Open relays and open proxies

Fri Apr 25 02:19:39 UTC 2003

Paul Vixie wrote:
> 
> but you're right, a half million additional routes would Break Stuff in
> most places.  one could pixelize, aggregate on /28 or /24 boundaries, or
> maintain some kind of MRU.  but it's all very hacky compared to "upgrade
> the bgp core to be able to handle a million more route$".

You might as well do /28 or /24 boundaries considering the number of 
open proxies that are on dhcp with low lease times, and (while slow) 
even on dialup. It should be up front (and in BCP, AUP, etc) that any 
insecure system found on a network should be shut down immediately until 
the system is fixed (suspension of account, not termination).

-Jack