What were we saying about edge filtering?

Sean Donelan sean at donelan.com
Thu Sep 4 17:14:54 UTC 2003


On Thu, 4 Sep 2003, Rob Thomas wrote:
> ] I'm going to take a stab at: The next 69.0.0.0/8 release? Certainly there
> ] was some lesson learned from this, no?
>
> Yep, and the lesson is:  Lots of folks do a poor job of network
> management.  :(
>
> Keeping up with the bogons can be automated, see:
>
>    <http://www.cymru.com/BGP/bogon-rs.html>

It gets even worse.  Cisco has hard-coded the list of Bogons into some of
its latest low-end IOS versions as part of its "auto-secure" feature.
Yes, Cisco includes warnings in the manual the user should check the
official list at IANA; but I also know the power of defaults.  People
upgrade their IOS versions even less often then they update their
Windows boxes.  So we're going to see chunks of the net blocked depending
on the release date of versions of IOS.






More information about the NANOG mailing list