North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: using TCP53 for DNS

  • From: Stephane Bortzmeyer
  • Date: Wed Apr 27 03:29:39 2005 
On Tue, Apr 26, 2005 at 07:01:47PM +0000,
 Christopher L. Morrow <[email protected]> wrote 
 a message of 29 lines which said:

> Even after I imagine that folks left the filters in place either
> 'because' or 'I don't run router acls' or 'laziness'....

[Warning, operational content.]

Remember that most "firewalls" or other "middleboxes" on the Internet
are completely unmanaged. They were configured once and for all. (See
the problems with former bogons or with 192.0.0.0/8.)

The architecture of the Internet was designed for a network where all
the routers were heavily managed and by knowledgeable people. Now, the
switch to a network of mostly unmanaged boxes is a big challenge.