nanog mailing list archives
Re: NSA's recommendation for classfull routing (was Re: IP address fee??)
From: Sean Donelan <sean () donelan com>
Date: Fri, 6 Sep 2002 19:27:11 -0400 (EDT)
Not that it will more people the trouble of sending me more messages, but yes I'm aware the NSA guide states: "The goal for this guide is a simple one: improve the security provided by routers on US Department of Defense (DoD) operational networks." Inside the DoD, they may want to only use classful routing. The recommendation may be valid for that environment. Unfortunately, some security firms and organizations have taken the NSA guide as a rulebook. I've seen a lot of security checklists copied directly from the NSA Router Security and Configuration Guide. Even worse, I've seen very expensive security vulnerability reports recommending clients change their routers based on the NSA guide, such as turning off ip classless. If you are building a network in the outside of the DoD some of the NSA recommendations should *NOT* be followed.
Current thread:
- RE: IP address fee??, (continued)
- RE: IP address fee?? David Luyer (Sep 06)
- RE: IP address fee?? Derek Samford (Sep 06)
- Re: IP address fee?? Ted Fischer (Sep 06)
- Re: IP address fee?? Stephen Sprunk (Sep 06)
- Re: IP address fee?? Richard A Steenbergen (Sep 06)
- Re: IP address fee?? Dave Israel (Sep 06)
- RE: IP address fee?? Jeroen Massar (Sep 06)
- Re: IP address fee?? Peter van Dijk (Sep 09)
- Re: IP address fee?? Iljitsch van Beijnum (Sep 06)
- NSA's recommendation for classfull routing (was Re: IP address fee??) Sean Donelan (Sep 06)
- Re: NSA's recommendation for classfull routing (was Re: IP address fee??) Sean Donelan (Sep 06)
- Re: NSA's recommendation for classfull routing (was Re: IP address fee??) Ryan Mooney (Sep 06)
- Re: IP address fee?? Iljitsch van Beijnum (Sep 06)
- Re: IP address fee?? Joe Abley (Sep 06)
- Re: IP address fee?? Iljitsch van Beijnum (Sep 06)
- Re: IP address fee?? Peter van Dijk (Sep 09)
- Re: IP address fee?? Tony Tauber (Sep 05)
- Re: IP address fee?? Etaoin Shrdlu (Sep 05)
- Re: IP address fee?? Christian Malo (Sep 05)
- Re: IP address fee?? Peter van Dijk (Sep 06)
- Re: IP address fee?? Brad Knowles (Sep 06)