Best Practice Detail

13-6-8093

Service Providers should validate the source address of all traffic sent from the customer for which they provide Internet access service and block any traffic that does not comply with expected source addresses. Service Providers typically assign customers addresses from their own address space, or if the customer has their own address space, the service provider can ask for these address ranges at provisioning. (Network Operators may not be able to comply with this practice on links to upstream/downstream providers or peering links, since the valid source address space is not known).

Status: Rollover New

References/Comments: IETF rfc3013 sections 4.3 and 4.4 and NANOF ISP Resources. www.IETF.net

Historical events:

Service Providers
Cable
Internet/Data
Wireless
Wireline
Cyber Security
Network Provisioning
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII