Home page logo

nanog logo nanog mailing list archives

Re: Common operational misconceptions
From: Jeff Kell <jeff-kell () utc edu>
Date: Wed, 15 Feb 2012 18:18:21 -0500

(1) Block all ICMP (obviously some are required for normal operations,
unreachables, pMTU too large/DF set, etc).
(2) Block certain ports (blindly, w/o at least "established") taking out
legitimate ephemeral port usage.
(3) Local uRPF is unnecesary (or source spoofing mitigation in general)
(4) Automagical things are necessary (Microsoft proprietary, UPnP, Apple
Bonjour, mDNS, etc)
(5) WAN routing to multiple providers will automagically load-balance
automagically.  or for that matter...
(6) IGP routing across multiple paths will automagically load-balance
automagically.  Or for that matter...
(7) Port-channel (link aggregation) will load-balance automagically.
(8) Connectivity/throughput issues are always local or first-hop.  (We
have a gig connection, why am I not getting a gig throughput)

I'm sure there are more, but those were at the top of my head :)


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]