What were we saying about edge filtering?

Adam Debus nanog at delsol.net
Thu Sep 4 17:34:35 UTC 2003


Do you have a reference page as to what platforms/releases/release trains
that is being applied to?

Seems like it might be a handy list to have bookmarked. :)

Thanks,

Adam Debus
Linux Certified Professional, Linux Certified Administrator #447641
Network Engineer, ReachONE Internet
adam at reachone.com
----- Original Message ----- 
From: "Sean Donelan" <sean at donelan.com>
To: "Rob Thomas" <robt at cymru.com>
Cc: "Christopher L. Morrow" <chris at UU.NET>; "NANOG" <nanog at merit.edu>
Sent: Thursday, September 04, 2003 10:14 AM
Subject: Re: What were we saying about edge filtering?


>
> On Thu, 4 Sep 2003, Rob Thomas wrote:
> > ] I'm going to take a stab at: The next 69.0.0.0/8 release? Certainly
there
> > ] was some lesson learned from this, no?
> >
> > Yep, and the lesson is:  Lots of folks do a poor job of network
> > management.  :(
> >
> > Keeping up with the bogons can be automated, see:
> >
> >    <http://www.cymru.com/BGP/bogon-rs.html>
>
> It gets even worse.  Cisco has hard-coded the list of Bogons into some of
> its latest low-end IOS versions as part of its "auto-secure" feature.
> Yes, Cisco includes warnings in the manual the user should check the
> official list at IANA; but I also know the power of defaults.  People
> upgrade their IOS versions even less often then they update their
> Windows boxes.  So we're going to see chunks of the net blocked depending
> on the release date of versions of IOS.
>
>
>
>




More information about the NANOG mailing list