Bogon filtering

Short description: Discarding network packets with bogus addressing

Bogon filtering is the practice of blocking packets known as bogons, which are ones sent to a computer network claiming to originate from invalid or bogus IP addresses, known as bogon addresses.[1]

## Contents

* 1 Etymology
* 2 Types of bogon addresses
* 3 Blocking and filtering
* 4 Former bogon addresses
* 5 See also
* 6 References
* 7 External links

## Etymology

The term bogon stems from hacker jargon, with the earliest appearance in the Jargon File in version 1.5.0 (dated 1983).[2] It is defined as the quantum of bogosity, or the property of being bogus. A bogon packet is frequently bogus both in the conventional sense of being forged for illegitimate purposes, and in the hackish sense of being incorrect, absurd, and useless.[3] An alternative etymology suggests that 'bogon' derives from a portmanteau of "bogus logon", or a logon from a place you know no one can actually logon.[4]

## Types of bogon addresses

Areas of unallocated address space are called the bogon space. These are addresses that are not in any range allocated the Internet Assigned Numbers Authority (IANA) or a regional Internet registry (RIR) for public internet use.

Bogon IPs also include some address ranges from allocated space. For example, addresses reserved for private networksREFERENCE FOR RFC1918 IS NOT DEFINED YET. You are invited to add it here.'REFERENCE FOR RFC4193 IS NOT DEFINED YET. You are invited to add it here., such as those in 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 and fc00::/7,REFERENCE FOR RFC4193 IS NOT DEFINED YET. You are invited to add it here. loopback interfaces like 127.0.0.0/8 and ::1, and link-local addresses like 169.254.0.0/16 and fe80::/64 can be bogon addresses. Addresses for Carrier-grade NAT, Teredo, and 6to4 and documentation prefixes also fall into this category.[5] IP packets using these as source addresses are sometimes known as Martian packets.

## Blocking and filtering

Many ISPs and end-user firewalls filter and block bogons, because they have no legitimate use, and usually are the result of accidental misconfiguration or malicious intent. Bogons can be filtered by using router access-control lists (ACLs), or by BGP blackholing.

## Former bogon addresses

IP addresses in the bogon space may cease to be bogons because IANA frequently assigns new addresses. Announcements of new assignments are often published on network operators' mailing lists (such as NANOG) to ensure that bogon filtering can be removed for addresses that have become legitimate. For example, addresses in 49.0.0.0/8 were not allocated prior to August 2010, but are now used by APNIC.[6]

As of November 2011[update], the Internet Engineering Task Force (IETF) recommends that, since there are no longer any unallocated IPv4 /8s, IPv4 bogon filters based on registration status should be removed.REFERENCE FOR RFC6441 IS NOT DEFINED YET. You are invited to add it here. However, bogon filters still need to check for Martian packets.

## See also

* Reverse-path forwarding
* IP hijacking
* IP address spoofing
* Ingress filtering
* Internet background noise

## References

1. ↑ "What is a bogon address?" (in en-AU). APNIC. https://www.apnic.net/manage-ip/apnic-services/registration-services/resource-quality-assurance/what-is-a-bogon-address/.
2. ↑ "The Hacker's Dictionary: A Guide to the World of Computer Wizards" (in English). 1983. http://jargon-file.org/archive/jargon-1.5.0.dos.txt.
3. ↑ Newton, Harry (2009) (in English). Newton's Telecom Dictionary (25th Updated and Expanded Anniversary ed.). New York, NY: Flatiron Publishing. pp. 200. ISBN 978-097938-733-3.
4. ↑ "Ian McAnerin and Mike Churchill - 2005". http://www.mcanerin.com/EN/articles/bogon-01.asp.
5. ↑ "Bogon IP addresses". ipgeolocation. https://ipgeolocation.io/resources/bogon.html.
6. ↑ "IANA IPv4 Address Space Registry". IANA. 2010-02-22. https://www.iana.org/assignments/ipv4-address-space/.

