Another option if both you and upstream providers support it might be BGP Outbound Route Filtering (ORF). It basically sends a copy of your inbound route filter to the eBGP peer, and then the eBGP peer would only send to you the routes that pass the filter. http://tools.ietf.org/html/rfc5291 http://tools.ietf.org/html/rfc5292 Regards, Mark.