Re: Filtering on RFC1918 cruft

["Brett D. Watson" <bwatson () genuity net>]

   i wondered the same thing.  here's what i see at mae-east being
announed by some (i filter): 

deny   ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 (227 matches)
deny   ip 192.0.0.0 0.0.0.255 255.255.255.0 0.0.0.255 (603 matches)
deny   ip 198.32.146.0 0.0.0.255 255.255.255.0 0.0.0.255 (543 matches)
deny   ip 198.32.176.0 0.0.0.255 255.255.255.0 0.0.0.255 (10 matches)
deny   ip 192.157.69.0 0.0.0.255 255.255.255.0 0.0.0.255 (96 matches)
deny   ip 198.32.128.0 0.0.0.255 255.255.255.0 0.0.0.255 (335 matches)

  ya, ya, teh last four aren't rfc1918 but i filter them anyway (nap 
dmz's) :)  lot's of people announcing them.  the first two are the 
only rfc1918 nets i see announced on our nap routers.

-brett

> Why aren't people actively filter on RFC1918 announcements??
>
> - paul
>
> > Date: Fri, 17 Jan 1997 15:00:03 GMT
> > Subject: 01/16/97 Internet Routing Problems
> >
> > Reserved Network and Host Announcements
> > ---------------------------------------
> > 10/8 at Mae-East from DIALnet (5552) ASPATH=5552 3549 Incomplete
> > 10/8 at Mae-East from INAP.net (5646) ASPATH=5646 3549 Incomplete
> > 10/8 at Mae-East from PRIMENET (3549) ASPATH=3549 Incomplete
> > 10/8 at Mae-East from CAIS (3491) ASPATH=3491 3549 Incomplete
> > 10/8 at Mae-West from PRIMENET (3549) ASPATH=3549 Incomplete
> > 10/8 at Mae-West from INAP.net (5646) ASPATH=5646 3549 Incomplete
> > 10/8 at AADS from INAP.net (5646) ASPATH=5646 3549 Incomplete
> > 10/8 at AADS from 198.32.130.55 ASPATH=3549 Incomplete



- - - - - - - - - - - - - - - - -