Re: route filtering in large networks

["Jack Bates" <jbates () brightok net>]

From: "Richard A Steenbergen"

> Simple, apply a bogon list and then fail to update it. If you are not
> ready willing and able to keep your lists updated, you probably shouldn't
> have applied them in the first place. I routinely see people doing absurd
> things like applying ipfw bogon filters on individual servers to "protect
> against DoS" that end up costing them way more in performance than they
> could possibly gain from filtering the bogons. Let's keep it real folks,
> these filters aren't needed everywhere.
You think that's bad? Try this one. Contacted network to inform them that
they had an access list on a router rejecting 69/8 and that 69/8 was
recently handed out, blah blah blah. Get a call back saying that they found
the route for 69 and removed it. Could I please try it again. To humor said
person, I tried it again and got what I expected (A). My question is, if
he's running an acl with a bogon list, why does he have a route (presumably
static since it was removed) for 69/8? I'm tempted to start mailing out
bananas.

-Jack