nanog mailing list archives

Re: Interesting new spam technique - getting a lot more popular.


From: "Christopher L. Morrow" <christopher.morrow () verizonbusiness com>
Date: Wed, 14 Jun 2006 04:46:31 +0000 (GMT)



On Wed, 14 Jun 2006, Adam Rothschild wrote:

On 2006-06-14-00:23:15, "Christopher L. Morrow" <christopher.morrow () verizonbusiness com> wrote:
[...]
I assume that dedicated hosting folks don't just drop machines
behind a switch on one big flat subnet? That's probably a naive
assumption though

I've long been a proponent of a per-customer VLAN or L3 interface,
depending on what the topology allows for, but I'm afraid we're in the
minority.

doh :(


From what I've seen, the overwhelming majority of "dedicated hosters"
do precisely what the article alludes to -- placing hundreds (if not
thousands!) of disparate hosts on the same broadcast domain, with no
safeguards in place to prevent ARP spoofing, IP hijacking, and other
forms of malfeasance...


is it really that hard to make your foudry/extreme/cisco l3 switch vlan
and subnet??? Is this a education thing or a laziness thing? Is this
perhaps covered in a 'bcp' (not even an official IETF thing, just a
hosters bible sort of thing) ?


Current thread: