
CE-Specific Router Security and Topology Design Considerations 157
Denial of service, spoofing, and other forms of attacks are on the increase on the Internet.
Many of these attacks can be thwarted by judiciously using ingress filtering (filtering of
packets originating from your network) and egress filtering (filtering of packets arriving
from the Internet), hence the importance of filtering.
CE-Specific Router Security and Topology
Design Considerations
The one key point to emphasize when referring to the customer edge (CE) router is that it
is an untrusted device from the service provider’s perspective. However, the customer’s
concerns include the follo ...