[16153] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SMURF amplifier block list

daemon@ATHENA.MIT.EDU (Stephen Sprunk)
Mon Apr 13 21:46:24 1998

Date: Mon, 13 Apr 1998 20:33:33 -0500
From: Stephen Sprunk <sprunk@paranet.com>
To: Karl Denninger <karl@mcs.net>
CC: Dean Anderson <dean@av8.com>, "Jay R. Ashworth" <jra@scfn.thpl.lib.fl.us>,
        nanog@merit.edu

On the contrary; while it won't have the effect of ingress filters, it
will prevent downstreams of anyone receiving the feed from USING those
smurf sites, and it will disrupt connectivity to them in general.  If
enough people adopted the feed, it would have a reasonable effect.

Then again, filtering any packets to or from x.x.x.255 would have a
similar but more profound effect.  Anyone who actually uses a .255
address for a host is asking for trouble anyways.

Stephen


Karl Denninger wrote:
> 
> Uh, a BGP feed doesn't do you any good folks.  You want to block INGRESS,
> not outbound packet flow.
> 

-- 
Stephen Sprunk      "Oops."                 Email: sprunk@paranet.com
Sprint Paranet        -Albert Einstein      ICBM:  33.00151N 96.82326W

home help back first fref pref prev next nref lref last post