nanog mailing list archives
Re: TWC (AS11351) blocking all NTP?
From: William Herrin <bill () herrin us>
Date: Tue, 4 Feb 2014 11:04:08 -0500
On Sun, Feb 2, 2014 at 5:17 PM, Cb B <cb.list6 () gmail com> wrote:
And, i agree bcp38 would help but that was published 14 years ago.
Howdy, If just three of the transit-free networks rewrote their peering contracts such that there was a $10k per day penalty for sending packets with source addresses the peer should reasonably have known were forged, this problem would go away in a matter of weeks. Granted it would also be helpful to have a BGP extension signifying allowed-source-but-don't-route so that RP filtering would work even when multihomed. Still, even without automatic RP filtering we're capable of preventing spoofed packets if financially incentivized. Thing is, they can't be the source of the solution until they stop being part of the problem. Regards, Bill Herrin -- William D. Herrin ................ herrin () dirtside com bill () herrin us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004
Current thread:
- Re: TWC (AS11351) blocking all NTP?, (continued)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Christopher Morrow (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Laszlo Hanyecz (Feb 04)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Dobbins, Roland (Feb 03)
- Re: TWC (AS11351) blocking all NTP? Stephane Bortzmeyer (Feb 03)
- BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Paul Ferguson (Feb 03)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Cb B (Feb 03)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Jay Ashworth (Feb 03)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] jamie rishaw (Feb 06)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Jared Mauch (Feb 04)
- Re: TWC (AS11351) blocking all NTP? William Herrin (Feb 04)
- Re: TWC (AS11351) blocking all NTP? Jared Mauch (Feb 04)
- BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Paul Ferguson (Feb 04)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Valdis . Kletnieks (Feb 04)
- Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?] Paul Ferguson (Feb 04)
- Why won't providers source-filter attacks? Simple. Jay Ashworth (Feb 04)
- Re: Why won't providers source-filter attacks? Simple. Octavio Alvarez (Feb 04)
- Re: Why won't providers source-filter attacks? Simple. Mark Andrews (Feb 04)
- Re: Why won't providers source-filter attacks? Simple. Randy Bush (Feb 04)