Re: [OPSEC] FYI draft-ietf-opsec-blackhole-urpf-04

[Pekka Savola <pekkas at netcore.fi>]

On Tue, 9 Jun 2009, Smith, Donald wrote:
> Feasible path is nice and there are a couple of other urpf 
> recommendations I could make to make it easier for other ISPs to 
> start using strict mode urpf.
>
> Let me gather together recommendations and try to write them into a rfc.

Seconded.

You may already know this but RFC3704 talks a bit about feasible paths 
on a generic level, and draft-savola-bcp84-urpf-experiences-03 
describes experiences with multihomed uRPF using feasible paths. We're 
using it everywhere but some manual fiddling is required in our case 
(described in the draft above).

--
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings