Re: [apnic-talk] NICs and Egress filtering?
Barry Raveendran Greene wrote:
>
> Hello Everyone,
>
> While I do not think it is feasible for the RIRs to "enforce" compliance on
> ingress/egreee filtering (or route advertisement), they do have a powerful
> role to play in education. It is my experience that most ISPs do not
> implement ingress filtering (BCP38) from a lack of knowledge. RIRs can and
> do provide a service to their members by providing classes on the BCPs of
> running their networks.
>
> So I would suggest rephrasing the discussion on how effective APNIC's
> education program has been and what area can use some improvement. APNIC has
> ans will continue to put a lot of effort in its education program. It is
> within the span of APNIC's control to use its education program to make a
> difference. It is up to the APNIC members to provide the feedback to help
> APNIC add to their materials.
>
> Barry
How about making it part of the "induction" process when someone is
allocated an address range? Perhaps something to the effect that
ingress/egress filtering is a really good thing and as long as you are
setting up your router/routes why not put in a filter. There could also
be links to RFC2827 and sample config pages for various router types.
Also a mention on the APNIC web site (on the whois page or whatever
pages gets alot of traffic) would get at least some attention.
One other sort of off-topic suggestion: does cisco training include this
issue in their router courses?
Phil
* APNIC-TALK: General APNIC Discussion List *
* To unsubscribe: send "unsubscribe" to apnic-talk-request at apnic dot net *