aboutsummaryrefslogtreecommitdiff
path: root/netsec-assignment5-S4498062/exercise2/exercise2c
diff options
context:
space:
mode:
Diffstat (limited to 'netsec-assignment5-S4498062/exercise2/exercise2c')
-rw-r--r--netsec-assignment5-S4498062/exercise2/exercise2c5
1 files changed, 5 insertions, 0 deletions
diff --git a/netsec-assignment5-S4498062/exercise2/exercise2c b/netsec-assignment5-S4498062/exercise2/exercise2c
new file mode 100644
index 0000000..f16c731
--- /dev/null
+++ b/netsec-assignment5-S4498062/exercise2/exercise2c
@@ -0,0 +1,5 @@
+We could reject all packets with a spoofed IP address by only accepting packets
+where the source address is in our subnet:
+
+# iptables -A OUTPUT -j DROP
+# iptables -A OUTPUT -s 203.0.113.0/24 ACCEPT