North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Summary with further Question: Domain Name System protection

  • From: vijay gill
  • Date: Tue Aug 17 15:23:48 2004

On Tue, Aug 17, 2004 at 03:57:17AM +0000, [email protected] wrote:

> > 5. 'bogon'in BIND configuration could be used to
> > filter requests from RFC1918 address;
> 
> 	this should be pushed to
> 	the router.  don't waste CPU cycles 
> 	on the Nameserver.

Hosts tend to be a faster writeoff cycle than routers in companies I've
worked at, therefore getting the benefit of moores law about 25% faster
than the routers.  Turn on firewalling in the host. That said, I do
filter 1918 at my edge.


/vijay