[ILUG] Re: [OT] private IPs in public dns zones

[ccostelloe at flogas.ie]

This is already nicely OT and may allow me to raise the following...

How secure is an ISDN dial-on-demand router, getting a (random) IP address each time from the ISP, with only "private" 192.168.1.X addresses behind it?  I am probably googling with the wrong phrases, but I cannot find anything useful on this.

To help this keep some semblance of being on-topic, should there be a Linux firewall behind the router?

Ciaran


______________________________ Reply Separator _________________________________
Subject: Re: [ILUG] [OT] private IPs in public dns zones
Author:  tbridge at vianetworks.ie at INTERNET
Date:    19/07/01 12:23



At 23:26 18/07/2001 +0100, you wrote:

>On Wed, 18 Jul 2001, Kevin Gannon wrote: >
> > Hmmmm, its kinda of a pain when all your customers ring you to
> > say that they cant traceroute to there web site from provider X. >
>but it saves on IPs..

And makes it a hell of a lot more difficult to debug network problems.   IPv4 usage conservation isn't designed to make life more difficult, just make people more sensible in their usage of same.

>but certainly the Tier 1 border routers should be filtering out >private IP space.

How - where?

> > In fact I would ask questions of any ISP doing packet filtering >
>not packet filtering - route filtering...

Any sensible ISP is doing some route filtering - but that doesn't stop us receiving packets with a source address of 192.168.1.1 (it's just if that's the destination, we'll drop it).

>so tell me, where do i get a class B? (or anything close to a class >B, ie at least /20). roll on ipv6. i have a full 64 bits of 6BONE >unicast address space all to myself: 3ffe:80c0:220:c/64

Why the hell do you need a class B size of space anyway?

T.



-- Irish Linux Users' Group: ilug at linux.ie http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information. List maintainer: listmaster at linux.ie