[95147] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Where are static bogon filters appropriate? was: 96.2.0.0/16 Bogons

daemon@ATHENA.MIT.EDU (Roland Dobbins)
Thu Mar 1 17:44:15 2007

In-Reply-To: <Pine.GSO.4.58.0703012107270.272@marvin.argfrp.us.uu.net>
From: Roland Dobbins <rdobbins@cisco.com>
Date: Thu, 1 Mar 2007 14:40:16 -0800
To: NANOG <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu



On Mar 1, 2007, at 1:10 PM, Chris L. Morrow wrote:

> So... again, are bogon filters 'in the core' useful? (call 'core' some
> network not yours)

Antispoofing is 'static' and therefore brittle in nature, people  
change jobs, etc. - so, we shouldn't do antispoofing, either?

Enterprises typically don't do this stuff.  They should, and we work  
to educate them, but it's even more difficult in that space than in  
the SP space.

A question I have is whether or not this class of problems is more of  
a 'need the vendors to come up with better/easier functionality' type  
of problem, a 'need the SPs to do a better job with this' kind of  
problem, or is it more in the realm of a 'TCP/IP in its current  
incarnation(s) lends itself these kinds of issues' type of problem?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins@cisco.com> // 408.527.6376 voice

           The telephone demands complete participation.

                       -- Marshall McLuhan


home help back first fref pref prev next nref lref last post