<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-15"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 2/24/2011 1:19 AM, Matthew Seaman wrote:
<blockquote cite="mid:4D65F86C.3050604@infracaninophile.co.uk"
type="cite">
<pre wrap="">On 24/02/2011 04:14, Noel Butler wrote:
</pre>
<blockquote type="cite">
<pre wrap="">You can pretty much remove the entire statement now, as all /8's are
issued as of about two weeks ago.
</pre>
</blockquote>
<pre wrap="">
This works for me:
lucid-nonsense:~/src/namedb:% cat acl-ipv4-bogons.conf
// @(#) $Id: acl-ipv4-bogons.conf 800 2011-02-03 20:22:12Z matthew $
//
// Networks listed by IANA as test, RFC 1918, Multicast, Experimental,
// etc. (RFC 5735)
//
// See: <a class="moz-txt-link-freetext" href="http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.txt">http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.txt</a>
acl ipv4-bogons {
0.0.0.0/8;
10.0.0.0/8;
127.0.0.0/8;
169.254.0.0/16;
172.16.0.0/12;
192.0.0.0/24;
192.0.2.0/24;
192.168.0.0/16;
198.18.0.0/15;
198.51.100.0/24;
203.0.113.0/24;
224.0.0.0/3;
};
//
// That's All Folks!
//
All of which are special purpose networks listed in RFC 5735 which you
shouldn't be seeing any DNS query traffic from on the open internet.
This bogon list is going to be static for the foreseeable future.
</pre>
</blockquote>
<br>
<pre class="newpage">+ 192.88.99.0/24 // 6to4 relay anycast - can be destination of packets, *should* never be source
+ 240.0.0.0/4 // reserved for future use - likely to *never* be valid source - I block, YMMV
</pre>
<br>
-DM<br>
<br>
<blockquote cite="mid:4D65F86C.3050604@infracaninophile.co.uk"
type="cite">
<pre wrap=""> Cheers,
Matthew
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
<br>
</body>
</html>