nanog mailing list archives

Re: uPRF strict more


From: Sabri Berisha <sabri () cluecentral net>
Date: Wed, 29 Sep 2021 15:30:07 -0700 (PDT)

----- On Sep 29, 2021, at 8:03 AM, Blake Hudson blake () ispn net wrote:

Hi Blake,

    200 deny ip 10.0.0.0 0.255.255.255 any (91057035 matches)
    210 deny ip 172.16.0.0 0.15.255.255 any (1366408 matches)
    220 deny ip 192.168.0.0 0.0.255.255 any (18325538 matches)

These could perhaps be ICMP host unreachables transmitted by your
peers' infrastructure? I've seen my share of production networks 
running on RFC1918 space while routing public blocks.

Thanks,

Sabri


Current thread: