Is it time to abandon bogon prefix filters?

Randy Bush randy at psg.com
Fri Aug 15 08:26:44 CDT 2008


> In other words, our earlier estimate of 60% was way off...  you can
> get 92.1% effectiveness at bogon filtering by just dropping 1918
> addresses, a filter that you will never have to change.

my read is that the 60% was an alleged 60% of attacks came from *all*
bogon space.  this now seems in the low single digit percentge.  of
that, the majority is from 1918 space.

randy




More information about the NANOG mailing list