Is it time to abandon bogon prefix filters?

Randy Bush randy at psg.com
Fri Aug 15 15:18:14 UTC 2008


>> Again, I think bogon filters are a bad idea for unmanaged or
>> semi-managed routers (or inclusion as a "default" in anything,
>> i.e. Cisco's auto-secure).
> 
> You make a very good point about the difference between routers that
> are being routinely maintained by highly clueful people and routers
> that are in the field and untouched/unloved for months to years at a
> time.

in the field != untouched/unloved

i contend that all one's routers should be rigorously configured as
programmatically as possible.

randy




More information about the NANOG mailing list