Re: Odd entries in my Security Router logs

On Wed, 11 Dec 2002 12:59:12 PST, David Gillett <gillettdavid@fhda.edu> said:

> Reality, therefore, is that packets from these source

Close to 30% of the traffic at the root nameservers have sources in RFC1918 space. This indicates:

1. A lot of systems behind a NAT have broken configurations causing DNS lookups.
2. The NAT itself is broken allowing the 1918 address to escape.
3. The ISP isn't filtering.

There's a *lot* of stupid configuration out there.

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech