nanog mailing list archives
Re: OpenNTPProject.org
From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Thu, 16 Jan 2014 14:30:35 +0000
On Jan 15, 2014, at 12:05 AM, Saku Ytti <saku () ytti fi> wrote:
(We do BCP38 on all ports and verify programmatically, but I know it's not at all practical solution globally for access).
Anti-spoofing is eminently practical for most types of access network topologies using even slightly modern equipment; uRPF, ACLs, cable IP source verify, DHCP Snooping (which works just fine with fixed-address hosts), PACLs/VACLs, et. al. are some of the more prevalent mechanisms available. In point of fact, anti-spoofing is most useful and most practical at the access-network edge, or as close to it as possible. ----------------------------------------------------------------------- Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton
Current thread:
- OpenNTPProject.org Jared Mauch (Jan 13)
- Re: OpenNTPProject.org Tony Finch (Jan 14)
- <Possible follow-ups>
- Re: OpenNTPProject.org Derek Andrew (Jan 13)
- Re: OpenNTPProject.org Bjoern A. Zeeb (Jan 13)
- Re: OpenNTPProject.org Saku Ytti (Jan 13)
- Re: OpenNTPProject.org Paul Ferguson (Jan 14)
- Re: OpenNTPProject.org Pierre Lamy (Jan 16)
- Re: OpenNTPProject.org Mark Andrews (Jan 16)
- Re: OpenNTPProject.org Bjoern A. Zeeb (Jan 13)
- Re: OpenNTPProject.org Damian Menscher (Jan 14)
- Re: OpenNTPProject.org Saku Ytti (Jan 14)
- Re: OpenNTPProject.org Dobbins, Roland (Jan 16)
- Re: OpenNTPProject.org Saku Ytti (Jan 16)
- Re: OpenNTPProject.org Dobbins, Roland (Jan 16)
- Re: OpenNTPProject.org Nicolai (Jan 15)
- "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Christopher Morrow (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Christopher Morrow (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Cb B (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)