|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Alpha test of MAE filtering capability
It's not that hard to write a script that temporarily points a static route for an unregistered address at each of the machines at a meet point. By tracerouting to that address you can detect if someone is pointing default at you. The script does not have to be a very CPU intensive operation, and if it is run once a day, it ought to provide a fairly good clue as to whether or not someone is abusing your network. I would like to stay away from port filtering except as a last resort. I think that there are far too many unforeseen problems and complications in debugging. And for better or worse it would require the removal of all third party routing which I would guess is pretty common at the Mae's. Scott Blandford IBM Global Network - - - - - - - - - - - - - - - - -
|