[52639] in North American Network Operators' Group
Re: what's that smell?
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Mon Oct 7 19:01:44 2002
Date: Tue, 8 Oct 2002 00:05:29 +0100 (BST)
From: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
To: Paul Vixie <paul@vix.com>
Cc: nanog@merit.edu
In-Reply-To: <20021007225435.9035828B6E@as.vix.com>
Errors-To: owner-nanog-outgoing@merit.edu
to that end why doesnt bind ship with default zone files for rfc1918 space as
well as 127.0.0.0 ?
Steve
On Mon, 7 Oct 2002, Paul Vixie wrote:
>
> since the last time we cleared the firewall statistics on c.root-servers.net,
> 1895GB of udp/53 input has led to 6687GB of udp/53 output, but, and this is
> the important part now so pay attention, 185GB of input was dropped due to an
> RFC1918 source address.
>
> who needs DDOS when most network operators aren't filtering RFC1918 on output?
> (there's only been 4.2GB of udp/2002 and other wormy traffic, by comparison.)
>
> current winners of the "sustained input traffic over 100KBits/sec" award are
> 164.58.150.146, 200.52.12.131, and 195.146.194.12. c-root keeps on ignoring
> you, but you just never give up. congradulations, or something.
>
> (note that c-root's network operator has offered to filter RFC1918 on
> input from other AS's, but it's actually useful to keep on measuring it.)
>