Is it time to abandon bogon prefix filters?

Kevin Loch kloch at kl.net
Tue Aug 19 15:35:18 UTC 2008


Jared Mauch wrote:

> 	While you're at it, you also placed the reachable-via rx on
> all your customer interfaces.  If you're paranoid, start with the 'any'
> rpf and then move to the strict rpf.  The strict rpf also helps with
> routing loops.

Be careful not to enable strict rpf on multihomed customers.  This includes
any bgp customer unless you know for sure they are single homed to you and that will not
change.

- Kevin




More information about the NANOG mailing list