On Wednesday, August 07, 2013 08:17:46 PM Paul Stewart wrote: > Hehe sorry for the flashbacks ;)
My suspicion was that some testing had gone on with AT&T's ASN (with or without their knowledge), and one of the coders left that in the code by mistake. > In this particular instance, we had a BGP peer that was > slipping us a default route. That route was actually > making it into the BGP tables locally (but not chosen as > best route thankfully!). Guess I need to look at > tighter filtering again geesh. Yeah - per-customer prefix lists are annoying (even more annoying if you're offering BGP-based RTBH to customers), but it's still the best way to stay stafe :-). Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
