uPRF strict more

Sabri Berisha sabri at cluecentral.net
Wed Sep 29 22:30:07 UTC 2021


----- On Sep 29, 2021, at 8:03 AM, Blake Hudson blake at ispn.net wrote:

Hi Blake,

>     200 deny ip 10.0.0.0 0.255.255.255 any (91057035 matches)
>     210 deny ip 172.16.0.0 0.15.255.255 any (1366408 matches)
>     220 deny ip 192.168.0.0 0.0.255.255 any (18325538 matches)

These could perhaps be ICMP host unreachables transmitted by your
peers' infrastructure? I've seen my share of production networks 
running on RFC1918 space while routing public blocks.

Thanks,

Sabri


More information about the NANOG mailing list