Re: Spoofing, defense?

2003-09-09 Thread Alexander Farber
I've always wondered, why write the firewall rules blocking some IP addresses (like on the bottom of this mail). Doesn't it make more sense only to allow connections addressed to the external IP of your firewall, like block in on rl0 from any to any pass in quick on rl0 from any to $myExtIP

Re: Spoofing, defense?

2003-09-09 Thread Guilmot Mike
On Tuesday 09 September 2003 18:09, Alexander Farber wrote: I've always wondered, why write the firewall rules blocking some IP addresses (like on the bottom of this mail). Doesn't it make more sense only to allow connections addressed to the external IP of your firewall, like block in on

Re: Spoofing, defense?

2003-09-07 Thread Guilmot Mike
Alex Zivenko wrote: Everybody know what is spoofing. How can I protect my server from it? It's a router to the internet, but some of my friends spoof the address and go thrue the router. Firewall can't protect. Any suggestions? Follow an ipf howto/tutorial. There are MANY of them around.

Re: Spoofing, defense?

2003-09-07 Thread Mike Maltese
A complete list of valid address ranges can be found at http://www.iana.org/assignments/ipv4-address-space. Alex Zivenko wrote: Everybody know what is spoofing. How can I protect my server from it? It's a router to the internet, but some of my friends spoof the address and go thrue the

RE: Spoofing, defense?

2003-09-07 Thread fbsd_user
: Spoofing, defense? Alex Zivenko wrote: Everybody know what is spoofing. How can I protect my server from it? It's a router to the internet, but some of my friends spoof the address and go thrue the router. Firewall can't protect. Any suggestions? Follow an ipf howto/tutorial. There are MANY