Re: level3 dia egress filtering?

2014-05-13 Thread Mark Tinka
On Monday, May 12, 2014 11:58:20 PM Petter Bruland wrote: We contacted Level3 a few weeks back, and were told that they do not provide any filtering service. I've not been able to confirm this from anyone else, besides the Level3 customer service rep we spoke with. We've received such

Re: level3 dia egress filtering?

2014-05-13 Thread Blake Dunlap
I would personally look at leaving Level 3 over that kind of response. I consider it basic service to throw a 1 line acl on an interface temporarily in exceptional circumstances. Transit guys can argue if they wish, but it won't change my expectations as a customer. Eventually I'll find a carrier

Re: level3 dia egress filtering?

2014-05-13 Thread Paul S.
You can't really have your cake, and eat it too. If this is a deal breaker for anyone, getting it in writing within the contract should be the most basic of steps to undertake. Asking beforehand will also actually let you know who will and won't do this, thus avoid surprises like these

Re: level3 dia egress filtering?

2014-05-13 Thread Mark Tinka
On Tuesday, May 13, 2014 03:51:56 PM Blake Dunlap wrote: I would personally look at leaving Level 3 over that kind of response. I consider it basic service to throw a 1 line acl on an interface temporarily in exceptional circumstances. Transit guys can argue if they wish, but it won't change

RE: level3 dia egress filtering?

2014-05-12 Thread Petter Bruland
We contacted Level3 a few weeks back, and were told that they do not provide any filtering service. I've not been able to confirm this from anyone else, besides the Level3 customer service rep we spoke with. Currently looking into a DDoS protection service from Akamai. Sounds awesome what they

RE: level3 dia egress filtering?

2014-05-12 Thread Bob Evans
Are you asking a transit network to filter specific ports as an end user or as an ISP who has Level 3 as a transit provider? I haven't seen a specific port could be dropped by any networkOnly aware of BGP community string like, 3356: - black hole (discard all traffic for specific IP

Re: level3 dia egress filtering?

2014-05-12 Thread Christopher Rogers
Not specific ports, but something more like: 'deny udp any my.target.slash.25 0.0.255.255' BGP blackholing will obviously impact all traffic to a target. -chris 2014-05-12 15:20 GMT-07:00 Bob Evans b...@fiberinternetcenter.com: Are you asking a transit network to filter specific ports as an

Re: level3 dia egress filtering?

2014-05-12 Thread Bob Evans
Ahh, Yep, same thing port and/or protocol for an address range. I haven't seen that accomplished via BGP. I know ATT will do it - they want about 2K more per month for that ability. All your traffic is redirected (extra hops ) through a firewall. So, it's a basic expensive firewall service. We

Re: level3 dia egress filtering?

2014-05-12 Thread Justin M. Streiner
On Mon, 12 May 2014, Bob Evans wrote: Ahh, Yep, same thing port and/or protocol for an address range. I haven't seen that accomplished via BGP. I know ATT will do it - they want about 2K more per month for that ability. All your traffic is redirected (extra hops ) through a firewall. So, it's

Re: level3 dia egress filtering?

2014-05-12 Thread Ca By
On May 12, 2014 6:53 PM, Justin M. Streiner strei...@cluebyfour.org wrote: On Mon, 12 May 2014, Bob Evans wrote: Ahh, Yep, same thing port and/or protocol for an address range. I haven't seen that accomplished via BGP. I know ATT will do it - they want about 2K more per month for that