> In the same vein, how would go about blocking all loose-source routed
> IP traffic on a particular interface?
I modified the ip_input.c that came with my Smallworks NetGate to drop all
source route packets and return a "source route unreachable" ICMP response.
The joy of a source license :-)
Al
--
----------------------------------------------------------------------------
Alastair Young _ This vehicle incapable
Cadence Design Systems, Information Services )/___ _
555 River Oaks Parkway, 4B1 __/(___)_*##/c of evading low
San Jose CA 95134 Fax: (408)894-3487 / /\\|| \ / \
alastair @
cadence .
com (408)428-5278 \__/ ----'\__/ speed pursuit!
----------------------------------------------------------------------------
These statements and opinions are mine, not those of Cadence Design Systems
References:
|
|
