nanog mailing list archives
Re: Is it time to abandon bogon prefix filters?
From: Randy Bush <randy () psg com>
Date: Fri, 15 Aug 2008 06:42:01 -0700
In other words, our earlier estimate of 60% was way off... you can get 92.1% effectiveness at bogon filtering by just dropping 1918 addresses, a filter that you will never have to change.my read is that the 60% was an alleged 60% of attacks came from *all* bogon space. this now seems in the low single digit percentge. of that, the majority is from 1918 space.so is there any case to be made for filtering bogons on upstream/peering ingress at all anymore?
maybe low percent is because it is effective. maybe not --- man walks into shrink's office waving open newspaper wildly. shrink asks "why are you waving the newspaper?" man replies, "it keeps the elephants away." shrink says, "elephants? there aren't any elephants for hundreds of kilometers." man replies, "pretty effective, isn't it!" --- personal guess: i suspect that at least rfc1918 filters are worthwhile if only because we make mistakes. randy
Current thread:
- Re: Is it time to abandon bogon prefix filters?, (continued)
- Re: Is it time to abandon bogon prefix filters? Justin Shore (Aug 06)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 06)
- Re: Is it time to abandon bogon prefix filters? Danny McPherson (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Andree Toonk (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Danny McPherson (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 14)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Marshall Eubanks (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Laurence F. Sheldon, Jr. (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Steven M. Bellovin (Aug 15)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 15)
- RE: Is it time to abandon bogon prefix filters? Tomas L. Byrnes (Aug 16)