[AusNOG] Hostile act by an Australian ISP

Skeeve Stevens Skeeve at eintellego.net
Fri Nov 12 14:59:29 EST 2010


Sorry all - was in the car in transit.

Yes, the space being announce does indeed belong to my customer and is PI. All details on APNIC records attest to this.

At the moment it looks like they are not announcing it into Pipe, but their upstream PACNET is... which btw, I do not blame Pacnet for, they are just doing what they're customer asked.

Someone asked if the management of the ISP knew... yes they do, and likely asked for it to be done.

The provider was asked this morning to stop announcing the ranges and they directly refused.

The annoying thing was the provider disconnected my customer without notice - before or after - at 5pm, and then refused to take any calls in relation to it.... but I think discussions are now happening and we will see what happens in the next hour..... 22 hours of downtime so far.

Someone asked to name and shame... well, if it comes to that I will, but only if needed.

In the billing dispute, there are two sides to every story, and I am not in any way suggesting my customer is without fault, or the provider is... I am just dealing with a route poisoning situation that no matter what the business issues are - this is an action that NO provider anywhere should do to interfere with routes on the internet.

...Skeeve

--
Skeeve Stevens, CEO
eintellego Pty Ltd - The Networking Specialists
skeeve at eintellego.net / www.eintellego.net
Phone: 1300 753 383, Fax: (+612) 8572 9954
Cell +61 (0)414 753 383 / skype://skeeve
www.linkedin.com/in/skeeve ; facebook.com/eintellego
--
eintellego - The Experts that the Experts call
- Juniper - HP Networking - Cisco - Brocade - Arista - Allied Telesis

From: Matthew Moyle-Croft [mailto:mmc at internode.com.au]
Sent: Friday, 12 November 2010 2:48 PM
To: Skeeve Stevens
Cc: ausnog List
Subject: Re: [AusNOG] Hostile act by an Australian ISP

Yeah,
Def. more specifics if you can.     I'm assuming the space is definitely PI space?

MMC

On 12/11/2010, at 1:39 PM, James Paussa wrote:


Depending on the size of the subnets you could always try advertising more
specific routes than the hostile ISP, of course if they are on this list
they might cotton onto it. ;)

-James.

On Fri, November 12, 2010 12:17 pm, Skeeve Stevens wrote:

Ok briefly,

A customer of ours is multi-homed.

There has been a breakdown in the relationship with one of their suppliers
due to a billing dispute and their interconnection has been shut down.

This I do not have a problem with - its up to them to resolve it.

But, due to my customer having another upstream, this supplier is
announcing some of my customers ranges into their upstream (Pacnet) and
Pipe peering - essentially poisoning their routing and damage their
ability to function.

The supplier never previously announced the ranges as they were announced
by my customers routers, so they've maliciously started announcing them.

This, in my opinion is equivalent to denial-of-service due to a commercial
dispute.

My next steps are to contact their upstreams and inform them the provider
does not have the permission to announce these ranges and to please stop
them announcing them.  I will then contact Pipe to have them do the same.

Anyone have any other ideas?

...Skeeve
--
>From the Blackberry Bold 9700 of Skeeve Stevens
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog



_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

--
Matthew Moyle-Croft
Peering Manager and Team Lead - Commercial and DSLAMs
Internode /Agile
Level 5, 150 Grenfell Street, Adelaide, SA 5000 Australia
Email: mmc at internode.com.au<mailto:mmc at internode.com.au>    Web: http://www.on.net<http://www.on.net/>
Direct: +61-8-8228-2909                      Mobile: +61-419-900-366
Reception: +61-8-8228-2999        Fax: +61-8-8235-6909

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20101112/23642f57/attachment.html>


More information about the AusNOG mailing list