[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Is it time to abandon bogon prefix filters?
Patrick W. Gilmore wrote:
> Filter your bogons. But do it in an automated fashion, from a trusted
> source.
>
> Of course, I recommend Team Cymru, which has a most sterling record.
> Nearly perfect (other than the fact they still recommend MD5 on BGP
> sessions :).
How can you recommend Team Cymru, when their product is not in any way a
filter? It is merely an automated method of injecting aggregate null
routes for bogons, but in no way prevents a network from accepting
aggregate or specific bogon announcements (i.e. it does not _filter_).
pt