Timeline for Why doesn't NAT drop packets with spoofed public source IP?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 17, 2020 at 16:22 | comment | added | Ron Maupin♦ | Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer. | |
| Mar 15, 2020 at 16:00 | answer | added | Venkat Pullela | timeline score: 0 | |
| Mar 14, 2020 at 17:12 | comment | added | Darrell Root | The purpose of NAT is to do network address translation. If you want to drop packets with a particular source IP range, use an ACL. But beware running out of TCAMs if you use an ACL and NAT on the same interface of an IOS device. | |
| Mar 14, 2020 at 16:43 | comment | added | Ron Maupin♦ | What if you have servers that have actual public Internet addresses? You would not want to translate those packet addresses. | |
| Mar 14, 2020 at 16:05 | answer | added | Ron Trunk | timeline score: 2 | |
| Mar 14, 2020 at 14:07 | history | asked | Harsh Gondaliya | CC BY-SA 4.0 |