Examine the following access list:
Which statement is NOT designed to prevent IP spoofing attacks from packets that appear to be sourced from inside the network, but are actually sourced from outside the network?
- access-list 110 deny ip 10.0.0.0 0.255.255.255 any
- access-list 110 deny ip 172.16.0.0 0.15.255.255 any
- access-list 110 deny ip 192.168.0.0 0.0.255.255 any
- access-list 110 deny ip 188.8.131.52 0.255.255.255 any
Infrastructure access control lists are designed to prevent spoofing attacks from packets that appear to be sourced from inside the network when they are in fact sourced from outside the network. There are two groups of address that should be blocked at the edge of the network:
The private address space, which are called RFC 1918 addresses
Certain “special use addresses” as defined in RFC 3330
The address 184.108.40.206 0.255.255.255 falls into neither of those categories.
The RFC 1918 addresses that should be blocked are:
The RFC 3330 addresses that should be blocked are:
For more information about these special use addresses, see RFC 3330.
Configure and verify router security features