[28050] in North American Network Operators' Group
Re: Policies: Routing a subset of another ISP's address block
daemon@ATHENA.MIT.EDU (Randy Bush)
Wed Apr 5 19:30:19 2000
From: Randy Bush <randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Phillip Vandry <vandryp@psi.ca>
Cc: nanog@merit.edu
Message-Id: <E12czDe-0004Ob-00@rip.psg.com>
Date: Wed, 05 Apr 2000 16:28:18 -0700
Errors-To: owner-nanog-outgoing@merit.edu
> You're going to have to exempt multihomed downstream customers from your
> anti spoofing filters anyway, whether they use your space, someone else's
> or their own.
indeed this seems to be the case. which breaks the schemes for ingress
filtering based on forwarding table entries <sigh>.
> To put it another way, if you have clueful downstreams, you should
> delegate anti spoofing to them, they will do it closer to the edge where
> there is no asymetrical routing.
one of the rare bits of positive feedback here. multi-homed customers do
tend to be a bit more clued. so, in this too rare instance, the pain is
near some clue to fix it.
randy
