host 0.0.0.0的含义

what is the meaning of "ip host 0.0.0.0" ?
    Hello,
    last I saw a config of an ISP-router. There was an ACL with the statement "ip host 0.0.0.0 any log".
    What meaning has this statemant ?
    Regards,
    Alexander Czutka

    2002-10-5

Re: meaning of "ip host 0.0.0.0" ?
Hello Alexander,

AFAIK, this statement is used for anti-spoofing purposes. According to RFC 3330:

0.0.0.0/8:Addresses in this block refer to source hosts on "this" network. Address 0.0.0.0/32 may be used as a source address for this host on this network; other addresses within 0.0.0.0/8 may be used to refer to specified hosts on this network.

A full access list denying all RFC 3330 special use addresses usually looks like this:

Deny special-use address sources.
!--- Refer to RFC 3330 for additional special use addresses.

access-list 110 deny ip host 0.0.0.0 any
access-list 110 deny ip 127.0.0.0 0.255.255.255 any
access-list 110 deny ip 192.0.2.0 0.0.0.255 any
access-list 110 deny ip 224.0.0.0 31.255.255.255 any

HTH,

Georg

posted @ 2012-08-21 10:26  尼玛范爷  阅读(4191)  评论(0)    收藏  举报