[7121] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Filtering on RFC1918 cruft

daemon@ATHENA.MIT.EDU (Brett D. Watson)
Fri Jan 17 20:17:25 1997

To: Paul Ferguson <pferguso@cisco.com>
cc: nanog@merit.edu
From: "Brett D. Watson" <bwatson@genuity.net>
Reply-To: bwatson@genuity.net
Date: Fri, 17 Jan 1997 18:13:59 -0700


   i wondered the same thing.  here's what i see at mae-east being
announed by some (i filter): 

deny   ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 (227 matches)
deny   ip 192.0.0.0 0.0.0.255 255.255.255.0 0.0.0.255 (603 matches)
deny   ip 198.32.146.0 0.0.0.255 255.255.255.0 0.0.0.255 (543 matches)
deny   ip 198.32.176.0 0.0.0.255 255.255.255.0 0.0.0.255 (10 matches)
deny   ip 192.157.69.0 0.0.0.255 255.255.255.0 0.0.0.255 (96 matches)
deny   ip 198.32.128.0 0.0.0.255 255.255.255.0 0.0.0.255 (335 matches)

  ya, ya, teh last four aren't rfc1918 but i filter them anyway (nap 
dmz's) :)  lot's of people announcing them.  the first two are the 
only rfc1918 nets i see announced on our nap routers.

-brett

> Why aren't people actively filter on RFC1918 announcements??
> 
> - paul
> 
> >Date: Fri, 17 Jan 1997 15:00:03 GMT
> >Subject: 01/16/97 Internet Routing Problems
> >
> >Reserved Network and Host Announcements
> >---------------------------------------
> >10/8 at Mae-East from DIALnet (5552) ASPATH=5552 3549 Incomplete
> >10/8 at Mae-East from INAP.net (5646) ASPATH=5646 3549 Incomplete
> >10/8 at Mae-East from PRIMENET (3549) ASPATH=3549 Incomplete
> >10/8 at Mae-East from CAIS (3491) ASPATH=3491 3549 Incomplete
> >10/8 at Mae-West from PRIMENET (3549) ASPATH=3549 Incomplete
> >10/8 at Mae-West from INAP.net (5646) ASPATH=5646 3549 Incomplete
> >10/8 at AADS from INAP.net (5646) ASPATH=5646 3549 Incomplete
> >10/8 at AADS from 198.32.130.55 ASPATH=3549 Incomplete
> 




home help back first fref pref prev next nref lref last post