do bogon filters still help?
Florian Weimer
fw at deneb.enyo.de
Wed Jan 11 23:21:30 UTC 2006
* Pim van Pelt:
> Hi Florian, others,
>
> | You should move 192.88.99.0/24 from SPECIAL to YES (although you
> | shouldn't see source addresses from that prefix, no matter what the
> | folks at bit.nl think). 169.254.0.0/16 should be NO (otherwise it
> | wouldn't be link-local).
> Hi, here's a member of 'the folks at bit.nl'. Just a quick note to
> say that we have been sourcing IPv4 packets from 192.88.99.1 at a rate
> of 2.000 to 10.000 packets per second since early 2003, so I'm guessing
> we have sent some 750.000 billion packets by now.
And this is just so wrong. You should use an address you own as a
source address. Otherwise, packets tend to get dropped by filters.
And no, "anyone should be able to spoof from 192.88.99.0/24" is not
the answer to this kind of problem.
More information about the NANOG
mailing list