[59785] in North American Network Operators' Group
Re: Working vulnerability? (Cisco exploit)
daemon@ATHENA.MIT.EDU (Paul Vixie)
Sat Jul 19 11:18:55 2003
From: Paul Vixie <paul@vix.com>
To: nanog@merit.edu
In-Reply-To: Message from Steve Francis <steve@expertcity.com>
of "Sat, 19 Jul 2003 08:12:41 MST."
<3F195FE9.3060206@expertcity.com>
Date: Sat, 19 Jul 2003 15:16:18 +0000
Errors-To: owner-nanog-outgoing@merit.edu
> >I'd estimate than less than a tenth of a percent (that's 0.1%) of
> >edge paths use RPF, even though BCP38 states the case clearly and the
> >technology makes it easy
> "Makes it easy" if you live in an Internet with a number of routes
> significantly less than the limit imposed for having stable RPF
> enabled on your devices, or have devices without bugs in RPF checking
> when said limit is spotted vaguely across the horizon.
since those are two very common beliefs about BCP38 deployment, i'm going
to leave it to barry to repost his standard answers to them, once he's gotten
some sleep.
> I dont seem to be in either of those places. (Although I have not
> sacrificed a router in the last upgrade version or two to see if things
> have improved.)
please do, and please post your results, as an example to others.
