nanog mailing list archives
Re: Is it time to abandon bogon prefix filters?
From: "Robert E. Seastrom" <rs () seastrom com>
Date: Fri, 15 Aug 2008 09:34:48 -0400
Randy Bush <randy () psg com> writes:
In other words, our earlier estimate of 60% was way off... you can get 92.1% effectiveness at bogon filtering by just dropping 1918 addresses, a filter that you will never have to change.my read is that the 60% was an alleged 60% of attacks came from *all* bogon space. this now seems in the low single digit percentge. of that, the majority is from 1918 space.
so is there any case to be made for filtering bogons on upstream/peering ingress at all anymore? (this discussion is orthogonal to bcp38/urpf, which i think we all agree is a good thing and would be great if we could get it further deployed) ---rob
Current thread:
- Re: Is it time to abandon bogon prefix filters?, (continued)
- Re: Is it time to abandon bogon prefix filters? Rob Evans (Aug 06)
- Re: Is it time to abandon bogon prefix filters? Justin Shore (Aug 06)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 06)
- Re: Is it time to abandon bogon prefix filters? Danny McPherson (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Andree Toonk (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Danny McPherson (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Marshall Eubanks (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Laurence F. Sheldon, Jr. (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Steven M. Bellovin (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 15)