Re: BGP Black hole Community

["Steven M. Bellovin" <smb at research.att.com>]

In message <3E9487C8.6040603 at centive.com>, John Stracke writes:
>Valdis.Kletnieks at vt.edu wrote:
>
>>Correct. Those who didn't learn from AS7007 (yes, AS7007 screwed up - but how
>>many *other* AS believed it as gospel truth?) will shoot themselves in the fo
>ot
>>eventually, with or without this function.
>>  
>>
>Well, yes; but just because it's possible to shoot yourself in the foot 
>doesn't mean you want to make it easy for other people to shoot you in 
>the foot--which would be the effect of enabling this blackhole feature 
>by default.
>

Agreed.  The function itself is reasonable, but it should only be used 
in private by consenting adult ISPs.


		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com (2nd edition of "Firewalls" book)