Dealing with IP Spoofing
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited 3 hours ago
Ron Maupin♦
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited 3 hours ago
Ron Maupin♦
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
edited 3 hours ago
Ron Maupin♦
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Border routers, which are routers that span two or more sub networks,
can be configured to block packets from outside their administrative
domain that have source addresses from inside that domain.
Source: Introduction to computer security(Michael_Goodrich,_Roberto_Tamassia under Network Serucrity chapter 5 (Dealing with ip spoofing))
What does it mean, in layman terms?
routing ip ip-address
routing ip ip-address
edited 3 hours ago
Ron Maupin♦
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 3 hours ago
Ron Maupin♦
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 3 hours ago
Ron Maupin♦
64.8k1367120
edited 3 hours ago
Ron Maupin♦
64.8k1367120
edited 3 hours ago
Ron Maupin♦
64.8k1367120
64.8k1367120
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
asked 3 hours ago
Henok TesfayeHenok Tesfaye
1104
1104
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Henok Tesfaye is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "496"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Henok Tesfaye is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f56816%2fdealing-with-ip-spoofing%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
add a comment |
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
add a comment |
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
It means that a packet received from outside the local network could have a source address of the inside network. That would be for a malicious purpose. The router could be configured to check the source address to see if it is received on the correct interface. Receiving a packet with the source address from the inside network on an outside interface would not pass the test.
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
answered 3 hours ago
Ron Maupin♦Ron Maupin
64.8k1367120
64.8k1367120
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
add a comment |
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
+1 Clear and concise. On the way to accept it.
– Henok Tesfaye
3 hours ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
This is a special case of Reverse Path Filtering, no? Reverse Path Filtering means that the router rejects any packet that comes in on an interface where if I wanted to reply to the source address, the packet would not go out via that interface.
– Jörg W Mittag
19 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
Yes. Cisco has three modes of uRPF. See Understanding Unicast Reverse Path Forwarding.
– Ron Maupin♦
13 mins ago
add a comment |
Henok Tesfaye is a new contributor. Be nice, and check out our Code of Conduct.
Henok Tesfaye is a new contributor. Be nice, and check out our Code of Conduct.
Henok Tesfaye is a new contributor. Be nice, and check out our Code of Conduct.
Henok Tesfaye is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f56816%2fdealing-with-ip-spoofing%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
