Re: what's that smell?

[Joe Abley]

On Tuesday, Oct 8, 2002, at 10:45 Canada/Eastern, Iljitsch van Beijnum 
wrote:

> On Tue, 8 Oct 2002, Joe Abley wrote:
>
>> Also, egress filtering is NOT easy,
>
>> What is difficult about dropping packets sourced from RFC1918 
>> addresses
>> before they leave your network?
>
> But what's the point?

Politeness, I guess. Seems rude to send traffic to peers when you 
absolutely know that the source address is inaccurate.

> That's like complaining that the door isn't locked while the house has 
> no
> walls.

Right. The no walls problem is far more usefully tackled by filtering 
inbound at the edge, not outbound.


Joe