North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: What were we saying about edge filtering?

  • From: Sean Donelan
  • Date: Thu Sep 04 13:17:54 2003

On Thu, 4 Sep 2003, Rob Thomas wrote:
> ] I'm going to take a stab at: The next 69.0.0.0/8 release? Certainly there
> ] was some lesson learned from this, no?
>
> Yep, and the lesson is:  Lots of folks do a poor job of network
> management.  :(
>
> Keeping up with the bogons can be automated, see:
>
>    <http://www.cymru.com/BGP/bogon-rs.html>

It gets even worse.  Cisco has hard-coded the list of Bogons into some of
its latest low-end IOS versions as part of its "auto-secure" feature.
Yes, Cisco includes warnings in the manual the user should check the
official list at IANA; but I also know the power of defaults.  People
upgrade their IOS versions even less often then they update their
Windows boxes.  So we're going to see chunks of the net blocked depending
on the release date of versions of IOS.