topic ip verify-reverse path on PIX 515 in Network Security https://community.cisco.com/t5/network-security/ip-verify-reverse-path-on-pix-515/m-p/214308#M595123 <P>Hello.</P><P></P><P>In an effort to protect my network from IP Spoofing, I was thinking about applying the "ip verify-reverse path" command to my inside and outside interfaces.</P><P></P><P>Just curious as to if anyone uses this command or has any other suggestions.</P><P></P><P>Thank you!</P><P></P><P></P> Fri, 21 Feb 2020 07:12:50 GMT ewieczorek 2020-02-21T07:12:50Z ip verify-reverse path on PIX 515 https://community.cisco.com/t5/network-security/ip-verify-reverse-path-on-pix-515/m-p/214308#M595123 <P>Hello.</P><P></P><P>In an effort to protect my network from IP Spoofing, I was thinking about applying the "ip verify-reverse path" command to my inside and outside interfaces.</P><P></P><P>Just curious as to if anyone uses this command or has any other suggestions.</P><P></P><P>Thank you!</P><P></P><P></P> Fri, 21 Feb 2020 07:12:50 GMT https://community.cisco.com/t5/network-security/ip-verify-reverse-path-on-pix-515/m-p/214308#M595123 ewieczorek 2020-02-21T07:12:50Z Re: ip verify-reverse path on PIX 515 https://community.cisco.com/t5/network-security/ip-verify-reverse-path-on-pix-515/m-p/214309#M595124 <HTML><HEAD></HEAD><BODY><P>Absolutely you should implement this feature. I also suggest that you implement RFC 1918 filtering... blocking the 10 net, 192.168.x.x, and 172.16 - 172.31.x.x addresses from coming into your network from the internet... these addresses should never traverse the internet... they are common sources of spoofed addresses in denial of service attacks.</P></BODY></HTML> Mon, 26 Jan 2004 02:46:22 GMT https://community.cisco.com/t5/network-security/ip-verify-reverse-path-on-pix-515/m-p/214309#M595124 bfl1 2004-01-26T02:46:22Z