Using BGP for realtime import and export of OpenBSD spamd entries

More documents

Recommendations

Info

oute server the center of our universe receives routes and communities from the spamd-source systems redistributes them to client/peers 14/27
oute server only accept addresses from trusted spamd-source systems only accept host routes (/32) mark with our AS and community, for easy filtering match from group BS community neighbor-as:42 set community $myAS:42 match from group BS community neighbor-as:666 set community $myAS:666 15/27
Page 1 and 2: Using BGP for realtime import and e
Page 3 and 4: spamd written by Bob Beck included
Page 5 and 6: gp communities allows you to mark a
Page 7 and 8: openbgpd everything we use is alrea
Page 9 and 10: tying them together exporting IP ad
Page 11 and 12: spamd-source first, select known go
Page 13: spamd-source whitelist semi-trusted
Page 17 and 18: client whitelist adds whitelist ent
Page 19 and 20: client blacklist why not simply use
Page 21 and 22: client blacklist $ cat /usr/local/s
Page 23 and 24: security concerns where do we get t
Page 25 and 26: future work accelerate adding addre
Page 27: Questions? 27/27

Using BGP for realtime import and export of OpenBSD spamd entries

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?