## External links

* Bogons Ate My Website
* Bogon traffic analysis report, netflow and spam analysis
* RIPE NCC: De-Bogonising New Address Blocks
* Team Cymru Bogon Reference

This article is part of a series on

Information security
Related security categories

* Internet security
* Automotive security
* Cyberwarfare
* Computer security
* Mobile security
* Network security

Threats

* Advanced persistent threat
* Computer crime
* Vulnerabilities
* Eavesdropping
* Malware
* Spyware
* Ransomware
* Trojans
* Viruses
* Worms
* Rootkits
* Bootkits
* Keyloggers
* Screen scrapers
* Exploits
* Backdoors
* Logic bombs
* Payloads
* Denial of service
* Web shells
* Web application security
* Phishing

Defenses

* Computer access control
* Application security
* Antivirus software
* Secure coding
* Secure by default
* Secure by design
* Secure operating systems
* Authentication
* Multi-factor authentication
* Authorization
* Data-centric security
* Encryption
* Firewall
* Intrusion detection system
* Mobile secure gateway
* Runtime application self-protection (RASP)

* v
* t
* e

* v
* t
* e

Computer science

Note: This template roughly follows the 2012 ACM Computing Classification System.

Hardware|

* Printed circuit board
* Peripheral
* Integrated circuit
* Very Large Scale Integration
* Systems on Chip (SoCs)
* Energy consumption (Green computing)
* Electronic design automation
* Hardware acceleration

Computer systems
organization|

* Computer architecture
* Embedded system
* Real-time computing
* Dependability

Networks|

* Network architecture
* Network protocol
* Network components
* Network scheduler
* Network performance evaluation
* Network service

Software organization|

* Interpreter
* Middleware
* Virtual machine
* Operating system
* Software quality

Software notations
and tools|

* Programming paradigm
* Programming language
* Compiler
* Domain-specific language
* Modeling language
* Software framework
* Integrated development environment
* Software configuration management
* Software library
* Software repository

Software development|

* Software development process
* Requirements analysis
* Software design
* Software construction
* Software deployment
* Software maintenance
* Programming team
* Open-source model

Theory of computation|

* Model of computation
* Formal language
* Automata theory
* Computational complexity theory
* Logic
* Semantics

Algorithms|

* Algorithm design
* Analysis of algorithms
* Algorithmic efficiency
* Randomized algorithm
* Computational geometry

Mathematics
of computing|

* Discrete mathematics
* Probability
* Statistics
* Mathematical software
* Information theory
* Mathematical analysis
* Numerical analysis

Information
systems|

* Database management system
* Information storage systems
* Enterprise information system
* Social information systems
* Geographic information system
* Decision support system
* Process control system
* Multimedia information system
* Data mining
* Digital library
* Computing platform
* Digital marketing
* World Wide Web
* Information retrieval

Security|

* Cryptography
* Formal methods
* Security services
* Intrusion detection system
* Hardware security
* Network security
* Information security
* Application security

Human–computer
interaction|

* Interaction design
* Social computing
* Ubiquitous computing
* Visualization
* Accessibility

Concurrency|

* Concurrent computing
* Parallel computing
* Distributed computing
* Multithreading
* Multiprocessing

Artificial
intelligence|

* Natural language processing
* Knowledge representation and reasoning
* Computer vision
* Automated planning and scheduling
* Search methodology
* Control method
* Philosophy of artificial intelligence
* Distributed artificial intelligence

Machine learning|

* Supervised learning
* Unsupervised learning
* Reinforcement learning
* Multi-task learning
* Cross-validation

Graphics|

* Animation
* Rendering
* Image manipulation
* Graphics processing unit
* Mixed reality
* Virtual reality
* Image compression
* Solid modeling

Applied
computing|

* E-commerce
* Enterprise software
* Computational mathematics
* Computational physics
* Computational chemistry
* Computational biology
* Computational social science
* Computational engineering
* Computational healthcare
* Digital art
* Electronic publishing
* Cyberwarfare
* Electronic voting
* Video games
* Word processing
* Operations research
* Educational technology
* Document management

* Book
* Category
* Outline
* WikiProject
* Commons

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Bogon filtering. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Bogon_filtering&oldid=4228259"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template