Re: AS hijacking (Philosophy, rants, GeoMind)

Mike, >As our canned Email stated, AS2 (and many low digit AS') get hijacked and >often go on to hijack someone's prefix. AS2 (proper) is rarely changed and >the chances of an actual prefix hijack from it is extremely low. > >So as I've asked our peers, I'll ask here: What is expected of us to be

Re: AS hijacking (Philosophy, rants, GeoMind)

Thanks Bill,     As our canned Email stated, AS2 (and many low digit AS') get hijacked and often go on to hijack someone's prefix.  AS2 (proper) is rarely changed and the chances of an actual prefix hijack from it is extremely low. So as I've asked our peers, I'll ask here: What is expected of

Re: AS hijacking (Philosophy, rants, GeoMind)

On Fri, May 29, 2020 at 8:40 AM Justin Wilson (Lists) wrote: > Here is where the philosophy comes into play. The very terse e-mail we > received back was basically “As2 gets hijacked a lot and it’s not our > problem”. So my question for the NANOG folks. At what point do you say “it’s > not yo

Re: AS hijacking (Philosophy, rants, GeoMind)

On Fri, 29 May 2020, Justin Wilson (Lists) wrote: One of the companies I work for recently had an issue with AS 2 (University of Delaware) hijacking a prefix. Sounds like a misconfigured prepend, someone thinking the value to provide is the number of prepends instead of the ASN to prepend.

Re: [EXT] AS hijacking (Philosophy, rants, GeoMind)

are you sure it was really udel? and not someone pretending to be udel from a random IX peering? On Fri, May 29, 2020 at 12:03 PM Justin Wilson (Lists) wrote: > > I will probably just get another link to https://isbgpsafeyet.com/ like I did > in the first e-mail. LOL > > > Justin Wilson > j...@m

Re: AS hijacking (Philosophy, rants, GeoMind)

Thus spake Justin Wilson (Lists) (li...@mtin.net) on Fri, May 29, 2020 at 11:39:46AM -0400: > One of the companies I work for recently had an issue with AS 2 (University > of Delaware) hijacking a prefix. Due to Origin AS, good upstreams, and the > like this has not really affected the traffic

Re: [EXT] AS hijacking (Philosophy, rants, GeoMind)

I will probably just get another link to https://isbgpsafeyet.com/ like I did in the first e-mail. LOL Justin Wilson j...@mtin.net — https://j2sw.com - All things jsw (AS209109) https://blog.j2sw.com - Podcast and Blog > On May 29, 2020, at 11:57 AM, Chuck Anderson

Re: [EXT] AS hijacking (Philosophy, rants, GeoMind)

Go back to them and tell them that a hijacked prefix is different from a hijacked AS. On Fri, May 29, 2020 at 11:39:46AM -0400, Justin Wilson (Lists) wrote: > One of the companies I work for recently had an issue with AS 2 (University > of Delaware) hijacking a prefix. Due to Origin AS, good up

AS hijacking (Philosophy, rants, GeoMind)

One of the companies I work for recently had an issue with AS 2 (University of Delaware) hijacking a prefix. Due to Origin AS, good upstreams, and the like this has not really affected the traffic to the legit blocks. However, GeoMind picked this up almost immediately it seems. The IP blocks