Alpha test of MAE filtering capability

Scott Blandford scottb at
Tue Feb 4 15:44:03 UTC 1997

It's not that hard to write a script that temporarily points a static route
for an unregistered address at each of the machines at a meet point.  By
tracerouting to that address you can detect if someone is pointing default at

The script does not have to be a very CPU intensive operation, and if it is
run once a day, it ought to provide a fairly good clue as to whether or not
someone is abusing your network.

I would like to stay away from port filtering except as a last resort.  I think
that there are far too many unforeseen problems and complications in debugging.
And for better or worse it would require the removal of all third party 
routing which I would guess is pretty common at the Mae's.

Scott Blandford
IBM Global Network

More information about the NANOG mailing list