Dealing with IP Spoofing
Clash Royale CLAN TAG#URR8PPP
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
add a comment |
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
add a comment |
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
routing ip ip-address
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
edited Feb 10 at 19:14
Ron Maupin♦
66.5k1369123
66.5k1369123
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
asked Feb 10 at 18:31
Henok TesfayeHenok Tesfaye
1355
1355
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "496"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f56816%2fdealing-with-ip-spoofing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
add a comment |
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
add a comment |
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
answered Feb 10 at 18:34
Ron Maupin♦Ron Maupin
66.5k1369123
66.5k1369123
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
add a comment |
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
Feb 10 at 18:44
2
2
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
Feb 10 at 22:01
2
2
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
Feb 10 at 22:07
add a comment |
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f56816%2fdealing-with-ip-spoofing%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
