North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Open relays and open proxies

  • From: Jack Bates
  • Date: Thu Apr 24 22:23:06 2003 
Paul Vixie wrote:

but you're right, a half million additional routes would Break Stuff in
most places.  one could pixelize, aggregate on /28 or /24 boundaries, or
maintain some kind of MRU.  but it's all very hacky compared to "upgrade
the bgp core to be able to handle a million more route$".
You might as well do /28 or /24 boundaries considering the number of open proxies that are on dhcp with low lease times, and (while slow) even on dialup. It should be up front (and in BCP, AUP, etc) that any insecure system found on a network should be shut down immediately until the system is fixed (suspension of account, not termination).

-Jack