| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW1] Anti-spoofing
Tom Sevy wrote:
>
> Has anyone used the Anti-spoofing (this net in interfaces)?
Yep... I think almost all should... :-)
> Any warnings (other than don't select it on your external interface)?
In fact, you should use anti-spoofing on all your interfaces...
Recommended settings are: "This net" or "Specific" (and then a group) for
your internal interfaces, and "others" or "others+" for your external
interface...
Take care if you're doing NAT... read your FW-1 Manual for issues about
IP-Spoofing and NAT... :-)
Hope this helps. BR. :-)
-- M. Hoz
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|
