Strange public traceroutes return private RFC1918 addresses

Petri Helenius pete at he.iki.fi
Tue Feb 3 20:11:41 UTC 2004


Niels Bakker wrote:

>>    
>>
>
>Just like the extra chopping up of the data you want to send into more
>packets, it's things you have to do a few extra times.  That takes time.
>There is no way around this.  What Leo wrote is in no way wrong.
>
>
>  
>
Maybe we need to define what the expression "huge difference" means in 
this context. Previously
it has been defined as 1.4% difference which in my opinion qualifies as 
understatement of the day.

If we would be talking about 20% or more difference here, the pain from 
larger MTU might  be tolerable.

>>ACL checks I can agree on, but if you are optimizing the system, what
>>do you need ACL?s for anyway because you can make the applications
>>secure in the first place?
>>    
>>
>
>You're trolling, right?
>
>  
>
No. I´ll trust my digital signatures over the source IP filters any day.

Pete




More information about the NANOG mailing list