[52695] in North American Network Operators' Group
Re: Who does source address validation? (was Re: what's that smell?)
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Oct 8 16:42:12 2002
To: Iljitsch van Beijnum <iljitsch@muada.com>
Cc: "John M. Brown" <john@chagresventures.com>, nanog@merit.edu
In-Reply-To: Your message of "Tue, 08 Oct 2002 22:06:12 +0200."
<20021008215300.R84850-100000@sequoia.muada.com>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 08 Oct 2002 16:41:29 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_1229606269P
Content-Type: text/plain; charset=us-ascii
On Tue, 08 Oct 2002 22:06:12 +0200, Iljitsch van Beijnum said:
> Because if 20% of all people generate this crap (which is a huge number)
> it must be 90% of their traffic to get at 18%. How can someone generate so
> much useless traffic and keep doing it, too?
How much you want to bet that *all* the internal backbone traffic from these
sites is pouring out into the Internet, and they've had to upgrade from a T1 to
a DS3 and are looking at a OC3, and the service provider is keeping their mouth
shut because they can just catch an OC3's worth of packets and drop most of
them on the floor (because they don't have a route to the 1918 destination
address - only the random stuff with actual valid destinations like a root
nameserver gets forwarded). Oh, and since 90% of their traffic is dropped on
the floor, they can provision an OC3 to the customer and still only need to
provision a DS3 upstream. If 20% of your customers do this, you can just label
it "cash cow".. ;)
If you thought there was disincentive for people selling transit to filter,
this is even worse... ;)
--
Valdis Kletnieks
Computer Systems Senior Engineer
Virginia Tech
--==_Exmh_1229606269P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQE9o0L5cC3lWbTT17ARAj8GAKClMe9d+R9lXqRF44qymuV1GgS7yACgvg4c
B74RxVDQ3PIaPCQdzuYdeM8=
=m92u
-----END PGP SIGNATURE-----
--==_Exmh_1229606269P--
