North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Policies: Routing a subset of another ISP's address block

  • From: Randy Bush
  • Date: Wed Apr 05 19:31:18 2000 
> You're going to have to exempt multihomed downstream customers from your
> anti spoofing filters anyway, whether they use your space, someone else's
> or their own.

indeed this seems to be the case.  which breaks the schemes for ingress
filtering based on forwarding table entries <sigh>.

> To put it another way, if you have clueful downstreams, you should
> delegate anti spoofing to them, they will do it closer to the edge where
> there is no asymetrical routing.

one of the rare bits of positive feedback here.  multi-homed customers do
tend to be a bit more clued.  so, in this too rare instance, the pain is
near some clue to fix it.

randy