At a client I found they had bought a large subnet of public internet ip addresses for their business and connected all computers up with public ip addresses. (bought it years ago and never changed it, /18 size network)
For security reasons they created a routing loop between 2 routers at the edge of the network as a makeshift bit-bucket to restrict all access to the network directly from the internet and ran http through a proxy.
While I guess a routing loop would work as a makeshift bit-bucket and good practice aside, is there any security problems with this?
Would using a routing loop to deny traffic to a network pose a legitimate security risk?