On 2017-03-01 09:58, Franziska Lichtblau wrote:
> Hi,
> we are a team of researchers from TU Berlin [1] working on a measurement 
> project
> to assess the ramifications of traffic with spoofed source IP addresses in 
> the 
> Internet.
> To better understand the operational challenges that you as network operators
> face when deploying (or not deploying) source IP address filtering techniques,
> we'd like to invite you to participate in our survey.
> If you could spare 5 minutes of your time, we'd be delighted if you could fill
> out our survey form and tell us about your current practices regarding network
> filtering.
> To participate, please visit:
> [2] http://filteringsurvey.inet.tu-berlin.de/

You are missing the option for:

 "hardware does not support it at line rate"

Which is the most important excuse by the larger networks to not enable

Most smaller shops, where the traffic conditions fit inside the hardware
budget, just do not care enough unfortunately...

Oh, and indeed, Switzerland is a bad place for BCP38, most networks
allow spoofing on both IPv4 and IPv6.


[1] http://www.redbarn.org/internet/save
[2] http://www.routingmanifesto.org/manrs/

swinog mailing list

Antwort per Email an