ARIN to Allocate from 220.127.116.11/8
kai at pac-rim.net
Wed Nov 10 17:01:54 UTC 1999
At 11:50 AM 11/10/99 -0500, Richard A Steenbergen <ras at above.net> wrote:
>I might almost be happy, except this breaks the oh-so-nice filter of
>18.104.22.168/2 at borders (effectively reduces random src spoofed attacks
>by 25%, and covers 127.0.0.0/8 as well). Go ARIN. </sarcasm>
One line becomes two in your ACL ?
ip permit 22.214.171.124/8
ip deny 126.96.36.199/2
The CPU loss for one more ACL line is probably offsetting the gains of
spoofed traffic pretty well. That will even scale for a little while,
at least for /9 and /10 in the permit line, before you seriously have
to think about how much still-unallocated space you will gratutiously allow
through your ACL.
More information about the NANOG