[169196] in North American Network Operators' Group
Re: "Everyone should be deploying BCP 38! Wait, they are ...."
daemon@ATHENA.MIT.EDU (Dobbins, Roland)
Tue Feb 18 19:56:54 2014
From: "Dobbins, Roland" <rdobbins@arbor.net>
To: NANOG list <nanog@nanog.org>
Date: Wed, 19 Feb 2014 00:56:28 +0000
In-Reply-To: <CAGQUKcfaX2payeLWyxkY-1OS0GakHF5t0ft0o6RasYSVvY_DHw@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 19, 2014, at 4:52 AM, Tony Tauber <ttauber@1-4-5.net> wrote:
> maybe we should conclude that most of the spoofing is coming from somewhe=
re else; perhaps including colo and cloud providers.
My theory - not yet backed by data - is that probably most spoofed traffic =
these days does in fact emanate from IDC networks, and that a non-trivial p=
roportion of same emanates from a relatively small number of such networks.
In many cases, it's possible to put 'naked' hosts on home broadband connect=
ions, however - and how common that is, and what proportion of those broadb=
and access networks don't run any form of anti-spoofing, is an open questio=
n.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com>
Luck is the residue of opportunity and design.
-- John Milton
