On 02/24/2013 04:38 AM, Spain, Dr. Jeffry A. wrote: > What experience have users had using ShoreWall as a bogon filter > using the Team Cymru full bogon lists > (http://www.team-cymru.org/Services/Bogons/http.html)? The IPv4 full > bogon list contains over 4,600 separate networks that need to be > denied, and the IPv6 list over 68,300. Having not tried this myself, > I would be concerned a priori about ShoreWall server meltdown.
With IPv4 moving towards 100% allocation, bogon filters are more likely to cause problems than block illegitimate traffic. See http://tools.ietf.org/html/rfc6441 the list of networks to filter http://tools.ietf.org/html/rfc5735 and the discussions at http://lists.ausnog.net/pipermail/ausnog/2012-February/012133.html and http://lists.ausnog.net/pipermail/ausnog/2011-October/011439.html Paul ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
