nanog mailing list archives
Re: Prefix hijacking, how to prevent and fix currently
From: Christopher Morrow <morrowc.lists () gmail com>
Date: Tue, 2 Sep 2014 12:51:14 -0400
On Tue, Sep 2, 2014 at 12:08 PM, Job Snijders <job () instituut net> wrote:
On Tue, Sep 02, 2014 at 11:53:15AM -0400, Christopher Morrow wrote:On Tue, Sep 2, 2014 at 11:25 AM, Job Snijders <job () instituut net> wrote:What is the real damage of hijacking a prefix which is not in use?'not in use' ... where? What if the 'owner' of the block has the block only routed 'internally' (either behind gateways/firewalls/airgaps or just inside their ASN) The expectation of the 'owner' is that they are using the space and it's not routed 'somewhere else', right?Interesting point. A commmon approach is to announce such internal prefixes and blackhole packets to and from at a border.
there are lots of belts/suspenders ways to fix this, yes.
Alternatively they could set "AS 0" in the ROA of such 'not globally used' prefixes. I don't think loose mode should apply to 'AS 0' ROAs.
ok
Current thread:
- Re: Prefix hijacking, how to prevent and fix currently Tarun Dua (Sep 01)
- Re: Prefix hijacking, how to prevent and fix currently Anurag Bhatia (Sep 01)
- Re: Prefix hijacking, how to prevent and fix currently Saku Ytti (Sep 01)
- <Possible follow-ups>
- Re: Prefix hijacking, how to prevent and fix currently Sriram, Kotikalapudi (Sep 01)
- Re: Prefix hijacking, how to prevent and fix currently Saku Ytti (Sep 01)
- RE: Prefix hijacking, how to prevent and fix currently Sriram, Kotikalapudi (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Job Snijders (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Christopher Morrow (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Job Snijders (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Christopher Morrow (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Job Snijders (Sep 02)
- Re: Prefix hijacking, how to prevent and fix currently Ca By (Sep 03)
- Re: Prefix hijacking, how to prevent and fix currently Andree Toonk (Sep 03)
- Re: Prefix hijacking, how to prevent and fix currently Doug Madory (Sep 05)