Workaround to recent Juniper Announcement?

2010-01-07 Thread Justin Credible
Hi There, We have OpenBSD routers running OpenBGPD at the edge of our network and behind that we use Juniper Firewalls running JunOS which need to be patched due to: http://ptresearch.blogspot.com/2010/01/juniper-junos-remote-kernel-crash-flaw.html Since we have so many Junipers it will take a

Re: Workaround to recent Juniper Announcement?

2010-01-07 Thread Justin Credible
On Thu, Jan 7, 2010 at 12:23 PM, James Records james.reco...@gmail.com wrote: It looks like their (Junipers) policy is to only tell customers with support contracts what the specific option is that causes this. Only big customers apparently - Some people had several hours advance notice, some

Re: OpenBGP default route selection process

2009-05-24 Thread Justin Credible
On Sat, May 23, 2009 at 8:55 PM, Justin Credible mista.justin.credi...@gmail.com wrote: On Sat, May 23, 2009 at 6:35 PM, Justin Credible mista.justin.credi...@gmail.com wrote: Hi there, I am running OpenBSD 4.4 with OpenBGPD and multiple peers. For some reason the device is selecting

Re: OpenBGP default route selection process

2009-05-24 Thread Justin Credible
On Sun, May 24, 2009 at 12:22 PM, Claudio Jeker cje...@diehard.n-r-g.com wrote: On Sun, May 24, 2009 at 11:54:37AM -0600, Justin Credible wrote: snip snip I figured this one out. This particular problem was caused because i had set: nexthop qualify via bgp Why did you set this? Just

Re: BGP responding with wrong IP address.

2009-05-23 Thread Justin Credible
On Sat, May 23, 2009 at 4:08 AM, Stuart Henderson s...@spacehopper.orgwrote: On 2009-05-22, Justin Credible mista.justin.credi...@gmail.com wrote: I am running OpenBGPd on an OpenBSD 4.4 router. Some times when traffic goes over one peer and finally gets to our router, the last hop

Re: BGP responding with wrong IP address.

2009-05-23 Thread Justin Credible
I tried adding reply-to rules in my pf.conf so that traffic that comes in on one interface will go out the same interface but that doesn't seem to work either, since the reply from the wrong address happens before or during the state that stateful connections are being established. I should

Re: BGP responding with wrong IP address.

2009-05-23 Thread Justin Credible
On Sat, May 23, 2009 at 3:25 PM, Stuart Henderson s...@spacehopper.orgwrote: On 2009/05/23 13:57, Justin Credible wrote: On Sat, May 23, 2009 at 4:08 AM, Stuart Henderson s...@spacehopper.org wrote: On 2009-05-22, Justin Credible mista.justin.credi...@gmail.com wrote: I am running

OpenBGP default route selection process

2009-05-23 Thread Justin Credible
Hi there, I am running OpenBSD 4.4 with OpenBGPD and multiple peers. For some reason the device is selecting Level3 as the default route for absolutely everything which is not statically set. On Level3 config i have set: set localpref 100 softreconfig in yes max-prefix 100 restart 300 For the

Re: OpenBGP default route selection process

2009-05-23 Thread Justin Credible
On Sat, May 23, 2009 at 6:35 PM, Justin Credible mista.justin.credi...@gmail.com wrote: Hi there, I am running OpenBSD 4.4 with OpenBGPD and multiple peers. For some reason the device is selecting Level3 as the default route for absolutely everything which is not statically set. On Level3

BGP responding with wrong IP address.

2009-05-22 Thread Justin Credible
Hi there, I am running OpenBGPd on an OpenBSD 4.4 router. Some times when traffic goes over one peer and finally gets to our router, the last hop will respond as a different peer. For example: Level3 IP 10.0.0.1 Global Crossing IP 192.168.0.1 Traffic traverses Global crossing all the way, last