Re: Loose Source Routing

[Jared Mauch <jared () puck Nether net>]

On Tue, Mar 06, 2001 at 09:49:47AM -0800, David McGaugh wrote:
> What are people's feelings on loose source routing? The general
> sentiment around here is that it is a very evil thing. The reason I ask
> is that there is a certain network out there (who will remain nameless)
> who refuses to peer unless loose source routing is enabled. I can
> somewhat understand their reasoning (they can reroute traffic on OUR
> network as necessary) but the security implications far out way the
> benefits. Not only this I'm not comfortable with an outside source
> having control over routing on our network anyway.

        Huh?

        The reason to permit this is to verify peering policy.  This
allows people to traceroute to verify packet path.  Example:
I announce 172.16.0.0/16 only.  I want to verify that you are not
pointing default at me, so I can do a loose source 
traceroute to 10.0.0.0 via the peering point.

        Most peoples peering policies that I'm aware of only required that
it be enabled at the edge (peering/nap router).

        - Jared

--
Jared Mauch  | pgp key available via finger from jared () puck nether net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.