what's that smell?

Stephen J. Wilcox steve at telecomplete.co.uk
Mon Oct 7 23:05:29 UTC 2002


to that end why doesnt bind ship with default zone files for rfc1918 space as
well as 127.0.0.0 ?

Steve


On Mon, 7 Oct 2002, Paul Vixie wrote:

> 
> since the last time we cleared the firewall statistics on c.root-servers.net,
> 1895GB of udp/53 input has led to 6687GB of udp/53 output, but, and this is
> the important part now so pay attention, 185GB of input was dropped due to an
> RFC1918 source address.
> 
> who needs DDOS when most network operators aren't filtering RFC1918 on output?
> (there's only been 4.2GB of udp/2002 and other wormy traffic, by comparison.)
> 
> current winners of the "sustained input traffic over 100KBits/sec" award are
> 164.58.150.146, 200.52.12.131, and 195.146.194.12.  c-root keeps on ignoring
> you, but you just never give up.  congradulations, or something.
> 
> (note that c-root's network operator has offered to filter RFC1918 on
> input from other AS's, but it's actually useful to keep on measuring it.)
> 




More information about the NANOG mailing list