Re: YouTube IP Hijacking

["Paul Ferguson" <fergdawg () netzero net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Will Hargrave <will () harg net> wrote:

> Sargun Dhillon wrote:
>
> > So, it seems that youtube's ip block has been hijacked by a more
> > specific prefix being advertised. This is a case of IP hijacking, not
> > case of DNS poisoning, youtube engineers doing something stupid, etc.
> > For people that don't know. The router will try to get the most specific
> > prefix. This is by design, not by accident. 
>
> You are making the assumption of malice when the more likely cause is 
one of accident on the part of probably stressed NOC staff at 17557.
> They probably have that /24 going to a gateway walled garden box which 
replies with a site saying 'we have banned this', and that /24 route is 
leaking outside of their AS via PCCW due to dodgy filters/communities.
>

I guess you guys missed the news that Pakistan has "blocked" YouTube
due to [mumble]:

http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2008/02/24/wpak324.xml


AS      Name
AS17557 PKTELECOM-AS-AP Pakistan Telecom

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFHwdp8q1pz9mNUZTMRAt4kAKDxryR8tLk3ejGe0p2aBAvvIcanAwCg4JkC
a79WB3j06mIwUPdxUI+xweA=
=zTdh
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/