Changes

Bogon networks

1,345 bytes added, 4 February
The following lines were added (+) and removed (-):
Bogon IP addresses can, not entirely accurately, be thought of as fake IP addresses.  The bogon IP space not assigned to any entity by Internet Assigned Numbers Authority (IANA) and RIR (Regional Internet Registry) may be as of yet unassigned or may be specially reserved for private network use.  Addresses reserved for private networks, such as those in 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 are considered bogon.  Local machine loopback addresses like those in 127.0.0.0/8 and link-local addresses like 169.254.0.0/16 are also bogon.Bogon IP addresses can, not entirely accurately, be thought of as fake IP addresses.  The bogon IP space not assigned to any entity by Internet Assigned Numbers Authority (IANA) and RIR (Regional Internet Registry) may be as of yet unassigned or may be specially reserved for private network use.  Addresses reserved for  [[IPv4 Private Address Space]], such as those in 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 are considered bogon.  Local machine loopback addresses like those in 127.0.0.0/8 and link-local addresses like 169.254.0.0/16 are also bogon.  198.51.100.0/24 TEST-NET-2  198.51.100.0/24 TEST-NET-2  ::1/128 Node-scope unicast loopback address  ::1/128 Node-scope unicast loopback address  2001:0:a00::/40 Teredo bogon (10.0.0.0/8)  2001:0:a00::/40 Teredo bogon (10.0.0.0/8)== blocking bogon networks for security ==Many appliance firewalls come preconfigured to block bogon networks with rules to accomplish said task*Block private networks: blocks 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 subnets.*Block bogon networks: blocks any unallocated IP subnets (typically retrieved Monthly).Never block all bogon networks on for LAN or WLAN or you will no longer have access!No bogon prefix should ever appear in an Internet routing table.  A packet routed over the Internet other than those within a VPN tunnel should never have a bogon address or be part of a bogon network range.  The security threat in bogon networks resides in that Bogon IPs are frequently used in DDOS attacks, and they can be used in other attacks where no TCP connection is required.There are a variety of attacks against networks and Internet infrastructure that involve the use of bogon addresses.  Blocking outbound bogon network traffic and certain types of DNS resolution of bogon addressing is also necessary for security.  Bogon addresses may appear in DNS results when someone is using DNS Tunneling to steal data from a private network.  This type of activity can be easily identified within the router or firewall logs and should be blocked.  [[Category:Computer_Technology]][[Category:Networking]]
Bureaucrat, administrator
16,192
edits