This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fullbogon Network Object in FW

Good Evening,

I recently discovered something I was unaware of here:

The Bogon Reference - Team Cymru

I am interested in applying the fullbogon list to UTM 9.111-7 (HomeUse).

1. What would be the best approach for creating a 'Fullbogon object' that contains all the IP addresses and can be updated periodically?
2. How would I apply the FW rule so that any inbound (unsolicited) traffic containing a bogon address be dropped? (I am trying to be extra careful here as there is RFC 1918 address space in that list and I don't want to inadvertently apply the rule to my LAN as obviously my LAN uses that space).

Any additional thoughts/comments are appreciated, thanks!

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi,

It's possible the bogons are already in the Country blocking system; you can test the database at
https://www.maxmind.com/en/geoip_demo

Otherwise, you can create Network Definitions for each network, and a Network Group to include them all.

Barry
Cancel
Vote Up 0 Vote Down

Cancel