Where are static bogon filters appropriate? was: 96.2.0.0/16 Bogons

Fri Mar 2 21:37:01 UTC 2007

I think Sean raises a good point. I guess the larger picture is what are we
trying to protect and what are trying to protect that from. 

-----Original Message-----
From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On Behalf Of Sean
Donelan
Sent: Friday, March 02, 2007 3:19 PM
To: Roland Dobbins
Cc: NANOG
Subject: Re: Where are static bogon filters appropriate? was: 96.2.0.0/16
Bogons

On Fri, 2 Mar 2007, Roland Dobbins wrote:
>> Sometimes, network operators have to take the bull
>> by the horns and develop their own systems to do a job that vendors 
>> simply don't understand.
>
> Concur - but it seems that many seem to be looking for someone else to 
> do
> this for them (or, perhaps, the lack of someone to do it for them as an 
> excuse to do nothing at all).

How much of a problem is traffic from unallocated addresses?  Backbone 
operators probably have NetFlow data which they could mine to find out. On
the other hand, how much of a problem is obsolete bogon filters causing
everytime IANA delegates another block to an RIR?

Or by the way, how much spoofed traffic uses allocated addresses?