nanog mailing list archives

Re: Anti-spoofing: is anyone doing it?


From: Dan Hollis <goemon () anime net>
Date: Sat, 26 May 2001 22:21:29 -0700 (PDT)


On Sun, 27 May 2001, Hank Nussbacher wrote:
We have found that about 5% of sites are connected to 2 ISPs but do not use
BGP.  They use two different sets of IP addresses and point default to one
of the two ISPs.  The return traffic will of course go to them via one of
the two ISPs, but if you have anti-spoofing filters set up or try to set it
up now, you will break their outgoing traffic.

They need better routers which can source route, then absolutely nothing
will break (and their return traffic wont be taking suboptimal assymetric
paths).

-Dan



Current thread: