North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: address spoofing

  • From: Andrew Brown
  • Date: Fri Apr 23 19:32:49 1999

>> Furthermore, whether the RFC [1918] says so or not, I'm going to block
>> these packets at *my* border routers, because:
>Curious as to the cost (added latency) in doing RFC 1918 source address
>filtering on all packets in the context of cost-benfit analysis.

on a router that's not doing filtering, it's going to be a small hit.
i'm going to infer, however, that any router that's not doing
filtering is probably not doing much traffic.  and any router that is
doing a lot of traffic, is already doing filtering.  so it's less of a

|-----< "CODE WARRIOR" >-----|
[email protected]             * "ah!  i see you have the internet
[email protected] (Andrew Brown)                that goes *ping*!"
[email protected]       * "information is power -- share the wealth."