Re: Best practices inquiry: filtering 128/1

From: John Kristoff (no email)
Date: Mon Jul 10 2006 - 23:22:49 EDT

  • Next message: Steven M. Bellovin: "Re: Sitefinder II, the sequel..."

    On Mon, 10 Jul 2006 21:56:27 -0500
    Jerry Pasker <> wrote:

    > Because you fear that their routers that distribute the feed could
    > become own3d and used to cause a massive DoS by filtering out some
    > networks?

    Someone in the NANOG community, I forget who now, had the sensible
    suggestion that you create a filter list based on the bogon list at
    the time you setup your feed. You use that to limit what you will
    accept from Cymru. Since bogon blocks will only get allocated, the
    worst that could happen is the breaking of a recently allocated bogon
    network. Even if you don't update your filter list for the next 5
    years the damage is likely to be minimal.

    John


  • Next message: Steven M. Bellovin: "Re: Sitefinder II, the sequel..."





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD