>
> What is IP Source Routing? The only definition I can come up
> with on my own would have been the same as the IP forwarding.
>qj> If a router believes an ICMP redirect message from the outside,
>qj> then attackers can teach your router (in our discussion a
>qj> dual-homed host is acting as a router) to use incorrect routes.
>qj> This is badness!
IP source routing is, in general, a bad thing, and you should make
sure that all of your routers disregard source-routed packets, or
ignore the source route portion of an IP packet. IP source routing
should *only* be used for debugging networks.
--tOm
/---------------------------------------------------------------------/
\ \
/ Thomas D. Nadeau ======== ======== /
\ Internetworking Software ======= ========= \
/ Xyplex, Inc. ======= ====== /
\ 295 Foster Street, ======== == \
/ Littleton, MA 01460 -------======= ------- /
\ ======== == \
/ Voice: (508) 952-4837 ======= ====== /
\ FAX: (508) 952-4887 ======= ========= \
/ email: tdnadeau @
eng .
xyplex .
com ======== ========== /
\ \
/---------------------------------------------------------------------/
References:
|
|
