The overhead associated with matching against the complete bogon list is too 
much in my humble opinion. 


Cory Oldford 

----- Original Message -----

From: "Dr. Jeffry A. Spain" <[email protected]> 
To: "Shorewall Users" <[email protected]> 
Sent: Saturday, February 23, 2013 12:38:14 PM 
Subject: [Shorewall-users] Full Bogon Filtering 

What experience have users had using ShoreWall as a bogon filter using the Team 
Cymru full bogon lists (http://www.team-cymru.org/Services/Bogons/http.html)? 
The IPv4 full bogon list contains over 4,600 separate networks that need to be 
denied, and the IPv6 list over 68,300. Having not tried this myself, I would be 
concerned a priori about ShoreWall server meltdown. 

Jeffry A. Spain, Network Administrator 
Cincinnati Country Day School 


------------------------------------------------------------------------------ 
Everyone hates slow websites. So do we. 
Make your web apps faster with AppDynamics 
Download AppDynamics Lite for free today: 
http://p.sf.net/sfu/appdyn_d2d_feb 
_______________________________________________ 
Shorewall-users mailing list 
[email protected] 
https://lists.sourceforge.net/lists/listinfo/shorewall-users 

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to