Re: Rogue BGP Routes
On 15/May/20 21:14, Gary Godard wrote: > We had an eBGP session with them at that time but it was very > problematic. It is strange that the IP blocks that had the issue were > the same blocks that we advertised with them and the ones that we were > using with Level 3 at the time were unaffected. My suspicion is that those 2 prefixes you highlight were being originated from behind their AS, for some reason or other. It is quite possible that between leaving that contract and people moving on, that origination stayed in place. It's not the first time I or Philip (Smith) have seen many cases of these, that pop up years later, only to find that someone forgot about a static route or an on-behalf origination from years back after all manner of staff shuffled through both companies. Of course, very possible this is - as Randy would say - conjecturbation, on my part; but it's what stands out to me most, at the moment. > > Once this message posted to the group, I got responses from Charter > almost immediately from the group. So if I had been a member of the > group yesterday morning when the problem was discovered I could have > had a much faster resolution. More pressure is better than less :-). Mark.
Re: Rogue BGP Routes
We had an eBGP session with them at that time but it was very problematic. It is strange that the IP blocks that had the issue were the same blocks that we advertised with them and the ones that we were using with Level 3 at the time were unaffected. Once this message posted to the group, I got responses from Charter almost immediately from the group. So if I had been a member of the group yesterday morning when the problem was discovered I could have had a much faster resolution. Thanks for the response. Gary Godard *Chief Technical Officer* 308 Pine Street West Monroe, LA 71291 Office: 800-536-7035 x5201Fax: 888-471-8778 Direct: 318-884-9422 Email: g...@skyrider.net Web: www.skyrider.net LinkedIn: https://www.linkedin.com/in/gary-godard-48733920 Matt 4:19 And he saith unto them, "Follow me, and I will make you fishers of men." If you are his follower, "A Christian", where are you fishing??? This electronic transmission and any attached documents or other writings are intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. If you have received this communication in error, please immediately notify the sender by return e-mail and destroy the communication. Any disclosure, copying, distribution or the taking of any action concerning the contents of this communication or any attachments by anyone other than the named recipient is strictly prohibited On Fri, May 15, 2020 at 12:16 PM Mark Tinka wrote: > > > On 15/May/20 19:13, Gary Godard wrote: > > > > > We did previously have a relationship with 10 years ago in the > > Thibodaux/Hammond area. > > Do you recall whether you had an eBGP session with them, or if they > originated your prefixes on your behalf behind their own AS? > > > > > > Not sure who resolved the issue or if RPKI that I set up yesterday > > afternoon was responsible. but it does not appear to be an issue at > > this time. > > RPKI is not yet that widely deployed that you would see global success > in resolution. I'm curious to understand my query above... > > That said, do keep trying to find a warm body there that can answer your > questions. > > Mark. >
Re: Rogue BGP Routes
On Fri, May 15, 2020 at 2:05 PM Gary Godard via NANOG wrote: > The affected prefixes were 208.79.8.0/24 and 208.79.10.0/24 > > i do see a /22 ROA for this set of prefixes, hurray! :) > We did previously have a relationship with 10 years ago in the > Thibodaux/Hammond area. > > Around 8 pm CST last night service to the customers was restored. > > Not sure who resolved the issue or if RPKI that I set up yesterday > afternoon was responsible. but it does not appear to be an issue at this > time. > > here's hoping charter's plans for RPKI are moving along and caught your case :) > We are watching it more closely. > > > Gary Godard > *Chief Technical Officer* > > > 308 Pine Street >West Monroe, LA 71291 > > Office: 800-536-7035 x5201Fax: 888-471-8778 > Direct: 318-884-9422 > Email: g...@skyrider.net Web: www.skyrider.net > LinkedIn: https://www.linkedin.com/in/gary-godard-48733920 > > > Matt 4:19 > And he saith unto them, "Follow me, > and I will make you fishers of men." > > If you are his follower, "A Christian", > where are you fishing??? > > > This electronic transmission and any attached documents or other writings > are intended only for the person or entity to which it is addressed and may > contain information that is privileged, confidential or otherwise protected > from disclosure. If you have received this communication in error, please > immediately notify the sender by return e-mail and destroy the > communication. Any disclosure, copying, distribution or the taking of any > action concerning the contents of this communication or any attachments by > anyone other than the named recipient is strictly prohibited > > > > On Fri, May 15, 2020 at 10:17 AM Mark Tinka wrote: > >> >> >> On 14/May/20 22:53, Gary Godard via NANOG wrote: >> > Hi, >> > We are having an issue with Charter Communications advertising 2 >> > of our IP ranges. >> > We are in the process of implementing RPKI now, but does anyone have a >> > suggestion on how to get them to stop? We have tried contacting them >> > via email and via and phone through numerous channels with no luck. >> >> Have you tried checking PeeringDB? >> >> Any idea how this could have happened? Did you used to have some kind of >> relationship with them back in the day? >> >> Mark. >> >
