[77441] in North American Network Operators' Group
Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
daemon@ATHENA.MIT.EDU (Daniel Golding)
Thu Jan 20 11:06:01 2005
Date: Thu, 20 Jan 2005 11:02:46 -0500
From: Daniel Golding <dgolding@burtongroup.com>
To: "Fergie (Paul Ferguson)" <fergdawg@netzero.net>,
<jared@puck.nether.net>
Cc: <nanog@merit.edu>
In-Reply-To: <20050120.071930.10277.12663@webmail18.lax.untd.com>
Errors-To: owner-nanog-outgoing@merit.edu
Is there an RFC or other standards document that clearly states that static
bogon filter lists are a bad idea? While this seems like common sense, there
was just an RFC published on why IP addresses for specific purposes (like
NTP) shouldn't be encoded into hardware.
Using a dynamic feed needs to be codified so that it finds its way into
training classes, documentation, etc. Otherwise, this problem will recur
indefinitely.
- Dan
On 1/20/05 10:18 AM, "Fergie (Paul Ferguson)" <fergdawg@netzero.net> wrote:
>
>
>
> ...and it's not like ARIN, etc., does not announce to the
> Internet community when it allocates from address space
> which may have previously been listed in various operational
> places as "bogon" or "unalloacted" -- they do.
>
> I recall seeing similar announcements on the list from time
> to time, suggesting due diligence on ARIN's behalf to notifying
> people to modify their filtering. *plonk*
>
> Scanning the archives, an example:
>
> http://www.merit.edu/mail.archives/nanog/2004-01/msg00374.html
>
> - ferg
>
>
> -- Jared Mauch <jared@puck.nether.net> wrote:
>
> This hurts Ciscos reputation that they are causing
> pockets of the internet to not work. Next subnets to get allocated
> will increase the size of those pockets and so on. Then the internet
> will become less reliable as an end-to-end transport medium, hurting
> *everyone*.
>
> --
> "Fergie", a.k.a. Paul Ferguson
> Engineering Architecture for the Internet
> fergdawg@netzero.net or
> fergdawg@sbcglobal.net