reverse path

[kowalm]

I have the command "ip verify reverse-path interface outside" configured on my PIX. According to documentation, the outside interface is protected by checking the source address and preventing ingress attacks. This basically means that packets coming into my network are checked to see if the dest. network is in the routing table? Also, if i apply this to my inside interface, it'll check to make sure the source IP is vaild on the inside interface?

Just want to double check.

[vimal1980 · Accepted solution]

Hi!

yes.

The ip verify reverse-path interface outside command statement protects the outside interface from network ingress attacks from the Internet, whereas the ip verify reverse-path interface inside command statement protects the inside interface from network egress attacks from users on the internal network.

HTH.

Rgds

Vimal