[161490] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [c-nsp] DNS amplification

daemon@ATHENA.MIT.EDU (Christopher Morrow)
Sun Mar 17 20:55:16 2013

In-Reply-To: <5146456E.2000406@gmail.com>
Date: Sun, 17 Mar 2013 20:55:02 -0400
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Arturo Servin <arturo.servin@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Sun, Mar 17, 2013 at 6:36 PM, Arturo Servin <arturo.servin@gmail.com> wrote:
>
>         They should publish the spoofable AS. Not for public shame but at least
> to show the netadmins that they are doing something wrong, or if they
> are trying to do the good think is not working.
>
>         Or at least a tool to check for your ASN or netblock.

I don't disagree, but I'd point out that there are likely easier
places to do bcp38 than others in everyone's network(s)... So, 'I do
bcp38' unqualified is not as helpful, especially when almost all
consumer grade links are bcp38 by default, which is likely where a
bunch of this measurement originates. (well, I suspect a bunch of it
is from consumer-grade links anyway)


home help back first fref pref prev next nref lref last post