Bogon filtering

Bogon filtering is the practice of filtering bogons, which are bogus IP addresses of a computer network. Bogon is also an informal name for an IP packet on the public Internet that claims to be from an area of the IP address space (or network prefix or network block) reserved, but not yet allocated or delegated by the Internet Assigned Numbers Authority (IANA) or a delegated Regional Internet Registry (RIR). The areas of unallocated address space are called the bogon space.

Bogons are not the same as reserved private address and link-local address ranges, such as those in 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, and 169.254.0.0/16, which are reserved for private networks.[1]

Many ISPs and end-user firewalls filter and block bogons, because they have no legitimate use, and usually are the result of accidental or malicious misconfiguration. Bogons can be filtered by using router Access Control Lists (ACLs), or by BGP blackholing.

IP addresses that are currently in the bogon space may not be bogons at a later date because IANA and other registries frequently assign new address space to ISPs. Announcements of new assignments are often published on network operators' mailing lists (such as NANOG) to ensure that operators have a chance to remove bogon filtering for addresses that have become legitimate.

For example, addresses in 49.0.0.0/8 were not allocated prior to August 2010, but are now used by APNIC.[2] As time goes on, the IPv4 address exhaustion will mean there are fewer and fewer IPv4 bogons.

IANA maintains a list of allocated and reserved IPv4 netblocks.[2]

As of November 2011, the IETF recommends that bogon filters for previously unused IPv4 /8 netblocks should be removed, as all have been assigned.[3]

Etymology

The term bogon stems from hacker jargon, where it is defined as the quantum of bogosity, or the property of being bogus. A bogon packet is frequently bogus both in the conventional sense of being forged for illegitimate purposes, and in the hackish sense of being incorrect, absurd, and useless.

See also

References

  1. ↑ Rekhter (February 1996), "Address Allocation for Private Internets" (txt), Network Working Group, retrieved 2010-03-18
  2. 1 2 "IANA IPv4 Address Space Registry". IANA. 2010-02-22. Retrieved 2010-03-18.
  3. ↑ BCP 171 / RFC 6441 - Time to Remove Filters for Previously Unallocated IPv4 /8s

External links

This article is issued from Wikipedia - version of the Saturday, April 09, 2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.