North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: RFC1918 addresses to permit in for VPN?

  • From: Sean Donelan
  • Date: Fri Dec 29 02:27:56 2000

On Thu, 28 December 2000, "Miguel A.L. Paraz" wrote:
> Our DSUA filter had to have a small hole punched in since a customer had a VPN
> (I do not know yet as to what kind) which was receiving packets sourced at 
> 172.17.x.x.  Is this a misconfiguration on the sender's end, or a "feature."  
> I think there was earlier discussion on VPN's requiring ICMP (echo?)

Its not a very private or virtual network if it leaks addresses into a
data stream visible to your filters.