ARIN space not accepted

Tue Dec 7 23:40:20 UTC 2010

On Mon, 06 Dec 2010 17:02:40 PST, somebody said:
> >>> From: Valdis.Kletnieks at vt.edu
> >>>> From: Valdis.Kletnieks at vt.edu
> >>> Date: Fri, 03 Dec 2010 20:00:15 -0500
> 
> >>>> 224/3
> >>> Oh. And don't forget to do *bidirectional* filtering of these addresses. ;)
> >> Ahh, not quite. Blocking 224/3 bi-directionally might cause a few issues
> >> if you accept multicast traffic from anyone.

If you're smart enough to actually do multicast, you're smart enough to remove
the filter for 224/3.  If you're not smart enough to remove the filter, or
you're smart enough but you're one of the 95% that doesn't do multicast, your
site should be doing bidirectional filtering of 224/3. ;)

(Do you really want your users emitting outbound packets to/from 224/3 if you
don't actually do multicast? Probably not...)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20101207/a63a2ac9/attachment.sig>