<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
No, we're different to the BGP police mob.<br>
<br>
MMC<br>
<br>
Curtis Bayne wrote:
<blockquote
cite="mid:C60E87D234D29D42B3FCB8B7140AEFEDB2BE9DDE44@vsvr1.dominium.bne.dominium.com.au"
type="cite">
<pre wrap="">Are these the same routing police that get narky when you deaggregate for TE? ;)
Curtis
________________________________________
From: <a class="moz-txt-link-abbreviated" href="mailto:ausnog-bounces@ausnog.net">ausnog-bounces@ausnog.net</a> [<a class="moz-txt-link-abbreviated" href="mailto:ausnog-bounces@ausnog.net">ausnog-bounces@ausnog.net</a>] On Behalf Of James Spenceley [<a class="moz-txt-link-abbreviated" href="mailto:james@vocus.com.au">james@vocus.com.au</a>]
Sent: Thursday, 19 June 2008 2:19 PM
To: Phillip Grasso
Cc: <a class="moz-txt-link-abbreviated" href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a>; Sean K. Finn
Subject: Re: [AusNOG] UDP Flooding Issues
expect a lot of phone calls and email from the routing police, people
tend to get *really* upset when you do this.
--
James
On 19/06/2008, at 1:23 PM, Phillip Grasso wrote:
</pre>
<blockquote type="cite">
<pre wrap="">well if it's an insignificant ISP and you wanted to do some
*extremely* dodgy, then via the return path advertise their ASN
(prepend the offending AN number) in your announcements. this will
force their routers to drop your routes as it should be a bgp loop
prevention mechanism. There are lots of things that might stop this
from happening, including route filters on in the path inbetween.
Otherwise the simplier method is to contact them or your isp to filter
to traffic in question.
2008/6/19 Sean K. Finn <a class="moz-txt-link-rfc2396E" href="mailto:Sean.Finn@ozservers.com.au"><Sean.Finn@ozservers.com.au></a>:
</pre>
<blockquote type="cite">
<pre wrap="">Hi All,
Does anyone know any techniqiues or ways to block BGP adverts to
third party
AS's, or a similar method for dropping routes *to* our AS from a
distant,
non directly connected AS ?
For example, is there a way to inject or craft maybe a network
unreachable
message or something that we can send to the offending A.S. to
remove their
routing information for *our* network / AS / IP ranges?
My scenario is that I'm trying to block UDP floods to our network,
and I'm
sure many of you have had experience with this. Im not looking for
a total
solution, although If you have any recommendations , that would be
great.
What I'm really after is just once peice of the puzzle to see if we
can
selectively choose which remote networks we are visible, as a
direct first
step to stopping attacks until a human can intervene.
Cheers,
Sean.
________________________________
Oz Servers
e: <a class="moz-txt-link-abbreviated" href="mailto:sean.finn@ozservers.com.au">sean.finn@ozservers.com.au</a>
w: <a class="moz-txt-link-freetext" href="http://www.ozservers.com.au">http://www.ozservers.com.au</a>
p: 1300 13 89 69
/
________________________________
_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@ausnog.net">AusNOG@ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://www.ausnog.net/mailman/listinfo/ausnog">http://www.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@ausnog.net">AusNOG@ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://www.ausnog.net/mailman/listinfo/ausnog">http://www.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<pre wrap=""><!---->
CEO
Vocus Group Limited
Level 2, Vocus House
189 Miller Street
North Sydney, NSW 2060
(m) +61 407 496 866
(w) +61 2 9959 3913
_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@ausnog.net">AusNOG@ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://www.ausnog.net/mailman/listinfo/ausnog">http://www.ausnog.net/mailman/listinfo/ausnog</a>
_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@ausnog.net">AusNOG@ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://www.ausnog.net/mailman/listinfo/ausnog">http://www.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Matthew Moyle-Croft Internode/Agile Peering and Core Networks
Level 4, 150 Grenfell Street, Adelaide, SA 5000 Australia
Email: <a class="moz-txt-link-abbreviated" href="mailto:mmc@internode.com.au">mmc@internode.com.au</a> Web: <a class="moz-txt-link-freetext" href="http://www.on.net">http://www.on.net</a>
Direct: +61-8-8228-2909 Mobile: +61-419-900-366
Reception: +61-8-8228-2999 Fax: +61-8-8235-6909</pre>
</body>
</html>