On Mon, Mar 12, 2001 at 02:31:57PM -0400, Peter Cordes wrote: > Doesn't rp_filter do this, or am I missing something? It should make the > kernel drop packets coming in on interfaces they shouldn't be, e.g. 10.0.0.0 > packets coming from an interface to 192.168.1.0. It does do what you describe; however the original question is about evil packet _destinations_ and not evil packet _sources._