Re: Rogue BGP Routes
The affected prefixes were 208.79.8.0/24 and 208.79.10.0/24 We did previously have a relationship with 10 years ago in the Thibodaux/Hammond area. Around 8 pm CST last night service to the customers was restored. Not sure who resolved the issue or if RPKI that I set up yesterday afternoon was responsible. but it does not appear to be an issue at this time. We are watching it more closely. Gary Godard *Chief Technical Officer* 308 Pine Street West Monroe, LA 71291 Office: 800-536-7035 x5201Fax: 888-471-8778 Direct: 318-884-9422 Email: g...@skyrider.net Web: www.skyrider.net LinkedIn: https://www.linkedin.com/in/gary-godard-48733920 Matt 4:19 And he saith unto them, "Follow me, and I will make you fishers of men." If you are his follower, "A Christian", where are you fishing??? This electronic transmission and any attached documents or other writings are intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. If you have received this communication in error, please immediately notify the sender by return e-mail and destroy the communication. Any disclosure, copying, distribution or the taking of any action concerning the contents of this communication or any attachments by anyone other than the named recipient is strictly prohibited On Fri, May 15, 2020 at 10:17 AM Mark Tinka wrote: > > > On 14/May/20 22:53, Gary Godard via NANOG wrote: > > Hi, > > We are having an issue with Charter Communications advertising 2 > > of our IP ranges. > > We are in the process of implementing RPKI now, but does anyone have a > > suggestion on how to get them to stop? We have tried contacting them > > via email and via and phone through numerous channels with no luck. > > Have you tried checking PeeringDB? > > Any idea how this could have happened? Did you used to have some kind of > relationship with them back in the day? > > Mark. >
Re: Rogue BGP Routes
On 15/May/20 19:13, Gary Godard wrote: > > We did previously have a relationship with 10 years ago in the > Thibodaux/Hammond area. Do you recall whether you had an eBGP session with them, or if they originated your prefixes on your behalf behind their own AS? > > Not sure who resolved the issue or if RPKI that I set up yesterday > afternoon was responsible. but it does not appear to be an issue at > this time. RPKI is not yet that widely deployed that you would see global success in resolution. I'm curious to understand my query above... That said, do keep trying to find a warm body there that can answer your questions. Mark.
Re: Rogue BGP Routes
On 14/May/20 22:53, Gary Godard via NANOG wrote: > Hi, > We are having an issue with Charter Communications advertising 2 > of our IP ranges. > We are in the process of implementing RPKI now, but does anyone have a > suggestion on how to get them to stop? We have tried contacting them > via email and via and phone through numerous channels with no luck. Have you tried checking PeeringDB? Any idea how this could have happened? Did you used to have some kind of relationship with them back in the day? Mark.
Re: Rogue BGP Routes
On 5/14/20 1:53 PM, Gary Godard via NANOG wrote: Hi, We are having an issue with Charter Communications advertising 2 of our IP ranges. We are in the process of implementing RPKI now, but does anyone have a suggestion on how to get them to stop? We have tried contacting them via email and via and phone through numerous channels with no luck. Good luck. Charter hijacked my prefixes once while I was a paying customer (did not withdraw after I shut down BGP) and they wouldn't do anything about it outside of wanting to schedule a maintenance window. But do let us know what prefixes they are so those of us who are proactive about such things can filter and do contact everyone Charter peers with or where they use an upstream. I got faster responses that way than with Charter directly. ~Seth
Re: Rogue BGP Routes
On Fri, May 15, 2020 at 10:46 AM Gary Godard via NANOG wrote: > Hi, > We are having an issue with Charter Communications advertising 2 of > our IP ranges. > ... and these routes are: and so you kind folk can filter them from your Charter peerings... what are the prefixes? > We are in the process of implementing RPKI now, but does anyone have a > suggestion on how to get them to stop? We have tried contacting them via > email and via and phone through numerous channels with no luck. > > Thanks > > Gary Godard > *Chief Technical Officer* > > > 308 Pine Street >West Monroe, LA 71291 > > Office: 800-536-7035 x5201Fax: 888-471-8778 > Direct: 318-884-9422 > Email: g...@skyrider.net Web: www.skyrider.net > LinkedIn: https://www.linkedin.com/in/gary-godard-48733920 > > > Matt 4:19 > And he saith unto them, "Follow me, > and I will make you fishers of men." > > If you are his follower, "A Christian", > where are you fishing??? > > >
Rogue BGP Routes
Hi, We are having an issue with Charter Communications advertising 2 of our IP ranges. We are in the process of implementing RPKI now, but does anyone have a suggestion on how to get them to stop? We have tried contacting them via email and via and phone through numerous channels with no luck. Thanks Gary Godard *Chief Technical Officer* 308 Pine Street West Monroe, LA 71291 Office: 800-536-7035 x5201Fax: 888-471-8778 Direct: 318-884-9422 Email: g...@skyrider.net Web: www.skyrider.net LinkedIn: https://www.linkedin.com/in/gary-godard-48733920 Matt 4:19 And he saith unto them, "Follow me, and I will make you fishers of men." If you are his follower, "A Christian", where are you fishing???
