Once upon a time, Steve Bertrand <[email protected]> said: > If all IP blocks are tied down to null, and urpf is enabled in loose > mode on an interface, it will catch cases where someone is sourcing > traffic to you using IPs from the unassigned space that you have in your > free pools.
That's not true on JUNOS devices - discard routes still count as valid routes for loose-mode uRPF. -- Chris Adams <[email protected]> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

