Is it time to abandon bogon prefix filters?
jmalcolm at uraeus.com
Fri Aug 15 16:43:40 CDT 2008
Robert E. Seastrom writes:
>Not sure what you mean by this, but the painful reality is that most
>stuff, once deployed, gets promptly forgotten about, much the same as
>you might ignore a wall wart power supply under your desk until it
>started smelling funny or stopped delivering electricity. Thus, I
>contend that one's routers should be configured to avoid ticking time
>bombs. As smb so eloquently just asserted, "availability is a
>security issue too".
This is particularly but not exclusively true if they are implementing
an "overhead" function - i.e., if they are not directly in the
money-generating path. If they are, they at least have some chance at
getting some attention when not on fire. Otherwise, they will likely
be ignored until failure.
More information about the NANOG