[Dshield] These kind of attcks from 127.0.0.1 seems to be a R EALATTCK

Stephane Grobety security at admin.fulgan.com
Fri Feb 20 15:54:06 GMT 2004


>> I so wish people would just follow the Manning draft (or whatever
>> it is called today) as well and apply those networks plus anti-spoofing
>> at *every* gateway.
>> 

AF> As good as that idea sounds, why don't router makers default their
AF> filters to the Manning draft? They can always be changed, but it allows
AF> the uninformed to start with a compliant filter set.

Maybe because there is way more internal routers than periphery
ones ?

As for the loopback net, I think it's already enforced.

Good luck,
Stephane




More information about the list mailing list