Packets from net 10 (no, not the lyrics)

Mailman List Mirror (Read Only)
1

Should I be filtering all reserved space at my border, or would
it be reasonable for me to expect the big guys not to take packets
with clearly inappropriate source addresses?

  Yes you should. (and with kudos to Andrew)

! Loopback
access-list 100 deny ip 127.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255
! RFC 1918 private blocks
access-list 100 deny ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255
access-list 100 deny ip 172.16.0.0 0.15.255.255 255.240.0.0 0.15.255.255
access-list 100 deny ip 192.168.0.0 0.0.255.255 255.255.0.0 0.0.255.255
! Test Network
access-list 100 deny ip 192.0.2.0 0.0.0.255 255.255.255.0 0.0.0.255
! Tiny networks.
access-list 100 deny ip any 255.255.255.128 0.0.0.127
access-list 100 permit ip any any

Or is my view on the situation incomplete?

  I think so.

2

What about providers that use portions of the private address space on
their network (up to and including the client's serial interface)?

Mohamad