nanog mailing list archives
Re: IPv6 PI block is announced - update your filters 2620:0000::/23
From: "william(at)elan.net" <william () elan net>
Date: Fri, 15 Sep 2006 15:48:59 -0700 (PDT)
On Fri, 15 Sep 2006, Randy Bush wrote:
Call me naive, but could somebody enlighten me as to what tangible benefit filtering out bogon space actually achieves? It strikes me that it causes more headaches than it solves.the theory is that it means you have no route to send responses back to an attacker who uses tcp, i.e. a spammer.
IANA-based data bogon filters are in fact mostly useful to filter attackissues using udp-based and similar protocols that don't require session establishment.
the practice is that spammers use holes or super-blocks of allocated, i.e. not bogon, space. they are not stupid.
It is still bogon space and completewhois bogon list catches most of those.Those that don't get caught are the ones where allocation exists but ip space is not being used (i.e. not advertised in bgp) and then doing super-block works for the spammer (there are ways to filter that as
well actually but you ran risk of filtering those doing aggregation). And do remember that original question was about IPv6 allocation. Personally I don't know any spammers using ipv6 bogon space [yet]...
so your point is well taken. randy
Current thread:
- Re: renumbering & IPv6, (continued)
- Re: renumbering & IPv6 kloch (Sep 13)
- Re: renumbering & IPv6 david raistrick (Sep 14)
- Re: renumbering & IPv6 william(at)elan.net (Sep 14)
- Re: renumbering & IPv6 Roland Dobbins (Sep 13)
- IPv6 PI block is announced - update your filters 2620:0000::/23 Jeroen Massar (Sep 13)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Stephen Sprunk (Sep 13)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Jeroen Massar (Sep 14)
- Message not available
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Doug Barton (Sep 15)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Peter Corlett (Sep 15)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Randy Bush (Sep 15)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 william(at)elan.net (Sep 15)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Albert Meyer (Sep 15)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Michael . Dillon (Sep 18)
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Bill Stewart (Sep 15)
- Message not available
- Re: IPv6 PI block is announced - update your filters 2620:0000::/23 Bjoern A. Zeeb (Sep 15)
- Re: renumbering & IPv6 Michael . Dillon (Sep 14)
- Re: [Fwd: Kremen VS Arin Antitrust Lawsuit - Anyone have feedback?] Justin M. Streiner (Sep 08)