nanog mailing list archives
Re: Is it time to abandon bogon prefix filters?
From: "Robert E. Seastrom" <rs () seastrom com>
Date: Thu, 07 Aug 2008 15:29:41 -0400
"Patrick W. Gilmore" <patrick () ianai net> writes:
How much does it help to filter the bogons? In one study conducted by Rob Thomas of a frequently attacked site, fully 60% of the naughty packets were obvious bogons (e.g. 127.1.2.3, 0.5.4.3, etc.)
Stated another way, you can get 60% success on bogon filtering by ignoring the free pool (which is getting smaller over time which indicates the value in filtering it is asymptotic to zero) and only filtering obvious crud, whose definition is not going to change over time. In other words, Leo is right, and I'd submit that we're past the point where putting in non-auto-updated filters for the free pool has a value that exceeds the operational cost of dealing with their lossage... by a couple of years. -r
Current thread:
- Re: Is it time to abandon bogon prefix filters?, (continued)
- Re: Is it time to abandon bogon prefix filters? Kevin Loch (Aug 19)
- Re: Is it time to abandon bogon prefix filters? Pekka Savola (Aug 19)
- Re: Is it time to abandon bogon prefix filters? Kevin Loch (Aug 20)
- Re: Is it time to abandon bogon prefix filters? Jo Rhett (Aug 21)
- Re: Is it time to abandon bogon prefix filters? Sean Donelan (Aug 21)
- Re: Is it time to abandon bogon prefix filters? Jared Mauch (Aug 25)
- Re: Is it time to abandon bogon prefix filters? Marshall Eubanks (Aug 25)
- Re: Is it time to abandon bogon prefix filters? Mark Andrews (Aug 25)
- Re: Is it time to abandon bogon prefix filters? Pete Templin (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Patrick W. Gilmore (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Robert E. Seastrom (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Patrick W. Gilmore (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Rob Thomas (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Rob Thomas (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Randy Bush (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Niels Bakker (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Rob Thomas (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Rob Thomas (Aug 07)
- Re: Is it time to abandon bogon prefix filters? Patrick W. Gilmore (Aug 07)