[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
ISP port blocking practice
- Subject: ISP port blocking practice
- From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks at vt.edu)
- Date: Fri, 23 Oct 2009 01:29:01 -0400
- In-reply-to: Your message of "Thu, 22 Oct 2009 22:36:13 EDT." <[email protected]>
- References: <[email protected]> <[email protected]>
On Thu, 22 Oct 2009 22:36:13 EDT, Jon Kibler said:
> 4) Never allow traffic to ingress any network if the source address is bogus.
4a) Never flag a source address as bogus unless you can verify it is bogus
*today*, not when you installed the filter. Out of date bogon filters are evil.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20091023/97847163/attachment.bin>