On Mon, 9 Feb 2015, Bill Armstrong wrote:

To make sure I have consensus on the proposed additions:

Considering what happened this weekend on AMSIX (someone had configured the amsix IX lan prefix as /22 (it's /21) on their interface and was announcing this /22 to the rest of the world), I would suggest the following addition:

* Filter out all IX LAN prefixes (including smaller parts of it) the network is connected to, so you don't accept them from anyone outside your network (most importantly peers and transits).

--
Mikael Abrahamsson    email: [email protected]
_______________________________________________
BCOP mailing list
[email protected]
http://mailman.nanog.org/mailman/listinfo/bcop

Reply via email to