Thanks! -James -----Original Message----- From: Robert Kisteleki [mailto:robert@ripe.net] Sent: Thursday, August 14, 2014 12:27 AM To: James Sink; ripe-atlas@ripe.net Subject: Re: [atlas] atlas on a public subnet Hi, On 2014.08.13. 18:15, James Sink wrote:

Hello all, I just received my atlas probe and am about to deploy it. However I have a question about the subnet I am going to place it it on. Is it safe to put it on an unfiltered public ip?

That depends on your definition of "safe" :-) The probe does not have any open ports, it only makes outgoing connections. This helps a lot being safe.

If not what ACL should I place on the interface?

There's no problem with this. If you want to do this, then make sure all outgoing connections, as well as replies to these packets, can make it through. The probes work well behind NATs too, which have very similar effects in this regard. Regards, Robert

Thanks

---

James Sink Network Engineer P: 800-477-1477 x: 813