Anti spoofing iptables rule useful?

MatB

Guest

Posts: n/a

02-09-2005, 04:01 PM

Hi,
i found most people use this rule to prevent spoofing from the external
interface (YMMV):

iptables -t nat -I PREROUTING 1 -i ppp0 -s 192.168.0.0/16 -j DROP

Given that the rp_filter is active on the interface, is this rule really
helpful or it's just some legacy thing from previous kernel versions?

Thanks,

MatB

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
iptables rule	Bonno Bloksma	Linux Networking	6	03-06-2010 10:48 PM
iptables: rule with RETURN target just after a rule with ACCEPT target	Neroku	Linux Networking	0	04-25-2007 08:13 AM
iptables: rule with RETURN target after a rule with the ACCEPT target	Neroku	Linux Networking	0	04-24-2007 08:43 PM
iptables add rule case	jeniffer	Linux Networking	4	11-07-2006 09:35 AM
Iptables rule ID	drg	Linux Networking	3	02-22-2006 02:24 AM