O'Reilly logo

JUNOS Automation Cookbook by Adam Chappell

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Applying anti-spoofing filters

In this recipe, we'll create an automation assistant to help us deploy anti-spoofing filters in our network. Anti-spoofing filters are packet filters that validate the source addresses of packets received from an interface to make sure that they are consistent with routing information in the reverse direction. They are important because they defeat one of the most significant vectors of distributed denial-of-service (DDOS) attacks: traffic seemingly originating from false source addresses. To implement source address filtering, the router's receiving interface is configured to perform a Reverse Path Forwarding (RPF) check: a lookup of the source address in the routing table to see if the same interface would ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required