On Aug 19, 2014, at 8:18 PM, Jeroen Massar <[email protected]> wrote:

> - The ICMP error packet's destination address must qualify uRPF rules for the 
> same interface as the source address.[1]

Should this language be limited to uRPF, or should it include other 
anti-spoofing mechanisms, as well?

----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>

                   Equo ne credite, Teucri.

                          -- Laocoön

_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec

Reply via email to