[17958] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: GRE packets

daemon@ATHENA.MIT.EDU (Alex Bligh)
Thu Jun 18 05:59:11 1998

From: Alex Bligh <amb@gxn.net>
To: danny@genuity.net
Cc: "Paul G. Donner" <pdonner@cisco.com>, Eric Germann <ekgermann@cctec.com>,
        nanog@merit.edu
In-reply-to: Your message of "Wed, 17 Jun 1998 15:23:57 PDT."
             <199806172223.WAA26321@ice.genuity.net> 
Date: Thu, 18 Jun 1998 10:25:52 +0100

> 
> Perhaps to combat this, unless I'm missing something, one could justifiably 
> deploy GRE filters with source & destination addresses of the exchange 
> subnets.  Filtering GRE in general seems nothing more than foolish.

I posted an FYI on how to detect & prevent abuse by tunneling through exchange
points a while ago. I anyone is interested I'll post it again or perhaps
get it put up on the web.

-- 
Alex Bligh
GX Networks (formerly Xara Networks)



home help back first fref pref prev next nref lref last post