On Thu, Jan 22, 2009 at 1:37 PM, Steve Laurie <st...@foo-unix.org> wrote:

> I was wondering if someone could tell me why there's a need to write
> a rule to block addresses that come under the private address space if
> these addresses aren't routable over the Internet?

An RFC that says they shouldn't be routeable over the Internet doesn't
mean that they aren't. I've seen plenty of cases where a misconfigured
router has sent RFC1918 packets out onto the net. Blocking them at
your border is cheap, so it makes sense to do so.

Tet

-- 
Perl is like vise grips. You can do anything with it but it is the
wrong tool for every job. -- Bruce Eckel

Reply via email to