[68292] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Source address validation (was Re: UUNet Offer New Protection

daemon@ATHENA.MIT.EDU (Sean Donelan)
Sun Mar 7 21:25:25 2004

Date: Sun, 7 Mar 2004 21:24:44 -0500 (EST)
From: Sean Donelan <sean@donelan.com>
To: "E.B. Dreger" <eddy+public+spam@noc.everquick.net>
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.44.0403080108410.7788-100000@a.mx.ict1.everquick.net>
Errors-To: owner-nanog-outgoing@merit.edu


On Mon, 8 Mar 2004, E.B. Dreger wrote:
> SD> They saw no _net_ savings.
> SD>
> SD> In the real world, it costs more to deploy and maintain
> SD> SAV/uRPF.
>
> The benefit is to other networks.  When other networks make your
> life easier, you benefit.

This confirms my statement.  You save nothing by deploying SAV on your
network.  There may be some indeterminate benefit at some indeterminate
time in the future after everyone else in the world correctly implements
SAV.  But there is no way to verify if every other network in the world
has correctly deployed SAV.  Even if everyone deploys SAV/uRPF you never
know when someone may misconfigure something, so you still have to keep
doing everything you were doing.

In the mean time, you get to pay for the extra costs for deploying
SAV/uRPF in addition to doing everything you were already doing.

http://www.rhyolite.com/anti-spam/you-might-be.html


>  If you want others to help you, help them.

I've already done my part.  I'm still waiting for others to help me.

Should I be expecting a check in the mail?

home help back first fref pref prev next nref lref last post