Re: Network Security hole (was -> Re: arp bug )

[Julian Anastasov <ja@xxxxxx>]

On Sat, 2 Mar 2002 erich@xxxxxxxx wrote:

> That's not what I was talking about.  I'm talking about
> Destination Address Validation based on the network you're getting

        Forgot to mention, the rp_filter does not check only the
source IPs, it uses saddr, daddr and tos. So, you have full
validation, just use the more specific rules+routes.

Regards

--
Julian Anastasov <ja@xxxxxx>