nanog mailing list archives

Re: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)


From: William Herrin <bill () herrin us>
Date: Tue, 7 Mar 2023 15:49:12 -0800

On Tue, Mar 7, 2023 at 3:34 PM Lukas Tribus <lukas () ltri eu> wrote:
A bogon prefix is a route that should never appear in the Internet
routing table. A packet routed over the public Internet (not including
over VPNs or other tunnels) *should never have an address in a
bogon range.* These are commonly found as the source addresses
of DDoS attacks.

They either have to make it clear what their bogon list can actually
be used for or they need to drop RFC6598 from the list.

You'll have to connect the dots for me here, I'm not seeing the
problem. The ISP's local network is not "the public Internet." They
can use RFC6598 and even RFC1918 at their leisure. If they choose to
place services on those addresses and you want to use them, you'll
have to exclude them from your local filtering and/or your own
internal use. For everybody else, they're bogons.

Is someone out there defaulting consumption of the bogon list who
shouldn't be? What leads you to the strong objection about 100.64/10's
inclusion?

Regards,
Bill Herrin

-- 
For hire. https://bill.herrin.us/resume/


Current thread: