IPv6 black lists?

Gert Doering gert at space.net
Wed Mar 10 12:04:03 CET 2010


Hi,

On Wed, Mar 10, 2010 at 10:53:06AM +0000, Benedikt Stockebrand wrote:
> > So this translates out to 2^16*5 = 327680 detected spams to get
> > completely blocked for someone that gets a /48 allocation from some
> > tunneling provider or another.
> 
> Dave is on the right track.  If you work the numbers some more, this
> is what you get:
> 
> With legacy IPv4, one can maintain a full host-specific IPv4 address
> blacklist in 512 MB of memory (using a bitmap with one bit per
> address), so this is obviously possible with today's standard
> hardware.
> 
> Even if you filtered IPv6 by /48s, that would take 2^16 times as much
> memory, or 32 TB.  Filtering at /64 we're at 2 EB (ExaBytes).

Not bitmap-based data structures exist...

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  144438

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279


More information about the ipv6-ops mailing list