[169178] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

=?UTF-8?Q?=22Everyone_should_be_deployin?=

daemon@ATHENA.MIT.EDU (Jay Ashworth)
Tue Feb 18 12:20:36 2014

From: Jay Ashworth <jra@baylink.com>
Date: Tue, 18 Feb 2014 12:20:04 -0500
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Here's a piece which uses the MIT ANA data to assert that the job is mostly done already.

Unless I'm very much mistaken, it appears that a large percentage of the failed BCP 38 spoofing tests listed in that data are actually due to customer side NAT routers dropping packets...

which is of course egress filtering rather than ingress filtering, and thus doesn't actually apply to our questions. 

Am I interpreting that correctly?

http://www.senki.org/everyone-should-be-deploying-bcp-38-wait-they-are/

(Oh, and bcp38.info is now the number 2 Ghit for "bcp38"; thanks to 5 new contributors for signing up to help so far this week.)

Cheers,
- jra
-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.

home help back first fref pref prev next nref lref last post