[78034] in North American Network Operators' Group
RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
daemon@ATHENA.MIT.EDU (Kunjal Trivedi)
Wed Feb 16 17:02:33 2005
From: "Kunjal Trivedi" <kutrived@cisco.com>
To: "'David Barak'" <thegameiam@yahoo.com>, <rsears@adnc.com>,
"'Kurt Kruegel'" <kurt@amnh.org>
Cc: <nanog@merit.edu>
Date: Wed, 16 Feb 2005 13:59:48 -0800
In-Reply-To: <20050119191032.26353.qmail@web14925.mail.yahoo.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hi Folks -
Due to the feedback we've received on the Autosecure bogon list issue, we've
decided to do the following:
1) Provide a fix that removes bogon ACL creation and deployment from the
Autosecure feature. This change will be available in mainline and
maintenance software releases. For the software release details, please
refer to 2.
2) A Cisco Field Notice will be published to inform customers of the change
and will contain instructions on how to remove the bogon ACLs created by
executing the autosecure command.
We'll update the list with the Field Notice URL as soon as it's available.
Tentative date for FN posting is 18th February 2005.
Regards.
/kunjal
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On
> Behalf Of David Barak
> Sent: Wednesday, January 19, 2005 11:11 AM
> To: rsears@adnc.com; Kurt Kruegel
> Cc: nanog@merit.edu
> Subject: Re: Please Check Filters - BOGON Filtering IP Space
> 72.14.128.0/19
>
>
>
> --- "Richard J. Sears" <rsears@americanIS.net> wrote:
>
> >
> > Yes - the space in question was allocated last January - it
> looks like
> > not everyone has updated their bogon access lists to remove
> this space
> > from the bogon list.
>
> I think that Cisco's Autosecure feature is part of the problem here:
>
> http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/product
> s_feature_guide09186a008017d101.html
>
> While it says that bogon filters change, and provides a URL
> to check it, what percentage of folks who would use a feature
> like "autosecure" would ever update their filters?
>
> sigh.
>
> =====
> David Barak
> Need Geek Rock? Try The Franchise:
> http://www.listentothefranchise.com
>
>
>
> __________________________________
> Do you Yahoo!?
> Read only the mail you want - Yahoo! Mail SpamGuard.
> http://promotions.yahoo.com/new_mail
>
>
