Re: Open relays and open proxies

Paul Vixie wrote:

but you're right, a half million additional routes would Break Stuff in most places. one could pixelize, aggregate on /28 or /24 boundaries, or maintain some kind of MRU. but it's all very hacky compared to "upgrade the bgp core to be able to handle a million more route$".

You might as well do /28 or /24 boundaries considering the number of open proxies that are on dhcp with low lease times, and (while slow) even on dialup. It should be up front (and in BCP, AUP, etc) that any insecure system found on a network should be shut down immediately until the system is fixed (suspension of account, not termination). -Jack