nanog mailing list archives

Re: What were we saying about edge filtering?


From: Sean Donelan <sean () donelan com>
Date: Thu, 4 Sep 2003 13:14:54 -0400 (EDT)


On Thu, 4 Sep 2003, Rob Thomas wrote:
] I'm going to take a stab at: The next 69.0.0.0/8 release? Certainly there
] was some lesson learned from this, no?

Yep, and the lesson is:  Lots of folks do a poor job of network
management.  :(

Keeping up with the bogons can be automated, see:

   <http://www.cymru.com/BGP/bogon-rs.html>

It gets even worse.  Cisco has hard-coded the list of Bogons into some of
its latest low-end IOS versions as part of its "auto-secure" feature.
Yes, Cisco includes warnings in the manual the user should check the
official list at IANA; but I also know the power of defaults.  People
upgrade their IOS versions even less often then they update their
Windows boxes.  So we're going to see chunks of the net blocked depending
on the release date of versions of IOS.




Current thread: