Re: Bogons filtering
On Jun 10, 2013 7:50 PM, "Jayram A. Deshpande" wrote: > > Hello, > > > With IPv4 being almost exhausted[1] , I am curious to know how many net admins have the Bogon filtering ACLs still hanging around ? > No bogon filters here. Retiring bogon filters is great, one less process to maintain. > Google even gave me this expired Internet Draft [2] that seems to have been intended as a BCP. > > > Regards, > -Jay. > > > [1] https://www.arin.net/resources/request/ipv4_countdown.html > [2] https://tools.ietf.org/id/draft-vegoda-no-more-unallocated-slash8s-01.txt > > -- > "Subvert the paradigm." - C.K. Prahlad > >
Re: Bogons filtering
This draft is now RFC6441 and BCP 171 http://tools.ietf.org/html/rfc6441 .as On 6/10/13 11:49 PM, Jayram A. Deshpande wrote: > Hello, > > > With IPv4 being almost exhausted[1] , I am curious to know how many net > admins have the Bogon filtering ACLs still hanging around ? > > Google even gave me this expired Internet Draft [2] that seems to have been > intended as a BCP. > > > Regards, > -Jay. > > > [1] https://www.arin.net/resources/request/ipv4_countdown.html > [2] https://tools.ietf.org/id/draft-vegoda-no-more-unallocated-slash8s-01.txt >
Re: Bogons filtering
Well, there's this from 2012: https://www.team-cymru.org/Services/Bogons/ - ferg On Mon, Jun 10, 2013 at 7:49 PM, Jayram A. Deshpande wrote: Hello, > > > With IPv4 being almost exhausted[1] , I am curious to know how many net > admins have the Bogon filtering ACLs still hanging around ? > > Google even gave me this expired Internet Draft [2] that seems to have > been intended as a BCP. > > > Regards, > -Jay. > > > [1] https://www.arin.net/resources/request/ipv4_countdown.html > [2] > https://tools.ietf.org/id/draft-vegoda-no-more-unallocated-slash8s-01.txt > > -- > "Subvert the paradigm." - C.K. Prahlad > > > -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com
Re: Bogons
On Jan 28, 2011, at 8:41 PM, Matthew Palmer wrote: > On Fri, Jan 28, 2011 at 12:35:43PM -0800, Jacob Broussard wrote: >> Static bogons are the bane of my existence... The pain of trying to explain >> to someone for MONTHS that they haven't updated their reference, with >> traceroutes to back it up, and they continue to say that it has something to >> do with my network. > > THey're right -- your network is using an address range they've chosen to > configure their equipment not to accept... The RIRs have decided to hand out the "polluted" space to large providers to ensure the greatest damage to those who are too stupid to update their filters. If you know anyone who runs a network, tell them to remove their static bogon filters today. Seriously. -- TTFN, patrick
Re: Bogons
You win. They had that address filtered way before I ever used it, silly me for not checking first :P What I really wanted to say on the list, though, was everyone that waits 1+ years between bogon updates can go to hell. They wait some poor flunky (me) has a customer yelling in my ear because "I could access that website fine before I switched to you" *sigh* On Jan 28, 2011 5:44 PM, "Matthew Palmer" wrote: > On Fri, Jan 28, 2011 at 12:35:43PM -0800, Jacob Broussard wrote: >> Static bogons are the bane of my existence... The pain of trying to explain >> to someone for MONTHS that they haven't updated their reference, with >> traceroutes to back it up, and they continue to say that it has something to >> do with my network. > > THey're right -- your network is using an address range they've chosen to > configure their equipment not to accept... > > - Matt >
Re: Bogons
On Fri, Jan 28, 2011 at 12:35:43PM -0800, Jacob Broussard wrote: > Static bogons are the bane of my existence... The pain of trying to explain > to someone for MONTHS that they haven't updated their reference, with > traceroutes to back it up, and they continue to say that it has something to > do with my network. THey're right -- your network is using an address range they've chosen to configure their equipment not to accept... - Matt
Re: Bogons
