[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
BCP38 tester?
- Subject: BCP38 tester?
- From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks at vt.edu)
- Date: Mon, 01 Apr 2013 10:09:20 -0400
- In-reply-to: Your message of "Mon, 01 Apr 2013 09:34:31 -0400." <[email protected]>
- References: <[email protected]> <1364787851.2136.7.camel@karl> <[email protected]> <1364792091.2136.15.camel@karl> <CAAAwwbUB-8G==ZzCtn_C5Yncd_t2==KNT_POZFdVPHW9BLS55g@mail.gmail.com> <136480360.2136.54.camel@karl> <[email protected]>
On Mon, 01 Apr 2013 09:34:31 -0400, Alain Hebert said:
> I'm sad to confirm that my spoof test was successful with a:
>
> . SageMCom modem+router, which is used by a big TelCo around my
> part, for both their residential and commercial ADSL2+, VDSL customers.
You might want to check more carefully exactly what the failure mode
was. I'm willing to bet that the router has been configured to assign
addresses inside a specific RFC 1918 /24, and will do Something Terrible
to spoofed packets in that range, but will figure you know what you're
doing and pass them if you source a packet from outside that /24.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20130401/dfc9024b/attachment.bin>