North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Best practice ACLs for a internet facing border router?

  • From: Kim Onnel
  • Date: Mon Jun 13 10:26:43 2005
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:references; b=jTD8PxpyUWsoevHjDsaDowWlTawQLwbTcoB2QpP2ewVFtBqAJqCTHSpsQK9IJLZGXYCQ7FEcolMVnnQ/nYSlB89LwdTLkU4GUnXJhxbfGXBGNz55YnqhAzwIxFjTx2khsPtlOJbYDtjSfvOu/uBpBdDVD31fnjgC4f2w+nF3YiI=

block bogons
block your ips from outside
block rfc 1918 (martians)
block common worms ports



On 6/13/05, Drew Weaver <[email protected]> wrote:

        I'm just curious if anyone has ever published a list of what is
an agreed upon best practice list of ACLs for an internet facing border
router. I'm talking about things like bogons, private Ip addresses, et
cetera. If anyone is aware of anything like this I'd like to see it.

Thanks,
-Drew