nanog mailing list archives

Re: Kenyan Route Hijack


From: "Glen Kent" <glen.kent () gmail com>
Date: Sun, 16 Mar 2008 11:37:36 +0530


Paul,

 Also: I have seen instances where a static route points to a next
 hop that (inadvertently) may be "redistribute-static" injected into
 BGP. This happens occasionally due to ad hoc configurations, back-
 hole null routing, etc.

And why would an ISP locally try to blackhole traffic bound to some
other legitimate address space? Wouldnt this result in this service
provider's customers to lose connectivity to whatever websites fall
behind the IP address block in question? Or is that the intention?

If its done intentionally then it would only make sense if theres a
DOS attack coming from that address block, or if theres something
"blasphemous" put up there. If none of these, then why locally
blackhole traffic?

Thanks,
Glen


Current thread: