Re: Implementing the bogon list

2010-04-10 Thread Alex
Hi, EMARKETINGHYPE :)  You still haven't specified what exactly you want to implement. ACLs? Empty zones for things that should not resolve? Something else? And more importantly, what is the _reason_ you're trying to do what you're trying to do? Heh :-) Sure didn't mean that, but guess

Re: Implementing the bogon list

2010-04-09 Thread Bryan Irvine
I think that's really designed for router ACL's. Most reliable method might be to subscribe to their BGP feed. I'm not sure what you'd do with regards to BIND or even why you'd want to handle it there. . On Fri, Apr 9, 2010 at 1:27 PM, Alex mysqlstud...@gmail.com wrote: Hi, I'm interested

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 13:27, Alex wrote: Hi, I'm interested in implementing an updated Cymru bogon list, Why don't you take a step back and let us know what you're trying to accomplish first. Doug -- ... and that's just a little bit of history repeating. --

Re: Implementing the bogon list

2010-04-09 Thread Stefan Schmidt
On 09.04.2010, at 22:32, Bryan Irvine wrote: I think that's really designed for router ACL's. Not exclusively, hence http://www.cymru.com/Documents/secure-bind-template.html I'm not sure what you'd do with regards to BIND or even why you'd want to handle it there. Well, for example for a

Re: Implementing the bogon list

2010-04-09 Thread Kevin Oberman
Date: Fri, 9 Apr 2010 16:27:38 -0400 From: Alex mysqlstud...@gmail.com Sender: bind-users-bounces+oberman=es@lists.isc.org Hi, I'm interested in implementing an updated Cymru bogon list, but would like some examples on how best to do this. Much of my searching has resulted in old

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 14:23, Kevin Oberman wrote: The FreeBSD default configuration does this, Let's be clear on what this is please, since I don't think the OP's post was clear about what he wanted to implement. :) The default named.conf for FreeBSD implements local, empty zones for various things that

Re: Implementing the bogon list

2010-04-09 Thread Joseph S D Yao
On Fri, Apr 09, 2010 at 11:41:09PM -0400, Alex wrote: ... Ah,. I was expecting it to be a lot more involved than that, I guess. ... It is. Do not expect to implement ANYTHING involving a bogon list without it requiring CONSTANT MAINTENANCE. The Bogon list as it is today has shrunk greatly

Re: Implementing the bogon list

2010-04-09 Thread Joseph S D Yao
On Sat, Apr 10, 2010 at 01:08:16AM -0400, Joseph S D Yao wrote: ... I strongly recommend that anyone wanting some degree of security use look at the lists of IPv4 networks in RFC 5735/6/7 and the list of IPv6 networks in RFC 5156. Decide which of those networks you want to block or blackhole.

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 20:50, Alex wrote: Hi, Let's be clear on what this is please, since I don't think the OP's post was clear about what he wanted to implement. :) I'm really interested in security, reducing resources, and making sure the server is current with today's standards. I'd like to make