Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Paul Vixie
[EMAIL PROTECTED] (Paul Vixie) writes: > in the example i posted earlier, i included some numbers from one member of > the "f troop", which showed ~21M packets from rfc1918 space over the course > of ~106 days. that's 241 queries per second. on only one host of many. > granted it's not much as

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Patrick W Gilmore
On Aug 18, 2004, at 6:46 PM, Richard A Steenbergen wrote: On Wed, Aug 18, 2004 at 06:12:38PM -0400, Jared Mauch wrote: Anyone that isn't working on this (even slowly) is helping contribute to part of the problem/mess of rfc1918 sourced packets leaking to the internet. Tell it to the unfortunate n

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Paul Vixie
> > > > Is it really enough traffic that you, as a root server operator, > > > > can't just suck it up and deal? Sure there are going to be a few > > > > folks who are misconfigured, but I can't imagine that it is enough > > > > to cause operational issues. a few folks? no. if it was a few pack

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Richard A Steenbergen
On Wed, Aug 18, 2004 at 06:12:38PM -0400, Jared Mauch wrote: > > Anyone that isn't working on this (even slowly) is helping > contribute to part of the problem/mess of rfc1918 sourced packets leaking > to the internet. Tell it to the unfortunate number of people manufacturing customer edge

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Jared Mauch
On Wed, Aug 18, 2004 at 05:31:47PM -0400, Richard A Steenbergen wrote: > > On Wed, Aug 18, 2004 at 02:18:32PM -0700, David A. Ulevitch wrote: > > > > > > > > > > > Is it really enough traffic that you, as a root server operator, can't > > > just suck it up and deal? Sure there are going to be

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Richard A Steenbergen
On Wed, Aug 18, 2004 at 02:18:32PM -0700, David A. Ulevitch wrote: > > > > > > Is it really enough traffic that you, as a root server operator, can't > > just suck it up and deal? Sure there are going to be a few folks who are > > misconfigured, but I can't imagine that it is enough to cause o

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread David A. Ulevitch
> Is it really enough traffic that you, as a root server operator, can't > just suck it up and deal? Sure there are going to be a few folks who are > misconfigured, but I can't imagine that it is enough to cause operational > issues. No, no operational issues at all from RFC1918 space htt

Re: filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Richard A Steenbergen
On Wed, Aug 18, 2004 at 07:57:53PM +, Paul Vixie wrote: > > this seems excessive, and so i've been assuming that it was all vijay's > fault. but apparently it's not him. so which one of you isn't filtering > 1918 at your edge? (oops, it's all of you, isn't it?) Is it really enough traffic

filtering 1918 (was Re: Summary with...: Domain Name System ...)

2004-08-18 Thread Paul Vixie
> That said, I do filter 1918 at my edge. > > /vijay ok everybody, vijay says the snapshot below didn't come from him. who wants to claim it, then? # tcpdump -n -c 25 net 10 or net 192.168 or net 172.16.0.0/12 tcpdump: listening on fxp0 19:52:53.787244 10.9.10.250.53 > 192.5.5.241.53: 29644 MX