Re: [spoofing-tf] Preparing for anti-spoofing project at $fooBig carri er

  • To: Martin Hannigan hannigan@localhost
  • From: Pekka Savola pekkas@localhost
  • Date: Tue, 17 Oct 2006 21:32:06 +0300 (EEST)
  • Cc: Fergie fergdawg@localhost, spoofing-tf@localhost

On Tue, 17 Oct 2006, Martin Hannigan wrote:
Fergie, this is what the plan is. I'm going to document this from
start to finish for the group. I've got monitors set up on everything
that is going to change for before and after, and I'm keeping track of
hours that are non-standard i.e. "i had to have people do $foo out of
the norm" to accomplish this so we can establish a cost basis as well.

FWIW, my take on this -- having uRPF and various other ingress/egress filtering mechanisms deployed everywhere in a network for multiple years now -- is in draft-savola-bcp84-urpf-experiences-01.txt.

You will probably find similar issues. Comments/additions are also welcome.

--
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings