上QQ阅读APP看书,第一时间看更新
Anti-spoofing using access lists
A network operator can implement an anti-spoofing access-list filter to prevent packets with incorrect source IP addresses from entering and leaving the network. With the following command, the access list will prevent incoming packets that have the internal IP address from coming in. 220.x.x.x is a network which I own, so I do not expect to encounter any packets coming from outside my own IP address.
Cisco IOS command:
access-list 101 deny 220.x.x.0 0.0.0.255 any