North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: AS8584 taking over the internet

  • From: Mr. Dana Hudes
  • Date: Tue Apr 07 15:16:45 1998

It is such accidents that reinforce the notion of per-prefix
filtering.
Of course if one changes one's IRR/RIPE DB/RADB entries to
deliberately
announce the world there could still be a problem with
auto-generated
accept policy. The solution to *that* is quality assurance of the
database, an ongoing issue in RIPE DB WG at least.

Even then how does one prevent someone coding 'ANY' for their
announce policy when they should not? In the old NFSNET days
human inspection of IRR entries assured quality but that's not
practical anymore at a central registry. 

sure, one has accept policy but other than excluding RFC1918 and
your own address space and default you have no practical choice
but to reference the other guy's aut-num object and the
associated routes.


Dana Hudes
Graphnet


Bernhard Kroenung wrote:
> 
> At the Moment AS4000 / AS8584 is announcing the whole internet :-(
> 
> For programming the cuise-missiles or SS20's - here is the data :
> 
> aut-num:     AS8584
> descr:       Barak AS
> as-in:       from AS4000 10 accept ANY
> as-in:       from AS5585 100 accept ANY
> as-out:      to AS4000 announce AS8584
> as-out:      to AS5585 announce AS8584
> default:     AS4000 10
> admin-c:     AS261-RIPE
> tech-c:      AS261-RIPE
> mnt-by:      AS8584-MNT
> changed:     [email protected] 971126
> source:      RIPE
> 
> person:      Amir Shor
> address:     Barak I.T.C.
> address:     15 Ha-Melacaha St.
> address:     Rosh Ha-Ayin 48091, Israel
> phone:       +972 3 9001082
> fax-no:      +972 3 9001090
> e-mail:      [email protected]
> nic-hdl:     AS261-RIPE
> changed:     [email protected] 971112
> source:      RIPE
> 
>   Ciao
>     Bernhard
> --
> Bernhard Kroenung, Bahnhofstr 8, 36157 Ebersburg/Rhoen, Germany +49 6656 910101
> @work : [email protected]                              Work: +49 661 9011777
> @home : [email protected]       @school : [email protected]