[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Is it time to abandon bogon prefix filters?

Subject: Is it time to abandon bogon prefix filters?
From: kloch at kl.net (Kevin Loch)
Date: Tue, 19 Aug 2008 11:35:18 -0400
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]>

Jared Mauch wrote:

> 	While you're at it, you also placed the reachable-via rx on
> all your customer interfaces.  If you're paranoid, start with the 'any'
> rpf and then move to the strict rpf.  The strict rpf also helps with
> routing loops.

Be careful not to enable strict rpf on multihomed customers.  This includes
any bgp customer unless you know for sure they are single homed to you and that will not
change.

- Kevin

Follow-Ups:
- Is it time to abandon bogon prefix filters?
  - From: pekkas at netcore.fi (Pekka Savola)
- Is it time to abandon bogon prefix filters?
  - From: sean at donelan.com (Sean Donelan)

References:
- Is it time to abandon bogon prefix filters?
  - From: rs at seastrom.com (Robert E. Seastrom)
- Is it time to abandon bogon prefix filters?
  - From: tomb at byrneit.net (Tomas L. Byrnes)
- Is it time to abandon bogon prefix filters?
  - From: petelists at templin.org (Pete Templin)
- Is it time to abandon bogon prefix filters?
  - From: jared at puck.nether.net (Jared Mauch)

Prev by Date: RouterOS performance?
Next by Date: It's Ars Tech's turn to bang the IPv4 exhaustion drum
Previous by thread: Is it time to abandon bogon prefix filters?
Next by thread: Is it time to abandon bogon prefix filters?
Index(es):
- Date
- Thread