North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: address spoofing

  • From: Simon Leinen
  • Date: Tue Apr 27 11:10:50 1999

>>>>> "rb" == Randy Bush <[email protected]> writes:
> [...]
> but the uglier symptoms are packets from my own address space

>     deny ip any (6 matches)

One of our customers has, and we sure receive a lot of
leaked packets with source and destination addresses in that range
from our upstream. (One of these days I'll try to get those traced :-) doesn't seem like a likely "random" prefix though.  Maybe
an ex-customer/employee of yours didn't clean up their configuration
when they left?