If I recall well, a BGP speaker only sends/receives updates to route tables, since the whole routing table is stored when the connection is initiated. Therefore, closing a connection would only prevent further route updates between the two attacked devices.
I don�t understand why this is considered as a "serious threat", or does it have to do with the "de-sync" that would occur within the AS? Thanks for any lights. Regards, I�igo Koch Red Segura _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
