[92364] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 PI block is announced - update your filters 2620:0000::/23

daemon@ATHENA.MIT.EDU (Randy Bush)
Fri Sep 15 18:37:33 2006

Date: Fri, 15 Sep 2006 12:34:53 -1000
From: Randy Bush <randy@psg.com>
To: Peter Corlett <abuse@cabal.org.uk>
Cc: nanog@merit.edu
In-Reply-To: <29707D87-C951-47B1-BC3D-BA56F23B1F00@cabal.org.uk>
Errors-To: owner-nanog@merit.edu


> Call me naive, but could somebody enlighten me as to what tangible 
> benefit filtering out bogon space actually achieves? It strikes me that 
> it causes more headaches than it solves.

the theory is that it means you have no route to send responses back to 
an attacker who uses tcp, i.e. a spammer.

the practice is that spammers use holes or super-blocks of allocated, 
i.e. not bogon, space.  they are not stupid.

so your point is well taken.

randy

home help back first fref pref prev next nref lref last post