4 ms·
BCP38/Anti-Spoofing is a really really hard problem to fix. It may not happen in our lifetimes. There is the MANRS document/routing manifesto, which has been ga
by AndyMcConachie 11y ago
BCP38/Anti-Spoofing is a really really hard problem to fix. It may not happen in our lifetimes. There is the MANRS document/routing manifesto, which has been gaining traction.
https://www.routingmanifesto.org/ https://www.routingmanifesto.org/
There are other initiatives as well. But the problem is very difficult to solve.
- madsushi 11y agoDo you mean the problem is technically hard or politically hard? From my understanding, it's not too difficult for an ISP to implement, the problem is convincing ISPs to implement it (when many don't care).
- Pharaoh2 11y agoThe problem is technically difficult to solve. The same way deploying IPv6 was.
- devicenull 11y agoIt's also worse, because if you were to deploy BCP38, you don't really get a whole lot from it. Sure, it's a good thing to do, but at the end of the day people aren't going to pick your service because you have BCP38 setup properly.
- Pharaoh2 11y agoPretty sure 99% consumers don't give a shit if their ISPs support end to end IPv6 too.
- hueving 11y agoNo, quite the opposite. Nearly every router has a very simple option to not allow packets from IPs not on the same CIDR as the interface. If ISPs turned this on on each edge interface, the problem would be solved. It's entirely political/economic. There is no incentive for an ISP to do so because it provides no direct benefit. It's a classic issue of externalities.
- deleted 11y ago[deleted]