BCP38/84 and DDoS ACLs

Fri May 26 17:54:28 UTC 2017

On Sat, 27 May 2017 00:19:34 +0700, Roland Dobbins said:

> servers/services/applications/users you have, et. al.  You may need one
> set of ACLs at the peering/transit edge, and other, more specific ACLs,
> at the IDC distribution gateway, customer aggregation gateway, et. al.

I'll go out on a limb and suggest that except for a very basic home/SOHO
network, "You may need" should be "You will probably need".
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 486 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20170526/72b166ad/attachment.sig>