<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jul 25, 2019, at 11:55 AM, Alejandro Acosta <<a href="mailto:alejandroacostaalamo@gmail.com" class="">alejandroacostaalamo@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 7/24/19 4:16 PM, Fernando Frediani wrote:<br class=""><br class=""><blockquote type="cite" class=""> <br class="">On this basis I wanted also to understand also who was the 'clever'<br class="">idea to deny forwarding to this packets in firmware to something<br class="">tagged as "Future Use", therefore that had the expectation to be used<br class="">one day in the future ?<br class=""></blockquote></div></div></blockquote><div><br class=""></div><div>It is actually the _expected behavior_ of the forwarding plane. A router SHOULD NOT forward packets with destination addresses in space that it is not supposed to be visible in the routing table.</div><div><br class=""></div><div>Packets with addresses in this space are “martians” [<a href="https://en.wikipedia.org/wiki/Martian_packet" class="">https://en.wikipedia.org/wiki/Martian_packet</a>], and if forwarded widely on the Internet, could be easily be used to spoof origin addresses and perform DDoS attacks, among other things.</div><div><br class=""></div><div>It would certainly have been smarter to have some way for routers to fetch a file with a list of non-martian blocks and have the forwarding planes auto-configure themselves based on that list. Something similar to the RTR feed RPKI validators send to validating routers. Sadly, it’s a bit too late for that. </div><div><br class=""></div><div>Cheers!</div><div><br class=""></div><div>/Carlos</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class=""><br class="">Hello, I have followed all the thread waiting for someone to answer the<br class="">question above :-)<br class=""><br class=""><br class=""><span id="cid:D3CA1775-C1F2-4BEC-A5F5-5B933AFFA34E@meeting.ietf.org"><pEpkey.asc></span>_______________________________________________<br class="">LACNOG mailing list<br class=""><a href="mailto:LACNOG@lacnic.net" class="">LACNOG@lacnic.net</a><br class="">https://mail.lacnic.net/mailman/listinfo/lacnog<br class="">Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog<br class=""></div></div></blockquote></div><br class=""></body></html>