Re: [nanog] BGP routes by country

2019-09-26 Thread Töma Gavrichenkov
Peace, On Fri, Sep 27, 2019, 1:07 AM Michel Py wrote: > A while ago, I tried to block China. The attack profile lowered a little > bit, but I did not feel my network was safer. Looks kind of futile to me. > The bots are everywhere, blocking entire countries does not reduce the > risk much. >

RE: [nanog] BGP routes by country

2019-09-26 Thread Michel Py
> Christopher Morrow wrote : > Maybe asking from the get-go: "What are you trying to do?" Indeed. > because the question asked is fraught with peril and disaster... Allowing only US and Canada will be be a manual whitelist nightmare and will likely result in some unreachability. A while ago,

Re: [nanog] BGP routes by country

2019-09-26 Thread Christopher Morrow
On Thu, Sep 26, 2019 at 4:48 PM Chris Knipe wrote: > > On Thu, Sep 26, 2019 at 9:53 PM Christopher Morrow > wrote: >> >> Maybe asking from the get-go: >> "What are you trying to do?" >> >> because the question asked is fraught with peril and disaster... > > > Why? When you have a serious

Re: [nanog] BGP routes by country

2019-09-26 Thread Chris Knipe
On Thu, Sep 26, 2019 at 9:53 PM Christopher Morrow wrote: > Maybe asking from the get-go: > "What are you trying to do?" > > because the question asked is fraught with peril and disaster... > Why? When you have a serious problem with a specific ASN, it's not unreasonable to drop traffic to

Re: [nanog] BGP routes by country

2019-09-26 Thread Christopher Morrow
Maybe asking from the get-go: "What are you trying to do?" because the question asked is fraught with peril and disaster... On Thu, Sep 26, 2019 at 3:32 PM Michel Py wrote: > > > Chris Phillips wrote : > > Is anyone offering a service providing BGP routes by country? I'm not > > looking to

RE: [nanog] BGP routes by country

2019-09-26 Thread Michel Py
> Chris Phillips wrote : > Is anyone offering a service providing BGP routes by country? I'm not > looking to buy transit, but rather build policies based on the routes > received to allow traffic from certain countries, or disallow traffic from > others. Kind of like the the CYMRU bogons