SORBS on autopilot?

Jed Smith jed at jedsmith.org
Tue Jan 12 12:59:09 CST 2010


On Jan 12, 2010, at 1:48 PM, Dave Martin wrote:

> On Tue, Jan 12, 2010 at 11:51:47AM -0500, Jed Smith wrote:
>> On Jan 11, 2010, at 11:11 AM, Jon Lewis wrote:
>> The vibe I got from a number of administrators I talked to about it was "why
>> would a standards document assume an IPv4/IPv6 unicast address is a residential
>> customer with a modem, forcing those with allocations to prove that they are
>> not residentially allocated rather than the other way around?"
> 
> Because a default allow policy doesn't work in today's environment.

Blocking based on PTR alone is dangerous, is what I'm saying.  I know default
deny is important, but the decision can only be minorly influenced by PTR, not
entirely made on it.  There needs to be a better way, but there isn't.

JS





More information about the NANOG mailing list