Static bogons are the bane of my existence... The pain of trying to explain to someone for MONTHS that they haven't updated their reference, with traceroutes to back it up, and they continue to say that it has something to do with my network. On Jan 28, 2011 12:24 PM, "John Payne" wrote: > > On Jan 28, 2011, at 3:14 PM, George Bonser wrote: > >> >> >>> Now that the holidays are over and IANA v4 depletion is likely days >>> away, perhaps its time to consider stripping your bogon lists down to >>> the bare minimum, and as someone else said, declare bogons dead and >>> move to martians? >>> >>> >>> Just sayin' >>> >> >> There are still some 7,000 prefixes in the v4 "full bogons" list. These >> are such things as allocations to RIR's but have not yet been allocated. >> It's updated every four hours: >> >> >> >> http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt >> >> " The traditional bogon prefixes, plus prefixes that have been >> allocated to RIRs but not yet assigned by those RIRs to ISPs, end-users, >> etc. Updated every four hours." >> >> That is one probably best taken by BGP feed and not done manually. > > Yes, I was referring to static/manual bogon list. The Cymru BGP feed rocks. > >
Re: Bogons
On Jan 28, 2011, at 3:14 PM, George Bonser wrote: > > >> Now that the holidays are over and IANA v4 depletion is likely days >> away, perhaps its time to consider stripping your bogon lists down to >> the bare minimum, and as someone else said, declare bogons dead and >> move to martians? >> >> >> Just sayin' >> > > There are still some 7,000 prefixes in the v4 "full bogons" list. These > are such things as allocations to RIR's but have not yet been allocated. > It's updated every four hours: > > > > http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt > > "The traditional bogon prefixes, plus prefixes that have been > allocated to RIRs but not yet assigned by those RIRs to ISPs, end-users, > etc. Updated every four hours." > > That is one probably best taken by BGP feed and not done manually. Yes, I was referring to static/manual bogon list. The Cymru BGP feed rocks.
RE: Bogons
> Now that the holidays are over and IANA v4 depletion is likely days > away, perhaps its time to consider stripping your bogon lists down to > the bare minimum, and as someone else said, declare bogons dead and > move to martians? > > > Just sayin' > There are still some 7,000 prefixes in the v4 "full bogons" list. These are such things as allocations to RIR's but have not yet been allocated. It's updated every four hours: http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt "The traditional bogon prefixes, plus prefixes that have been allocated to RIRs but not yet assigned by those RIRs to ISPs, end-users, etc. Updated every four hours." That is one probably best taken by BGP feed and not done manually.
Re: Bogons
On Dec 17, 2010, at 4:06 PM, John Payne wrote: > With the holiday freezes approaching, it might be worth making sure that the > recently allocated /8s are not in your bogon list > > 23/8 > 100/8 > 5/8 > 37/8 > > Just sayin' 105/8, 2/8, etc etc Now that the holidays are over and IANA v4 depletion is likely days away, perhaps its time to consider stripping your bogon lists down to the bare minimum, and as someone else said, declare bogons dead and move to martians? Just sayin'
Re: Bogons
On 17/12/2010 22:51, mkarir wrote: Also the 105/8 which was recently allocated to AfriNIC. all things considered, it's almost time to declare the bogons list dead. Unless there are active updates installed, any new filtering should take place on the basis of the smaller martians list. Nick
Re: Bogons
Also the 105/8 which was recently allocated to AfriNIC. -manish On Dec 17, 2010, at 5:01 PM, nanog-requ...@nanog.org wrote: Message: 1 Date: Fri, 17 Dec 2010 16:06:45 -0500 From: John Payne Subject: Bogons To: NANOG list Message-ID: Content-Type: text/plain; charset=us-ascii With the holiday freezes approaching, it might be worth making sure that the recently allocated /8s are not in your bogon list 23/8 100/8 5/8 37/8 Just sayin'
