RE: Core Internet Vulnerable - News at 11:00

["Alerta Redsegura" <alerta () redsegura com>]

If I recall well, a BGP speaker only sends/receives updates to route tables,
since the whole routing table is stored when the connection is initiated.
Therefore, closing a connection would only prevent further route updates
between the two attacked devices.

I don´t understand why this is considered as a "serious threat", or does it
have to do with the "de-sync" that would occur within the AS?


Thanks for any lights.

Regards,




Iñigo Koch
Red Segura

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html