nanog mailing list archives
Re: YouTube IP Hijacking
From: Will Hargrave <will () harg net>
Date: Sun, 24 Feb 2008 20:38:34 +0000
Sargun Dhillon wrote:
So, it seems that youtube's ip block has been hijacked by a more specific prefix being advertised. This is a case of IP hijacking, not case of DNS poisoning, youtube engineers doing something stupid, etc. For people that don't know. The router will try to get the most specificprefix. This is by design, not by accident.
You are making the assumption of malice when the more likely cause is one of accident on the part of probably stressed NOC staff at 17557.
They probably have that /24 going to a gateway walled garden box which replies with a site saying 'we have banned this', and that /24 route is leaking outside of their AS via PCCW due to dodgy filters/communities.
Will
Current thread:
- YouTube IP Hijacking Sargun Dhillon (Feb 24)
- Re: YouTube IP Hijacking Will Hargrave (Feb 24)
- RE: YouTube IP Hijacking Tomas L. Byrnes (Feb 24)
- Re: YouTube IP Hijacking Neil Fenemor (Feb 24)
- RE: YouTube IP Hijacking Tomas L. Byrnes (Feb 24)
- Re: YouTube IP Hijacking Will Hargrave (Feb 24)
- Re: YouTube IP Hijacking Martin Hannigan (Feb 24)
- Re: YouTube IP Hijacking Simon Lockhart (Feb 24)
- Re: YouTube IP Hijacking Jim Mercer (Feb 25)
- Re: YouTube IP Hijacking Alexander Harrowell (Feb 25)
- Re: YouTube IP Hijacking Jim Mercer (Feb 25)
- RE: YouTube IP Hijacking Tomas L. Byrnes (Feb 24)
- Re: YouTube IP Hijacking Will Hargrave (Feb 24)
- RE: YouTube IP Hijacking John van Oppen (Feb 24)