nanog mailing list archives

Re: Is it time to abandon bogon prefix filters?


From: Joe Malcolm <jmalcolm () uraeus com>
Date: Fri, 15 Aug 2008 21:43:40 +0000

Robert E. Seastrom writes:
Not sure what you mean by this, but the painful reality is that most
stuff, once deployed, gets promptly forgotten about, much the same as
you might ignore a wall wart power supply under your desk until it
started smelling funny or stopped delivering electricity.  Thus, I
contend that one's routers should be configured to avoid ticking time
bombs.  As smb so eloquently just asserted, "availability is a
security issue too".

This is particularly but not exclusively true if they are implementing
an "overhead" function - i.e., if they are not directly in the
money-generating path. If they are, they at least have some chance at
getting some attention when not on fire. Otherwise, they will likely
be ignored until failure.

Joe


Current thread: