|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: address spoofing
>> Furthermore, whether the RFC [1918] says so or not, I'm going to block >> these packets at *my* border routers, because: > >Curious as to the cost (added latency) in doing RFC 1918 source address >filtering on all packets in the context of cost-benfit analysis. on a router that's not doing filtering, it's going to be a small hit. i'm going to infer, however, that any router that's not doing filtering is probably not doing much traffic. and any router that is doing a lot of traffic, is already doing filtering. so it's less of a hit. -- |-----< "CODE WARRIOR" >-----| [email protected] * "ah! i see you have the internet [email protected] (Andrew Brown) that goes *ping*!" [email protected] * "information is power -- share the wealth."
|