Cleaning Up Your Traffic: scrub and antispoof
The next two features we'll discuss, scrub and antispoof, share a common theme: They provide automated protection against potentially dangerous clutter in your network traffic. Together they are commonly referred to as tools for "network hygiene," because they sanitize your networking considerably.
scrub
The scrub keyword enables network traffic normalization. With scrub, fragmented packets are reassembled, and invalid fragments such as overlapping fragments are discarded, so the resulting packet is complete and unambiguous. Enabling scrub provides a measure of protection against certain kinds of attacks based on incorrect handling of packet fragments. [46] A number of supplementing options are available, ...
Get The Book of PF now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
