nanog mailing list archives
Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
From: Rob Thomas <robt () cymru com>
Date: Thu, 20 Jan 2005 19:30:32 -0600 (CST)
Hi, NANOGers. Will makes an excellent point here: ] I beg to differ - 3/4 of the Cisco routers in (enterprise) production are ] *unmaintained*. These will have a variety of vulnerable, buggy or just plain ] crap IOS versions and no-one would've even considered upgrading for years. While I don't have any numbers, I can say that we see a LOT of routers overtly compromised and modified as a result. The modifications are generally scripted, and include changing the passwords (to anything but "cisco"), disabling logging, and adding filters. You'd think such things would be rather obvious, and they are, yet no one notices. Most of these compromised routers are at the end of FR or frac-T connections. I suspect a great many of them were configured once, then left to rot with the same code and configuration for years and years. Thanks, Rob. -- Rob Thomas http://www.cymru.com Shaving with Occam's razor since 1999.
Current thread:
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19, (continued)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Suresh Ramasubramanian (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Jared Mauch (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Suresh Ramasubramanian (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Jared Mauch (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Chris A. Epler (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 David Barak (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Rob Evans (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 joshua sahala (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Valdis . Kletnieks (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Will Hargrave (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Rob Thomas (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Charles R. Anderson (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Valdis . Kletnieks (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Suresh Ramasubramanian (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Bill Stewart (Jan 21)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Vicky Rode (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 David Barak (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Joe Maimon (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Rodney Dunn (Jan 20)
- Re: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 Daniel Golding (Jan 20)