[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cogent BCP-38

Subject: Cogent BCP-38
From: saku at ytti.fi (Saku Ytti)
Date: Tue, 29 Aug 2017 12:44:24 +0300
In-reply-to: <[email protected]>
References: <CY4PR20MB1269717B6FBB246645C66AE9AC8D0@CY4PR20MB1269.namprd20.prod.outlook.com> <CAKnNFz8_vkOLtRGAj2z4zSvZOU9AiJwWApPnBjZZK5TcLhYp7g@mail.gmail.com> <[email protected]> <496940670.3866.1502969745768.JavaMail.mhammett@ThunderFuck> <CAP-guGVnDV=ME_z9JUFzugp97ufJ1zENCW8=xCbXXi_8ppN-mA@mail.gmail.com> <[email protected]>

On 29 August 2017 at 03:38, Robert Blayzor <rblayzor.bulk at inoc.net> wrote:

> Well not completely useless. BCP will still drop BOGONs at the edge before they leak into your network.

Assuming you don't use them in your own infra. And cost of RPF is lot
higher than cost of ACL. Them being entirely static entities they
should be in your edgeACL. The only real justification for loose RPF
is source based blackholing.

-- 
  ++ytti

Follow-Ups:
- Cogent BCP-38
  - From: rblayzor.bulk at inoc.net (Robert Blayzor)

References:
- Cogent BCP-38
  - From: brussell at stratusnet.com (Ben Russell)
- Cogent BCP-38
  - From: tknchris at gmail.com (chris)
- Cogent BCP-38
  - From: swmike at swm.pp.se (Mikael Abrahamsson)
- Cogent BCP-38
  - From: nanog at ics-il.net (Mike Hammett)
- Cogent BCP-38
  - From: bill at herrin.us (William Herrin)
- Cogent BCP-38
  - From: rblayzor.bulk at inoc.net (Robert Blayzor)

Prev by Date: Hijack Factories: AS203418, AS205944, and AS203040
Next by Date: Cogent BCP-38
Previous by thread: Cogent BCP-38
Next by thread: Cogent BCP-38
Index(es):
- Date
- Thread