BCP38 exceptions for RFC1918 space
Joe Greco
jgreco at ns.sol.net
Mon Aug 16 11:50:00 UTC 2010
> > What does "originating" mean? Creating the packets? Or forwarding
> > them?
>
> Either way, there's no excuse.
>
> First off, remember that BCP38 and 1918 don't apply on your set of
> interconnected private networks, no matter how big a net it is. You want to
> filter between two of your private nets, go ahead. You don't want to, that's
> OK to. The fun starts when those packets leave your network(s) and hit the
> public Internet.
>
> Now that we have that squared away...
>
> Either that intermediate router originated the ICMP 'frag needed' packet, in
> which case somebody needs to be smacked for originating a 1918-addressed packet
> on the public internet, or it's forwarding the packet. And if it's forwarding
> the packet, then somebody *else* needs to be smacked for injecting that packet
> into the public internet.
>
> What *possible* use case would require a 1918-sourced packet to be traversing
> the public internet? We're all waiting with bated breath to hear this one. ;)
It's great for showing in traceroutes who the heel is.
Do I win a prize?
... JG
--
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
"We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again." - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.
More information about the NANOG
mailing list