[EXTERNAL] Re: Freeradius 3 DHCP server with SQL and 'anty dos' protection, how?

[Alan DeKok]

On Jun 26, 2019, at 9:14 AM, Kamil de Bardon <kamil at forweb.pl> wrote:
> I like this idea, but Cisco ASR do not allow send bogus address.

  You could use a private IP space that you're not already using, e.b. 172.16/16.  Give the systems a router of 172.16.0.1 (which doesn't exist), and the packets will go nowhere.

  For paranoia, you could make sure your router discards all packets from that IP range, too.

  As with most things, there are multiple possible solutions.

  Alan DeKok.