IPv6 black lists?
Gert Doering
gert at space.net
Wed Mar 10 12:04:03 CET 2010
Hi,
On Wed, Mar 10, 2010 at 10:53:06AM +0000, Benedikt Stockebrand wrote:
> > So this translates out to 2^16*5 = 327680 detected spams to get
> > completely blocked for someone that gets a /48 allocation from some
> > tunneling provider or another.
>
> Dave is on the right track. If you work the numbers some more, this
> is what you get:
>
> With legacy IPv4, one can maintain a full host-specific IPv4 address
> blacklist in 512 MB of memory (using a bitmap with one bit per
> address), so this is obviously possible with today's standard
> hardware.
>
> Even if you filtered IPv6 by /48s, that would take 2^16 times as much
> memory, or 32 TB. Filtering at /64 we're at 2 EB (ExaBytes).
Not bitmap-based data structures exist...
Gert Doering
-- NetMaster
--
Total number of prefixes smaller than registry allocations: 144438
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
More information about the ipv6-ops
mailing list