Sophos Firewall

Discussions Alternative for null interface

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 27 subscribers
Views 5599 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Alternative for null interface

DelsioCaba over 8 years ago

Hi all,

Sophos XG does not have Null interface.

So what is the solution for this:

ip route 192.0.2.1 255.255.255.255 Null0

We need this to blackhole some bgp routes

Regards

This thread was automatically locked due to age.

0 sachingurung over 8 years ago

Hi Delsio,

Will a DNAT to a fake IP address help you in this scenario?

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michel Py over 8 years ago

I agree, and on top of that we should be able to harden the interface :

interface Null0
no ip unreachables
Cancel
Vote Up 0 Vote Down

Cancel