nanog mailing list archives
Re: Best way to get of Bogon list?
From: "Christopher L. Morrow" <christopher.morrow () mci com>
Date: Fri, 26 Nov 2004 07:29:53 +0000 (GMT)
On Fri, 26 Nov 2004 alex () pilosoft com wrote:
On Thu, 25 Nov 2004, Jon Lewis wrote:Its not even just providers. If it were, it'd be relatively easy to just find and call each NOC. You're likely to have bogon issues with few large providers. It's mostly smaller providers and end user networks...some of which are quite large or high profile. Do what I did and give people a way to test connectivity from both affected and unaffected space and setup a 'hall of shame' page listing the IPs/networks that are behind broken filters.Can someone identify the *benefits* of using bogon lists for unallocated space? It appears that it only hurts connectivity, but does not help in any significant way to enhance security.
It might be a way to proactively keep your part of the network 'cleaner' than the other parts... 'managed' properly and 'updated' regularly (when changes dictate an update is required) it might even be seemless to your userbase. The devil here is, as always, in the details. Once you move beyond some number of devices or acls or 'parts', making changes on a wide scale and keeping things up to date becomes more difficult. Change management and the number of hands in the pot seem to make these things much more challenging.
Possibly, whoever are the vendors of software that recommends this practice (and authors of security handbooks) should be show the error of their ways?
if they did they'd lose part of their punch :( And lose some of their readerbase... and who'd call you to complain? :)
Current thread:
- Re: Best way to get of Bogon list?, (continued)
- Re: Best way to get of Bogon list? Suresh Ramasubramanian (Nov 26)
- Re: Best way to get of Bogon list? Majid Farid (Nov 26)
- Re: Best way to get of Bogon list? Suresh Ramasubramanian (Nov 26)
- Re: Best way to get of Bogon list? Jon Lewis (Nov 26)
- Re: Best way to get of Bogon list? alex (Nov 26)
- Re: Best way to get of Bogon list? Suresh Ramasubramanian (Nov 26)
- Re: Best way to get of Bogon list? alex (Nov 26)
- Re: Best way to get of Bogon list? Joe Provo (Nov 27)
- Re: Best way to get of Bogon list? Suresh Ramasubramanian (Nov 26)
- Re: Best way to get of Bogon list? Jon Lewis (Nov 26)
- Re: Best way to get of Bogon list? Peter Corlett (Nov 27)
- Re: Best way to get of Bogon list? Christopher L. Morrow (Nov 26)
- Re: Best way to get of Bogon list? Iljitsch van Beijnum (Nov 27)
- Re: Best way to get of Bogon list? Christopher L. Morrow (Nov 27)
- Re: Best way to get of Bogon list? Iljitsch van Beijnum (Nov 27)
- Re: Best way to get of Bogon list? Valdis . Kletnieks (Nov 29)
- Re: Best way to get of Bogon list? Jared Mauch (Nov 27)
- RE: Best way to get of Bogon list? Barry Raveendran Greene (Nov 29)
- Re: Best way to get of Bogon list? Jared Mauch (Nov 29)
- RE: Best way to get of Bogon list? Hank Nussbacher (Nov 26)