Lifehacks 

What is a bogon address?

Leia Doyle

What is a bogon address?

A bogon is an illegitimate IP address that falls into a set of IP addresses that have not been officially assigned to an entity by an internet registration institute, such as the Internet Assigned Number Authority (IANA).

What are Martian addresses?

Martian addresses are host or network addresses about which all routing information is ignored. When received by the routing device, these routes are ignored. They commonly are sent by improperly configured systems on the network and have destination addresses that are obviously invalid.

What are Bogons and Martians?

What are Bogons and Martians? Put simply, a Bogon Network is a bogus or invalid network. These networks are sometimes called martians, as they might as well have come from Mars (where no valid networks exists; At least at the time of writing).

Should I block bogon networks?

Blocking bogon networks on local interfaces can be harmful as they will block traffic which is necessary for proper local network operations, especially for IPv6. If local interfaces have proper rules which only allow from specific local sources, bogon blocking is unnecessary.

What does bogon true mean?

“Bogon” is an informal term used to describe IP packets on the public Internet that claim to be from an area of the IP address space reserved, but not yet allocated or delegated by the Internet Assigned Numbers Authority (IANA) or any of the Regional Internet Registries (RIR).

What is BGP bogon?

The traditional bogons are martians plus prefixes that have not been allocated by IANA to an RIR; fullbogons also include prefixes that have been allocated to an RIR, but have not been assigned by that RIR to an ISP or other end-user organization. …

Are Martian packets dropped?

By default the kernel checks that the interface on which it receives a packet from host X is also the interface it would use to reach that host. If it is not, it drops the packet. If martian logging is enabled, it will log it else it is a silent drop.

What is Martian log?

A Martian packet is an IP packet seen on the public Internet that contains a source or destination address that is reserved for special-use by Internet Assigned Numbers Authority (IANA). The name is derived from packet from Mars, meaning that packet seems to be not of this Earth.

What is a bogon route?

A bogon prefix is a route that should never appear in the Internet routing table. A packet routed over the public Internet (not including over VPNs or other tunnels) should never have an address in a bogon range. These are commonly found as the source addresses of DDoS attacks.

How do I block bogon?

Many ISPs and end-user firewalls filter and block bogons, because they have no legitimate use, and usually are the result of accidental misconfiguration or malicious intent. Bogons can be filtered by using router access-control lists (ACLs), or by BGP blackholing.

Is a bogon private network IP address?

Private IP addresses are also considered bogons because they are not supposed to be found on the public Internet. Many ISPs and end-user firewalls seek to block bogons, because they have no legitimate use (more details on how successful they can be at this are below).

What is Martian logging?

What are the private addresses in A bogon?

Bogons also include reserved private address and link-local address ranges, such as those in 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, and 169.254.0.0/16, which are reserved for private networks, sometimes also known as Martian packets.

What is Bogon IP address and bogus space?

What is Bogon IP Address and Bogus Space? Bogon IP Addresses are the set of IP Addresses not assigned to any entity by Internet Assigned Numbers Authority (IANA) and RIR (Regional Internet Resgistry). This unallocated address space is called the bogus space.

Which is the best resource for bogons and Martians?

Team Cymru’s Bogon Reference, which is the best resource after RFC3871 to explain both Bogons and Martians very clearly, says the following about Bogons and Martians:

What’s the difference between Bogon networks and Martian networks?

These networks are sometimes called martians, as they might as well have come from Mars (where no valid networks exists; At least at the time of writing). Bogon networks are invalid on the internet, as they are networks that have been reserved for special use, or have not yet been allocated to a customer.