On 2017-03-01 09:58, Franziska Lichtblau wrote: > Hi, > > we are a team of researchers from TU Berlin [1] working on a measurement > project > to assess the ramifications of traffic with spoofed source IP addresses in > the > Internet. > > To better understand the operational challenges that you as network operators > face when deploying (or not deploying) source IP address filtering techniques, > we'd like to invite you to participate in our survey. > > If you could spare 5 minutes of your time, we'd be delighted if you could fill > out our survey form and tell us about your current practices regarding network > filtering. > > To participate, please visit: > [2] http://filteringsurvey.inet.tu-berlin.de/
You are missing the option for: "hardware does not support it at line rate" Which is the most important excuse by the larger networks to not enable BCP38/SAVE[1]/MANRS[2]. Most smaller shops, where the traffic conditions fit inside the hardware budget, just do not care enough unfortunately... Oh, and indeed, Switzerland is a bad place for BCP38, most networks allow spoofing on both IPv4 and IPv6. Greets, Jeroen [1] http://www.redbarn.org/internet/save [2] http://www.routingmanifesto.org/manrs/ _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog