[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Request for comment -- BCP38

Subject: Request for comment -- BCP38
From: list at satchell.net (Stephen Satchell)
Date: Mon, 26 Sep 2016 07:47:50 -0700
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]>

On 09/26/2016 07:11 AM, Paul Ferguson wrote:
> No -- BCP38 only prescribes filtering outbound to ensure that no
> packets leave your network with IP source addresses which are not
> from within your legitimate allocation.

So, to beat that horse to a fare-thee-well, to be BCP38 compliant I 
need, on every interface sending packets out to the internet, to block 
any source address matching a subnet in the BOGON list OR not matching 
any of my routeable network subnets?  Plus add null-route entries for 
all the BOGONs in my routing table so I don't send a bad destination 
packet to my upstream?

Follow-Ups:
- Request for comment -- BCP38
  - From: elmi at 4ever.de (Elmar K. Bins)
- Request for comment -- BCP38
  - From: fergdawgster at mykolab.com (Paul Ferguson)
- Request for comment -- BCP38
  - From: hugo at slabnet.com (Hugo Slabbert)
- Request for comment -- BCP38
  - From: sethm at rollernet.us (Seth Mattinen)

References:
- Request for comment -- BCP38
  - From: list at satchell.net (Stephen Satchell)
- Request for comment -- BCP38
  - From: fergdawgster at mykolab.com (Paul Ferguson)

Prev by Date: Request for comment -- BCP38
Next by Date: charges for prefix filter updates (was Re: Any ISPs using AS852 for IP Transit?)
Previous by thread: Request for comment -- BCP38
Next by thread: Request for comment -- BCP38
Index(es):
- Date
- Thread