nanog mailing list archives
Re: route filtering in large networks
From: Rob Thomas <robt () cymru com>
Date: Thu, 13 Mar 2003 00:57:00 -0600 (CST)
Hi, Jack. ] Nice, although it doesn't explain the purpose of having the routes if you ] have an acl. To keep viruses from attempting to contact bogons? To stop your ] internal network from surfing the bogon web which can't reply back anyways? Basically, yes. I'm not worried about folks web surfing 10/8. :) There are things that go wrong, however, and I firmly believe in filtering both on ingress and egress (at the edge, to be clear). This is an extra bit of protection in case something bad happens, be it malware, fat fingers, etc. Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);
Current thread:
- Re: Put part of Google on 69/8 (was Re: 69/8...this sucks), (continued)
- Re: Put part of Google on 69/8 (was Re: 69/8...this sucks) Greg Maxwell (Mar 12)
- Re: Put part of Google on 69/8 (was Re: 69/8...this sucks) JC Dill (Mar 12)
- gender and nanog Randy Bush (Mar 12)
- route filtering in large networks Andy Dills (Mar 12)
- Re: route filtering in large networks Richard A Steenbergen (Mar 12)
- Re: route filtering in large networks Jack Bates (Mar 12)
- RE: route filtering in large networks Michael K. Smith (Mar 12)
- Re: route filtering in large networks Jack Bates (Mar 12)
- Re: route filtering in large networks Peter E. Fry (Mar 12)
- Re: route filtering in large networks Christopher L. Morrow (Mar 12)
- Re: route filtering in large networks Rob Thomas (Mar 12)
- Re: route filtering in large networks Randy Bush (Mar 12)
- Re: route filtering in large networks E.B. Dreger (Mar 13)
- Re: route filtering in large networks Lars Erik Gullerud (Mar 13)
- Re: route filtering in large networks Alan Hannan (Mar 12)
- Re: route filtering in large networks Randy Bush (Mar 12)
- Re: route filtering in large networks Andy Dills (Mar 12)
- Re: route filtering in large networks Randy Bush (Mar 13)
- Re: route filtering in large networks Dorian Kim (Mar 13)
- Re: route filtering in large networks Stephen Sprunk (Mar 13)
- Re: route filtering in large networks Iljitsch van Beijnum (Mar 13)