[61779] in North American Network Operators' Group
Re: What were we saying about edge filtering?
daemon@ATHENA.MIT.EDU (Petri Helenius)
Thu Sep 4 13:56:18 2003
Date: Thu, 04 Sep 2003 20:55:34 +0300
From: Petri Helenius <pete@he.iki.fi>
To: Sean Donelan <sean@donelan.com>
Cc: Rob Thomas <robt@cymru.com>,
"Christopher L. Morrow" <chris@UU.NET>, NANOG <nanog@merit.edu>
In-Reply-To: <Pine.GSO.4.44.0309041311001.27984-100000@clifden.donelan.com>
Errors-To: owner-nanog-outgoing@merit.edu
Sean Donelan wrote:
>It gets even worse. Cisco has hard-coded the list of Bogons into some of
>its latest low-end IOS versions as part of its "auto-secure" feature.
>Yes, Cisco includes warnings in the manual the user should check the
>official list at IANA; but I also know the power of defaults. People
>upgrade their IOS versions even less often then they update their
>Windows boxes. So we're going to see chunks of the net blocked depending
>on the release date of versions of IOS.
>
>
>
There is an old saying which seems to fit here;
"The road to hell is paved with good intentions."
Pete