[FRnOG] [su...@apnic.net: Filtering Previously Unallocated Addresses]

2010-11-02 Par sujet Stephane Bortzmeyer
C'est vrai que c'est un bon avis, ça. Maintenant que quasiment tout
l'espace IPv4 est alloué ou va l'être très bientôt, est-ce vraiment
utile de continuer à filtrer les bogons ?
---BeginMessage---
___

Filtering Previously Unallocated Addresses
___


APNIC recognizes that as the IANA pool of unallocated IPv4 addresses
nears exhaustion, there may be increasing community concern about the
quality of the new address blocks made available for distribution.

It is important that you ensure your router Access Control Lists (ACLs)
are updated so addresses are not mistakenly filtered through your
routers. It may also be time to consider whether you should stop any
form of BOGON filtering.

This is especially important for newly allocated address blocks:

 * 1.0.0.0/8
 * 14.0.0.0/8
 * 27.0.0.0/8
 * 36.0.0.0/8
 * 42.0.0.0/8
 * 49.0.0.0/8
 * 101.0.0.0/8
 * 223.0.0.0/8

Keep informed about IANA allocations at:

http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml

For those with recently allocated address space here are several tips
to check whether your IP Addresses are filtered:

 * Your own firewall might be blocking the new IP addresses by
   default, if you set up your servers to block bogon IP ranges. To
   avoid blocking potential new customers, consider whether you
   should stop any form of BOGON filtering.

 * Run a traceroute to see if the new IP is consistently blocked
   along the same network path. It is advisable also, to test
   forward and reverse paths. Use of technology like the Routing
   Information Service (RIS) is highly recommended to assist in
   identifying routing conditions for prefixes under test.

   http://www.ripe.net/projects/ris/index.html

 * Do a search on your IP address and contact those organizations
   that appear to be blocking you. You may be blocked due to
   activity of one of your customers.

   http://whatismyipaddress.com/blacklist-check

 * Use a looking glass service as part of the diagnostic tool, set
   to detect network filters.

   http://www.ris.ripe.net/cgi-bin/lg/index.cgi


Ongoing testing
---

As part of our service commitment to our Members and the wider
community, APNIC is working hard to evaluate the usability of address
space allocated to APNIC before it is distributed.

For further information on Resource Quality Assurance and the testing
results, visit:

 http://www.apnic.net/rqa

For further assistance, contact:

 helpd...@apnic.net


Regards
Sunny

-- 
Srinivas (Sunny) Chendi email:   su...@apnic.net
Senior Community Engagement Specialist  sip:su...@voip.apnic.net
South Asia Liaison Officer  msn:   su...@hotmail.com
http://www.apnic.netph/fx:+61 7 3858 3189/99

Join my twitter - https://twitter.com/ap_sunny
Joins us for APNIC 31 Hong Kong. Visit - http://meetings.apnic.net/31


-- 
This is the SANOG (http://www.sanog.org/) mailing list.
---End Message---


Re: [FRnOG] [su...@apnic.net: Filtering Previously Unallocated Addresses]

2010-11-02 Par sujet Raphaël Jacquot
On Tue, 2010-11-02 at 09:23 +0100, Stephane Bortzmeyer wrote:
 C'est vrai que c'est un bon avis, ça. Maintenant que quasiment tout
 l'espace IPv4 est alloué ou va l'être très bientôt, est-ce vraiment
 utile de continuer à filtrer les bogons ?

en effet, ca semble de moins en moins utile.
par contre, filtrer les russes / ukrainiens / whatever qui passent leur
temps a scanner les blocs nouvellement annoncés; ca peut l'etre :)


---
Liste de diffusion du FRnOG
http://www.frnog.org/