Re: Any resources outline BGP Attacks

[Yang Lee <ylee () net50 com>]

There are some in cco.cisco.com. Sorry can find the link though. I
remember some points against BGP attacks are
focusing on:

1. turn on BGP authentication.
2. filtering BGP traffic based on source address.
3. HA routering network.
4. possible rate-limiting BGP traffic.

Still it's possible to spoof attact your gateway. In this case, an
actively monitoring scripts from your NMS may be helpful building a filter
in the fly.

Hope this is helpful. Good luck!


############################################
#Yang Lee                                  #
#Sr. Internet Security Engineer, Net2phone #
#Tel. 973-412-3556                         #
#Email. ylee () net2phone com                 #
#                                          #
#                                          #
#Disclaimer:                               #
#My opinion here does not represent my     #
#employer in any way                       #
#                                          #
############################################

On Sun, 26 Aug 2001, Tony Miedaner wrote:

> Hi Folks,
>
> Does anybody know of any papers, test or other resources about attacks
> against BGP in large scale networks?
>
> TIA
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://list.nfr.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards