nanog mailing list archives
Re: Prefix hijacking by AS20115
From: Martin Hannigan <hannigan () gmail com>
Date: Mon, 28 Sep 2015 23:19:29 -0400
Is this related to 104.73.161.0/24? That's ours. :-) We'll take a look and get back to you. Thanks for caring! Best, Marty
On Sep 28, 2015, at 23:08, Seth Mattinen <sethm () rollernet us> wrote:On 9/28/15 18:30, William Herrin wrote:On Mon, Sep 28, 2015 at 9:01 PM, Seth Mattinen <sethm () rollernet us> wrote: I've got a problem where AS20115 continues to announce prefixes after BGP neighbors were shutdown. They claim it's a wedged BGP process but aren't in any hurry to fix it outside of a maintenance window.If they weren't lying to you, they'd fix it now. That's not the kind of problem that waits. Thing is: they lied to you. Long ago they "helpfully" programmed their router to announce your route regardless of whether you sent a route to them. They want to wait for a maintenance window to remove that configuration.I'm at a loss of what else I can do. They admit the problem but won't take action saying it needs to wait for a maintenance window. Am I out of line insisting that's an unacceptable response to a problem that results in prefix/traffic hijacking?Try dropping the link entirely. If they still announce your addresses, bring it back up but report it as emergency down, escalate, and call back every 10 minutes until the junior tech understands that it's time to call and wake up the guy who makes the decision to fix it now.I'm at the tail end here almost 8 hours later since the hijacking started. Their NOC is just blowing me off now and they're happy to continue the hijacking until it's convenient for them to have a maintenance window. And that's apparently the final decision. ~Seth
Current thread:
- Prefix hijacking by AS20115 Seth Mattinen (Sep 28)
- Re: Prefix hijacking by AS20115 William Herrin (Sep 28)
- Re: Prefix hijacking by AS20115 Seth Mattinen (Sep 28)
- Re: Prefix hijacking by AS20115 Josh Luthman (Sep 28)
- Re: Prefix hijacking by AS20115 Bob Evans (Sep 28)
- Re: Prefix hijacking by AS20115 Christopher Morrow (Sep 28)
- Re: Prefix hijacking by AS20115 Bob Evans (Sep 28)
- Re: Prefix hijacking by AS20115 Christopher Morrow (Sep 28)
- Re: Prefix hijacking by AS20115 Seth Mattinen (Sep 28)
- Re: Prefix hijacking by AS20115 Sandra Murphy (Sep 29)
- Re: Prefix hijacking by AS20115 William Herrin (Sep 28)
- Re: Prefix hijacking by AS20115 Martin Hannigan (Sep 28)
- Re: Prefix hijacking by AS20115 Seth Mattinen (Sep 28)
- Re: Prefix hijacking by AS20115 Rampley Jr, Jim F (Sep 29)
- Re: Prefix hijacking by AS20115 Mark Tinka (Sep 29)
- Re: Prefix hijacking by AS20115 Seth Mattinen (Sep 29)
- Re: Prefix hijacking by AS20115 Rampley Jr, Jim F (Sep 29)
- Re: Prefix hijacking by AS20115 Seth Mattinen (Sep 29)
- Re: Prefix hijacking by AS20115 N M (Sep 29)
- Re: Prefix hijacking by AS20115 Christopher Morrow (Sep 29)
- PCH.net questions and thoughts - Re: Prefix hijacking by AS20115 Bob Evans (Sep 29)
- Re: PCH.net questions and thoughts - Re: Prefix hijacking by AS20115 Job Snijders (Sep 29)