[168927] in North American Network Operators' Group
Re: Why won't providers source-filter attacks? Simple.
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Thu Feb 6 15:54:55 2014
From: Leo Bicknell <bicknell@ufp.org>
Date: Thu, 6 Feb 2014 14:54:25 -0600
To: nanog@nanog.org
In-Reply-To: <20140205084657.GA22744@pob.ytti.fi>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_38778707-331D-4AFE-AB9F-10E69C709F36
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On Feb 5, 2014, at 2:46 AM, Saku Ytti <saku@ytti.fi> wrote:
> If we keep thinking this problem as last-mile port problem, it won't =
be solved
> in next 20 years. Because lot of those ports really can't do RPF and =
even if
> they can do it, they are on autopilot and next change is market forced
> fork-lift change. Company may not even employ technical personnel, =
only buy
> consulting when making changes.
It can be solved, but not by NANOG.
Imagine if Cable labs required all DOCSIS compliant cable modems to =
default
to doing source address verification in the next version of DOCSIS? It =
would
(eventually) get rolled out, and it would solve the problem. Even if it =
doesn't
default to on, requiring the hardware to be capable would be a nice =
step.
The consumer last mile is actually simpler in that there are a few =
organizations
who "control" the standards. Efforts need to focus on getting the BCP38 =
stuff
into those standards, ideally as mandatory defaults.
--=20
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--Apple-Mail=_38778707-331D-4AFE-AB9F-10E69C709F36
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----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=ljRc
-----END PGP SIGNATURE-----
--Apple-Mail=_38778707-331D-4AFE-AB9F-10E69C709F36--
