5.1.5.1. Procedure – Configuring spoof protection

Steps: 

1. Select the Networking interface and next to the Connects field, click .

2. Select the zones the configured interface is connected to either directly or indirectly through routers.

   

   Figure 5.6. Zone selection for the Connects control

   Note

   The Zone tree in the dialog window displays organized IP addresses, starting from the most generic (0.0.0.0/0) to the most specific. There is an implicit inheritance in the Connects specification: if the 10.0.0.0/8 address range is specified to connect to eth1, all more specific subnets of this address range (10.0.0.0/9, /10, .../32) connect to eth1 also, unless a more specific binding is explicitly specified.

3. Select Spoof protection.

   Note
   The Packet filter ruleset must be regenerated after modifying any interface settings. It is not done automatically.