nanog mailing list archives

Re: Is it time to abandon bogon prefix filters?


From: Randy Bush <randy () psg com>
Date: Fri, 15 Aug 2008 06:26:44 -0700

In other words, our earlier estimate of 60% was way off...  you can
get 92.1% effectiveness at bogon filtering by just dropping 1918
addresses, a filter that you will never have to change.

my read is that the 60% was an alleged 60% of attacks came from *all*
bogon space.  this now seems in the low single digit percentge.  of
that, the majority is from 1918 space.

randy


Current thread: