Re: Implementing the bogon list

2010-04-10 Thread Alex
Hi, > EMARKETINGHYPE :)  You still haven't specified what exactly you want to > implement. ACLs? Empty zones for things that should not resolve? > Something else? And more importantly, what is the _reason_ you're trying > to do what you're trying to do? Heh :-) Sure didn't mean that, but guess th

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 20:50, Alex wrote: > Hi, > >> Let's be clear on what "this" is please, since I don't think the OP's >> post was clear about what he wanted to implement. :) > > I'm really interested in security, reducing resources, and making sure > the server is current with today's standards. I'd li

Re: Implementing the bogon list

2010-04-09 Thread Joseph S D Yao
On Sat, Apr 10, 2010 at 01:08:16AM -0400, Joseph S D Yao wrote: ... > I strongly recommend that anyone wanting some degree of security use > look at the lists of IPv4 networks in RFC 5735/6/7 and the list of IPv6 > networks in RFC 5156. Decide which of those networks you want to block > or blackho

Re: Implementing the bogon list

2010-04-09 Thread Joseph S D Yao
On Fri, Apr 09, 2010 at 11:41:09PM -0400, Alex wrote: ... > Ah,. I was expecting it to be a lot more involved than that, I guess. ... It is. Do not expect to implement ANYTHING involving a "bogon" list without it requiring CONSTANT MAINTENANCE. The Bogon list as it is today has shrunk greatly f

Re: Implementing the bogon list

2010-04-09 Thread Alex
Hi, > Let's be clear on what "this" is please, since I don't think the OP's > post was clear about what he wanted to implement. :) I'm really interested in security, reducing resources, and making sure the server is current with today's standards. I'd like to make sure it's properly set up and th

Re: Implementing the bogon list

2010-04-09 Thread Alex
Hi, >> I think that's really designed for router ACL's. > > Not exclusively, hence > http://www.cymru.com/Documents/secure-bind-template.html Yes,. that's exactly where I found the reference, and have known about it for years but only now want to try and make use of it to reduce any load from the

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 14:23, Kevin Oberman wrote: > The FreeBSD default configuration does this, Let's be clear on what "this" is please, since I don't think the OP's post was clear about what he wanted to implement. :) The default named.conf for FreeBSD implements local, empty zones for various things tha

Re: Implementing the bogon list

2010-04-09 Thread Kevin Oberman
> Date: Fri, 9 Apr 2010 16:27:38 -0400 > From: Alex > Sender: bind-users-bounces+oberman=es@lists.isc.org > > Hi, > > I'm interested in implementing an updated Cymru bogon list, but would > like some examples on how best to do this. Much of my searching has > resulted in old configurations t

Re: Implementing the bogon list

2010-04-09 Thread Stefan Schmidt
On 09.04.2010, at 22:32, Bryan Irvine wrote: I think that's really designed for router ACL's. Not exclusively, hence http://www.cymru.com/Documents/secure-bind-template.html I'm not sure what you'd do with regards to BIND or even why you'd want to handle it there. Well, for example for a

Re: Implementing the bogon list

2010-04-09 Thread Doug Barton
On 04/09/10 13:27, Alex wrote: > Hi, > > I'm interested in implementing an updated Cymru bogon list, Why don't you take a step back and let us know what you're trying to accomplish first. Doug -- ... and that's just a little bit of history repeating. -- Prope

Re: Implementing the bogon list

2010-04-09 Thread Bryan Irvine
I think that's really designed for router ACL's. Most reliable method might be to subscribe to their BGP feed. I'm not sure what you'd do with regards to BIND or even why you'd want to handle it there. . On Fri, Apr 9, 2010 at 1:27 PM, Alex wrote: > Hi, > > I'm interested in implementing an

Implementing the bogon list

2010-04-09 Thread Alex
Hi, I'm interested in implementing an updated Cymru bogon list, but would like some examples on how best to do this. Much of my searching has resulted in old configurations that weren't complete and seemed to contain errors. Where is the best place to go to find a template on how best to do this?