How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com
How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS?
Don't. If you have to, whitelist the probe traffic. On Sun, Jun 1, 2025 at 8:59 PM Mike Hammett via NANOG <nanog@lists.nanog.org> wrote:
How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked.
----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com
Midwest-IX http://www.midwest-ix.com
_______________________________________________ NANOG mailing list
https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/KLQUK4E6...
That's what I was suspecting. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com ----- Original Message ----- From: "Tom Beecher" <beecher@beecher.cc> To: "North American Network Operators Group" <nanog@lists.nanog.org> Cc: "Mike Hammett" <nanog@ics-il.net> Sent: Sunday, June 1, 2025 8:36:26 PM Subject: Re: RIPE Probe Behind IPS How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Don't. If you have to, whitelist the probe traffic. On Sun, Jun 1, 2025 at 8:59 PM Mike Hammett via NANOG < nanog@lists.nanog.org > wrote: How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/KLQUK4E6...
On Monday, 2 June 2025 at 01:59, Mike Hammett via NANOG <nanog@lists.nanog.org> wrote:
How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked.
I think the whole point is you are not supposed to put it behind anything, except NAT if you need to.
*nods* the router at the location also does NAT< IPS, etc., etc. Tom's response was what I was thinking to do. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com ----- Original Message ----- From: "Smith via NANOG" <nanog@lists.nanog.org> To: "North American Network Operators Group" <nanog@lists.nanog.org> Cc: "Smith" <n5d9xq3ti233xiyif2vp@protonmail.ch> Sent: Monday, June 2, 2025 4:39:46 AM Subject: Re: RIPE Probe Behind IPS On Monday, 2 June 2025 at 01:59, Mike Hammett via NANOG <nanog@lists.nanog.org> wrote:
How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked.
I think the whole point is you are not supposed to put it behind anything, except NAT if you need to. _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/EFXRZJUZ...
participants (3)
-
Mike Hammett -
Smith -
Tom Beecher