > I don't think you can for outgoing but you should be able to for
> > incomming.
> >
> > deny 192.168.1.1/32 192.168.1.1/32 <--- first assigned ip
> > ...
> > deny 192.168.1.30/32 192.168.1.30/32 <--- last assigned ip
> > permit 0.0.0.0/0 0.0.0.0/0
> >
> > Is this correct or am I missing something here?
>
> is it that simple? What are you denying? Everything?
>
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
> Jake Messinger 713-772-6690 jake@ams.com
> Advanced Medical Systems, Inc. jake@uh.edu
> 8300 Bissonnet #400 fax: 713-774-3498
> Houston, Texas 77074 http://www.ams.com/~jake
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
>
> -
> To unsubscribe, email 'majordomo@livingston.com' with
> 'unsubscribe portmaster-users' in the body of the message.
>
>

----------------------------------------------------------------------
Wayne Bouchard GlobalCenter
web@primenet.com
Primenet Network Operations Internet Solutions for
(602) 416-6422 800-373-2499 x6422 Growing Businesses
FAX: (602) 416-9422
http://www.primenet.com http://www.globalcenter.net
----------------------------------------------------------------------
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.