Any way to P-T-P Distribute the RBL lists?

Eric A. Hall ehall at ehsco.com
Thu Sep 25 19:31:23 UTC 2003



on 9/24/2003 9:30 PM Drew Weaver wrote:

>             I know you all have probably already thought of this, but
> can anyone think of a feasible way to run a RBL list that does not have
> a single point of failure? Or any attackable entry?

Easy. Have the master server only be reachable by replication partners
through a VPN connection, and have dozens of secondaries advertising
through multiple anycast addresses.

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/




More information about the NANOG mailing list