Is it time to abandon bogon prefix filters?

Fri Aug 15 21:43:40 UTC 2008

Robert E. Seastrom writes:
>Not sure what you mean by this, but the painful reality is that most
>stuff, once deployed, gets promptly forgotten about, much the same as
>you might ignore a wall wart power supply under your desk until it
>started smelling funny or stopped delivering electricity.  Thus, I
>contend that one's routers should be configured to avoid ticking time
>bombs.  As smb so eloquently just asserted, "availability is a
>security issue too".

This is particularly but not exclusively true if they are implementing
an "overhead" function - i.e., if they are not directly in the
money-generating path. If they are, they at least have some chance at
getting some attention when not on fire. Otherwise, they will likely
be ignored until failure.

Joe