Skip to Content.
Sympa Menu

netsec-sig - [Security-WG] Spoof/RPF Numbers

Subject: Internet2 Network Security SIG

List archive

[Security-WG] Spoof/RPF Numbers


Chronological Thread 
  • From: "Garrett, Seth B" <>
  • To: "" <>
  • Subject: [Security-WG] Spoof/RPF Numbers
  • Date: Thu, 10 May 2018 19:06:19 +0000
  • Accept-language: en-US
  • Ironport-phdr: 9a23:wF7mRxNNPTHt5r6TAzQl6mtUPXoX/o7sNwtQ0KIMzox0Iv38rarrMEGX3/hxlliBBdydt6ofzbKO+4nbGkU4qa6bt34DdJEeHzQksu4x2zIaPcieFEfgJ+TrZSFpVO5LVVti4m3peRMNQJW2aFLduGC94iAPERvjKwV1Ov71GonPhMiryuy+4ZLebxlGiTanfb9+MAi9oBnMuMURnYZsMLs6xAHTontPdeRWxGdoKkyWkh3h+Mq+/4Nt/jpJtf45+MFOTav1f6IjTbxFFzsmKHw65NfqtRbYUwSC4GYXX3gMnRpJBwjF6wz6Xov0vyDnuOdxxDWWMMvrRr0yRD+s7bpkSAXwhSkHKTA37X3XhMJzgqJavB2uqAdyzJTIbIyPLvdyYr/Rcc4cSGFcXshRTStBAoakYocBDuQOJ/xYr5PjqFsSsRuyHRSnCv7xxT9Uhn/9wLA33+o8GgzBxwwvBN0Ov27OrNXvKqgSTfu4zKjVzTnZcfxZxCr95ZHOfxs8ov+MRap9fdfPxUQrDQ/IjFGdpZb4Mz+Py+gAsGuW4/J9We+ulWIrsR99riauy8s2hYTFmpgZxk7L+ClhzoY6O961RFJ+bNOhH5Zfqz+WOopzT84iXW1noyg3x7gIuZO1cyUF0pEqyhrRa/CbcYWF5A/oWvyLLjdinn1lfaqyhxas/kikze3xTsm030xQripZl9nDrHYN2wbO6siGVvt95V2t2TeJ1w/O6+FLO0Y0mrDBJ5E/37Ewi4IfsUXFHiDohEX7lLKaelsg9+Sy6enqZq/qqoKGO4NpiQzzMbwimsmlDuQ5NggOUXKb+eO51LD75k32W7pKgecskqnDrp/aOd8Wpq+kAwNPzIks9gu/Ay+80NsEhXkHME5FeBWfgojyJV7BPO34De2+g1SwkDZn3v7HPrL6D5XJL3jDi6vhfa1j50JGyQozy8xf6IxOCrEHPv3zRlH9uMbGARAkLgzni9rgXZ9m24gDQ2OTE+qGP4vTt0OF/OQiP7PKaYMI8n6pMPUu+uTvkW58hlA1fK+10IERZWziWPlqPhPKT2Drh4JLPm4QpAciUKiis1CeUXZ5LT7mRKgz7yshBZ6ODJqFS4yw1u/SlBynF4FbMzgVQmuHFm3lIt2J

Some numbers I volunteered to get during the Internet2 Global Summit Security Working Group lunch.


  1. How often are Indiana University IPs spoofed to IU from external sources:
    • ​Over a 10 minute period we drop approximately 700 packets that have our own IP space spoofed as a source.
  2. Internet facing RPF drops as a security response:
    • ​This is our RTBH system combined with RPF to source block external offenders that are null routed
    • Over a 10 minute period it blocked 1,550,000 packets 



Seth Garrett
Principal Network Systems Engineer
Indiana University




Archive powered by MHonArc 2.6.19.

Top of Page