RE: Where are static bogon filters appropriate? was: 96.2.0.0/16 Bogons

From: Eric Ortega (no email)
Date: Fri Mar 02 2007 - 16:37:01 EST

  • Next message: Steven M. Bellovin: "Re: Where are static bogon filters appropriate? was: 96.2.0.0/16 Bogons"

    I think Sean raises a good point. I guess the larger picture is what are we
    trying to protect and what are trying to protect that from.

    -----Original Message-----
    From: [mailto:] On Behalf Of Sean
    Donelan
    Sent: Friday, March 02, 2007 3:19 PM
    To: Roland Dobbins
    Cc: NANOG
    Subject: Re: Where are static bogon filters appropriate? was: 96.2.0.0/16
    Bogons

    On Fri, 2 Mar 2007, Roland Dobbins wrote:
    >> Sometimes, network operators have to take the bull
    >> by the horns and develop their own systems to do a job that vendors
    >> simply don't understand.
    >
    > Concur - but it seems that many seem to be looking for someone else to
    > do
    > this for them (or, perhaps, the lack of someone to do it for them as an
    > excuse to do nothing at all).

    How much of a problem is traffic from unallocated addresses? Backbone
    operators probably have NetFlow data which they could mine to find out. On
    the other hand, how much of a problem is obsolete bogon filters causing
    everytime IANA delegates another block to an RIR?

    Or by the way, how much spoofed traffic uses allocated addresses?


  • Next message: Steven M. Bellovin: "Re: Where are static bogon filters appropriate? was: 96.2.0.0/16 Bogons"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD