[93725] in North American Network Operators' Group
RE: Bogon Filter - Please check for 77/8 78/8 79/8
daemon@ATHENA.MIT.EDU (Barry Greene (bgreene))
Fri Dec 15 14:23:04 2006
Date: Fri, 15 Dec 2006 11:21:14 -0800
From: "Barry Greene (bgreene)" <bgreene@cisco.com>
To: "David Conrad" <drc@virtualized.org>,
<Michael.Dillon@btradianz.com>
Cc: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
-> We have this source:
http://www.iana.org/assignments/ipv4-address-space
-> We "source" URLs for each of the RIRs in the prefix filter templates:
=09
ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template
s/
=09
http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-loose.htm
=09
http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-strict.htm
-> We have the Bogon Router Server:
http://www.cymru.com/BGP/bogon-rs.html
-> We have the RIPE project to help with the migration:
http://www.ris.ripe.net/debogon/
=20
-> We have the RADB Filters:
=09
http://www.radb.net/cgi-bin/radb/whois.cgi?obj=3DMAINT-BOGON-FILTERS
-> We have the RIPE DB Filters:
=09
http://www.ripe.net/perl/whois?searchtext=3DMAINT-BOGON-FILTERS&form_type=
=3D
simple
-> And there is DNS and E-mail notifications ......
All of this is listed at http://www.cymru.com/Bogons/index.html
So what would be helpful are people who say "I've done everything (or
some of the things) off the Bogon Team page and think there is a better
way." The core problem right now are that too many organizations are
doing nothing to maintain policy once that policy choice has been
selected.
> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On=20
> Behalf Of David Conrad
> Sent: Thursday, December 14, 2006 4:50 PM
> To: Michael.Dillon@btradianz.com
> Cc: nanog@merit.edu
> Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8
>=20
>=20
> Hi,
>=20
> > or LDAP could be used ...
>=20
> I was wondering when this would show up... :-)
>=20
> > If IANA and the RIRs would step up to the plate and provide an=20
> > authoritative data source identifying which address ranges=20
> have been=20
> > issued for use on the Internet then bogon lists would not=20
> be needed at=20
> > all.
> > ... IANA would be the authoritative source for stuff like RFC 1918=20
> > address ranges and other non-RIR ranges.
>=20
> IANA has a project along these lines at the earliest stage of=20
> development (that is, we're trying to figure out if this is a=20
> good idea and if so, the best way to implement it). I'd be=20
> interested in hearing opinions (either publicly or privately)=20
> as to what IANA should do here.
>=20
> > One wonders whether it might not be more effective in the=20
> long run to=20
> > sue ICANN/IANA rather than suing completewhois.com.
>=20
> Sigh. What is the IOS command to disable lawyers again?
>=20
> Rgds,
> -drc
>=20
