Re: [FW1] Turn off ip spoofing on internal LAN

[Tim Holman]

Hmmm... what exactly are you wanting to do ? Anti-spoofing is probably most important on the internal net, so that internal addresses can't be spoofed. It doesn't matter that external (internet) addresses are spoofed - at least not to you, anyway ! I'd be interested to find out why you're trying to disable this - if you find it's stopping something from working, then we should work on that instead !   Tim   ----- Original Message ----- From: felix To: Fw-1-Mailinglist Sent: 02 April 2001 19:48 Subject: [FW1] Turn off ip spoofing on internal LAN Hi       For some reasons I need to turn off the IP spoofing on my internal Nics in Firewall Box, of course I'll keep IP spoofing on external Nic on the firewall box! Meanwhile I will disallow traffic from DMZ to Localnet. Do you guys think it's ok? By doing this do I run any potential security risk or not? The condition is that no internal guy will be acted as a hacker.   Thanks!