4 ms·
No, it's not. It's just time consuming. If you're a large ISP with several disconnected IP subnets, then it's hard to get right.
by bb88 9y ago
No, it's not. It's just time consuming. If you're a large ISP with several disconnected IP subnets, then it's hard to get right.
- tonyb 9y agoThis is quite an over simplification but a large amount of the filtering, if placed close to the client, is a single line of config. "ip verify unicast source reachable-via rx" in the Cisco world.
- cryptonector 9y agoThis should be the default.
- mehrdadn 9y agoI don't follow. Seems to me that whatever program/firmware on the router knows where to send incoming packets must also be able to trivially check and filter the addresses of outgoing ones.