Post #4383460
2026-08-04 19:41 UTC
@syn_rst@norden.social @badsamurai@infosec.exchange I guess I always assumed that the router would look up the IP and see a substitution for an unreachable address.
Is AS Autonomous System?
I'll have to look up how to do this in OpenWRT.
If you know of a good resource for further reading would you mind sharing it? Also if there are reputable lists of IP/AS to drop, that'd be cool too. I'll go looking regardless but with AI slop I'm worried it might be hard to find.
Thanks for the knowledge and helping keep me safer.
Replies (1)
-
@badsamurai@infosec.exchange 2026-08-04 21:21
@fullywoolly@mastodon.social @syn_rst@norden.social A few orgs maintain lists of troublesome ASNs The @gayint@infosec.exchange team maintains this list: https://gayint.org/blocklists/numbers.txt And @spamhaus@infosec.exchange maintain this list: https://www.spamhaus.org/drop/asndrop.json For a good intro about ASNs, poor governance, lack of support for blocking, @jtk@infosec.exchange gave this excellent talk at FIRSTCON25: https://youtu.be/PiNP9EDPE-I?si=h4bmMqntAgiFHqCB If your devices support it, Geo-based IP blocks can get you reasonably far on a home network, but it's not enough for even a mid-enterprise today. #asn