December 2007
Intermediate to advanced
184 pages
4h 45m
English
The next two features we'll discuss, scrub and antispoof, share a common theme: They provide automated protection against potentially dangerous clutter in your network traffic. Together they are commonly referred to as tools for "network hygiene," because they sanitize your networking considerably.
The scrub keyword enables network traffic normalization. With scrub, fragmented packets are reassembled, and invalid fragments such as overlapping fragments are discarded, so the resulting packet is complete and unambiguous. Enabling scrub provides a measure of protection against certain kinds of attacks based on incorrect handling of packet fragments. [46] A number of supplementing options are available, ...
Read now
Unlock full access