[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Managing ACL exceptions (was Re: Filter NTP traffic by packet size?)
- Subject: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?)
- From: rdobbins at arbor.net (Dobbins, Roland)
- Date: Sat, 1 Mar 2014 02:41:39 +0000
- In-reply-to: <[email protected]>
- References: <[email protected]> <[email protected]> <CALFTrnPOLqJqLCaWQERpCVZV2jDAFfHMwhBbUUTNiFNA2hnWQw@mail.gmail.com> <CAL9jLaZpx1SmJCUWj9Y3q=29KMb4xgzWi-p-8OOm57nR8FxR9Q@mail.gmail.com> <[email protected]>
On Mar 1, 2014, at 9:14 AM, Keegan Holley <no.spam at comcast.net> wrote:
> +1 in my experience uRPF get?s enabled, breaks something or causes confusion (usually related to multi-homing) and then get?s disabled.
Enabling loose-check - even with allow-default - is useful solely for S/RTBH, if nothing else.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton