[50903] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: NSPs filter?

daemon@ATHENA.MIT.EDU (=?ISO-8859-1?Q?M=E5ns_Nilsson?=)
Wed Aug 14 11:57:13 2002

Date: Wed, 14 Aug 2002 17:56:37 +0200
From: =?ISO-8859-1?Q?M=E5ns_Nilsson?= <mansaxel@sunet.se>
To: nanog@merit.edu
In-Reply-To: <20020805150943.A34372@oso.greenflash.net>
Errors-To: owner-nanog-outgoing@merit.edu




--On Monday, August 05, 2002 15:09:43 -0700 "John M. Brown"
<jmbrown@ihighway.net> wrote:

>=20
> Or you could be a good neighbor and have your DNS answer NXDOMAIN for
> the RFC1918 zones and stop the traffic before it left your network.
>=20
> If you have clients that are using RFC1918 and YOUR NS's then don't
> let those packets out.  Give a NXDOMAIN answer back towards them
> and save us all. :)

Or set up an AS112 server, let the customer win2k boxes send updates and
then *accept*those*updates*. Watch badly configured networks go bellyup
when the updates are served out again and then over-written.=20

*evil grin*=20

--=20
M=E5ns Nilsson            Systems Specialist
+46 70 681 7204         KTHNOC  MN1334-RIPE

We're sysadmins. To us, data is a protocol-overhead.

home help back first fref pref prev next nref lref last post