nanog mailing list archives
Re: Best practices inquiry: filtering 128/1
From: Joe Abley <jabley () ca afilias info>
Date: Tue, 11 Jul 2006 17:22:16 -0400
On 11-Jul-2006, at 02:06, Florian Weimer wrote:
* Patrick W. Gilmore:Actually, I take that back. Why wouldn't you just get a feed from Cymru <http://www.cymru.com/Bogons/index.html> ??I don't think Team Cymru offers a "feed" of what is supposed to be in the routing table.
No, but they offer a feed of what is not supposed to be there. http://www.cymru.com/BGP/bogon-rs.html
The correct approach would be to verify prefixes using somewhat indepedent. more static data, such as RPSL data from RIRs.
That might be more correct in theory, but in practice it depends on RPSL data stored by RIRs being accurate. Although this is a reasonable dependency in some corners of the network, it's entirely impractical (on its own) if you're seeking to filter a full table.
As one of many contributing hints to whether a particular filter is worth accepting, it might be useful though (along the lines that SpamAssassin doesn't necessarily reply on any one reason to brand a message as spam, but builds a score based on all kinds of tests). There was a relevant presentation in LA:
http://www.nanog.org/mtg-0510/deleskie.html Joe
Current thread:
- Best practices inquiry: filtering 128/1 WONG, Yuen-Fung (Jul 10)
- Re: Best practices inquiry: filtering 128/1 Patrick W. Gilmore (Jul 10)
- Message not available
- Re: Best practices inquiry: filtering 128/1 Patrick W. Gilmore (Jul 10)
- Message not available
- Re: Best practices inquiry: filtering 128/1 Jerry Pasker (Jul 10)
- Re: Best practices inquiry: filtering 128/1 Patrick W. Gilmore (Jul 10)
- Re: Best practices inquiry: filtering 128/1 Rob Thomas (Jul 10)
- Re: Best practices inquiry: filtering 128/1 John Kristoff (Jul 10)
- Re: Best practices inquiry: filtering 128/1 Patrick W. Gilmore (Jul 10)
- Re: Best practices inquiry: filtering 128/1 Florian Weimer (Jul 11)
- Re: Best practices inquiry: filtering 128/1 Joe Abley (Jul 11)
- <Possible follow-ups>
- RE: Best practices inquiry: filtering 128/1 WONG, Yuen-Fung (Jul 10)
- RE: Best practices inquiry: filtering 128/1 WONG, Yuen-Fung (Jul 12)
- RE: Best practices inquiry: filtering 128/1 Christopher L. Morrow (Jul 12)