nanog mailing list archives
RE: Customer-facing ACLs
From: Tim Sanderson <tims () donet com>
Date: Fri, 7 Mar 2008 15:48:23 -0500
We also use ingress bogon ACLs at our borders. -- Tim Sanderson, network administrator tims () donet com -----Original Message----- From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On Behalf Of Justin Shore Sent: Friday, March 07, 2008 3:20 PM To: Valdis.Kletnieks () vt edu Cc: NANOG Subject: Re: Customer-facing ACLs Valdis.Kletnieks () vt edu wrote:
On Fri, 07 Mar 2008 13:55:05 CST, Justin Shore said:I'm assuming everyone uses uRPF at all their edges already so that eliminates the need for specific ACEs with ingress/egress network verification checks.You're new here, aren't you? :)
Hopefully optimistic. Don't bum me out going into a weekend... :-) From the looks of my ingress BOGON ACLs on my borders (yes, I'm using ACLs and not null routes for a reason) I'd most people not reading NANOG (and maybe even some of them!) are not doing any ingress filtering on their customer source IPs. Sad.... Justin
Current thread:
- Customer-facing ACLs Justin Shore (Mar 07)
- Re: Customer-facing ACLs Justin M. Streiner (Mar 07)
- Re: Customer-facing ACLs Kameron Gasso (Mar 07)
- RE: Customer-facing ACLs Frank Bulk (Mar 07)
- Re: Customer-facing ACLs Kameron Gasso (Mar 07)
- Re: Customer-facing ACLs Valdis . Kletnieks (Mar 07)
- Re: Customer-facing ACLs Justin Shore (Mar 07)
- RE: Customer-facing ACLs Tim Sanderson (Mar 07)
- Re: Customer-facing ACLs Dan Armstrong (Mar 07)
- Re: Customer-facing ACLs Justin Shore (Mar 07)
- Re: Customer-facing ACLs Robert Beverly (Mar 07)
- Re: Customer-facing ACLs Danny McPherson (Mar 07)
- Re: Customer-facing ACLs Mark Tinka (Mar 08)
- Re: Customer-facing ACLs Adrian Chadd (Mar 10)
- Re: Customer-facing ACLs Jo Rhett (Mar 10)
- Re: Customer-facing ACLs Christopher Morrow (Mar 11)
- <Possible follow-ups>
- Re: Customer-facing ACLs Scott Weeks (Mar 07)
- Re: Customer-facing ACLs Justin Shore (Mar 07)
- Re: Customer-facing ACLs Dave Pooser (Mar 07)
- Re: Customer-facing ACLs Justin Shore (Mar 07)
(Thread continues...)
- Re: Customer-facing ACLs Justin M. Streiner (Mar 07)