[61773] in North American Network Operators' Group
Re: What were we saying about edge filtering?
daemon@ATHENA.MIT.EDU (Owen DeLong)
Thu Sep 4 12:56:48 2003
Date: Thu, 04 Sep 2003 09:51:05 -0700
From: Owen DeLong <owen@delong.com>
To: Jack Bates <jbates@brightok.net>,
"Christopher L. Morrow" <chris@UU.NET>
Cc: Matthew Sullivan <matthew@sorbs.net>, nanog@merit.edu
In-Reply-To: <3F575A7C.3060601@brightok.net>
Errors-To: owner-nanog-outgoing@merit.edu
Source address-based filtering in the backbone is expensive and, in many
cases, non-feasible.
Owen
--On Thursday, September 4, 2003 10:30 AM -0500 Jack Bates
<jbates@brightok.net> wrote:
>
> Christopher L. Morrow wrote:
>>
>> At the edge, very near the originating host there is no reason not to
>> filter these, if you find the sources you might consider asking them why
>> they didn't filter these for you...
>>
>
> And what is the reason to not filter these in the backbone? Full spoof
> protection at some levels is near impossible. However, bogon filtering is
> not.
>
> -Jack
>
