On Wed, 23 Mar 2005, Randy Bush wrote:
We were recently assigned a 72.244/16 allocation from ARIN. Friendly reminder that ARIN started allocating 72/8 since Aug. If you have a static bogon filters, can you please make sure they are updated. Thank if you are really worried about this, and i can understand your being so, then make it easy for the busy folk here (not those pontificating on law and morals in the rocky mountains) to test. give us an address we can ping.
a bit more coffee made me realize that what might best occur would be for the rir, some weeks BEFORE assigning from a new block issued by the iana, put up a pingable for that space and announce it on the lists so we can all test BEFORE someone uses space from that block.
So, it's probably a multifaceted problem: 1) acls (router) 2) firewalls (host) 3) route acceptance (routers) Some can be audited 'easily' some are 'set and forget' (or forgot :( ) Ping might just be dropped to destinations, before any idea of 'ip space' filters (think www.sun.com filters). You really have to test with the protocols your main user base might be using (http/https). -Chris