what's that smell?
Stephen J. Wilcox
steve at telecomplete.co.uk
Mon Oct 7 23:05:29 UTC 2002
to that end why doesnt bind ship with default zone files for rfc1918 space as
well as 127.0.0.0 ?
Steve
On Mon, 7 Oct 2002, Paul Vixie wrote:
>
> since the last time we cleared the firewall statistics on c.root-servers.net,
> 1895GB of udp/53 input has led to 6687GB of udp/53 output, but, and this is
> the important part now so pay attention, 185GB of input was dropped due to an
> RFC1918 source address.
>
> who needs DDOS when most network operators aren't filtering RFC1918 on output?
> (there's only been 4.2GB of udp/2002 and other wormy traffic, by comparison.)
>
> current winners of the "sustained input traffic over 100KBits/sec" award are
> 164.58.150.146, 200.52.12.131, and 195.146.194.12. c-root keeps on ignoring
> you, but you just never give up. congradulations, or something.
>
> (note that c-root's network operator has offered to filter RFC1918 on
> input from other AS's, but it's actually useful to keep on measuring it.)
>
More information about the NANOG
mailing list