Understanding BOGON & Spoofed Ingress Risks
Unassigned Internet blocks and reserved RFC1918 space should never traverse external WAN interfaces. Permitting spoofed traffic degrades edge performance and exposes infrastructure to reflection attacks.
Automated BOGON List Implementation
Configure dynamic address-lists fetching verified IANA unallocated CIDRs, dropping invalid source headers directly at edge interfaces prior to packet forwarding.
Management Interface Lockdown
Never expose default Winbox 8291 or SSH ports to public WAN. Restrict administrative gateways strictly to encrypted tunnels managed centrally by fiberNox.
Frequently Asked Questions (FAQ)
What are BOGON IPs?+
BOGON IPs are unallocated or reserved IP addresses illegally spoofed by attackers to hide the real source of attacks.