Proactive Network Security: Blocking Bogons
Posted: Fri Jan 25, 2008 5:22 pm
Network security is a never ending process of staying in touch and in tune with inbound and outbound traffic. Network administrators have their hands so full reacting to the latest security threats they barely have time left over for proactive security. Today I want to discuss one specific proactive step you can take as a network administrator: Eliminating Bogon Traffic.
Bogon traffic is traffic that appears to originate from externally non-routable IP addresses or network ranges. These are typically Network addresses that are considered Reserved by IANA (Internet Assigned Numbers Authority), though some network administrators also consider incoming Private Use, Auto-configuration, Loopback or Multicast IP addresses as bogons. These network ranges are sometimes referred to as Special-Use and have specific restrictions placed upon their use and in general should not appear in normal use on the public Internet.1
Modified while awaiting permissible use notification.
Bogon traffic is traffic that appears to originate from externally non-routable IP addresses or network ranges. These are typically Network addresses that are considered Reserved by IANA (Internet Assigned Numbers Authority), though some network administrators also consider incoming Private Use, Auto-configuration, Loopback or Multicast IP addresses as bogons. These network ranges are sometimes referred to as Special-Use and have specific restrictions placed upon their use and in general should not appear in normal use on the public Internet.1
Modified while awaiting permissible use notification.