Security Management

• Protecting your network

  • traffic shapers
    • use CAR to limit ICMP traffic
  • anti-spoofing filters
    • RFC 2267 (Network Ingress Filtering)
    • for singly-homed customers
      • IF packet's source address from within your network
      • THEN forward as appropriate
      • IF packet's source address is anything else
      • THEN deny packet
    • Filter on the outbound