North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Yahoo outage summary

  • From: Sam Stickland
  • Date: Tue Jul 10 07:25:37 2007

Andy Dills wrote:
On Mon, 9 Jul 2007, Cat Okita wrote:

As far as "needing a verification system", is there something deeply
problematic about filtering your customers? It's a fine example of
thinking globally and acting locally.

That's what I'm curious about...this boils down to L3 not properly filtering Hanaro.

Having recently turned up some L3 connectivity, I was happy to discover that they can use any of the routing registries as the source of their prefix filters. They told me the prefix filters are automatically constructed based on the RR of your choice...update the RR, and their filters will update that night, no need to bug them. Yay for that, wish everybody worked that way.

But...why wasn't Hanaro being filtered? If the filters are being automatically generated, I would think they would just filter all of their peers regardless of number of prefixes etc.
Handily it's possible to query Level3's filters through a whois interface, for example:

whois -h RIPE::AS25577

For some reason this doesn't work:

whois -h APNIC::AS9318

But this does, presumably this one is reading of an internal Level3 db:

whois -h AS9318

List of prefixes returned is:

Prefix list for policy AS9318 =