> On Mon, 9 Dec 1996, Stephen Zedalis wrote:
> > On Mon, 9 Dec 1996 patrick@value.net wrote:
> > > > ... You wouldn't want to put them on slip/ppp links would you?
> > >
> > > Correct.
> >
> > Actually, you may want filters on BOTH. To be a good net citizen you
...
> It is unecessary to place a filter on each individual ppp or slip link, if
...
Well, thinking this thru... you don't need individual PPP filters to
protect the Internet from your customers if you are filtering at your
'Net interface(s). HOWEVER, if **YOU** are the object of the attack,
then without the PPP filters you can't tell if the source was from the
'Net or from your own customers. With the PPP filters, you at least know
that your own customers couldn't be spoofing addresses..... Also, without
PPP filters, one of your customers could spoof another of your customer's
addresses in an attack on some distant site.... in essence "framing" them
as the culprit.
Now.. I don't have PPP filters running either... does anyone know if there
would be a significant performance hit running this sort of filter on all
ports of a PM2E-30 ??
Later!
Derric
-- Derric Scott Scott Network Services, Inc. P. O. Box 361353 derric@scott.net (205)987-5889 Birmingham, AL 35236