Re: Deciding whose network block is whose?

[Bradley Reynolds <brad () b63695 student cwru edu>]

> When some random person decides to announce a subnet, what do providers
> accept as proof the person has authority to announce that subnet to the
> global Internet?  Or the other side, when some random person calls up
> complaining that someone else is announcing a subnet without authorization
> what do providers accept as proof that the announcement is invalid?
>
> For example, lets say a difficult to reach ISP on the other side of the
> planet decided to announce a subnet DRA had assigned for use by one of our
> customers.  Would major providers take my word a Hong Kong provider was
> wrong?  Would major providers accept the registration information in WHOIS
> and/or IRR the network block had been delegated to me, and to no one else.
> Would major providers accept a statement from the APNIC that the HK ISP
> had never been delegated any part of the network block?  What do you do
> when a major provider's front-line customer service personnel don't
> understand the problem, but says since the other person is a customer
> they have to believe them?  Of course, the major provider can't get a
> hold of the customer either.
>
> Do providers normally just let customers announce any network, and only
> review things after receiving complaints.  If so, how do such providers
> expect people to complain when one of their customers is causing problems.
> How many days, weeks, months is considered normal to reach a competent
> person at a major ISP that has the authority to block such a bogus
> announcement by one of their customers?  Since some (one) major provider
> has a policy of not giving trouble ticket numbers when a non-customer
> calls, how much ruckus must be caused to get their management's attention?

We only accept announcements incoming from our customers which exactly
match the addresses they have given us as originating from their AS.
This is not a very pretty solution in that it requires our
customer to contact us any time they want to revise the routes that
they are announcing, but it does provide a human check against stupid
errors (or malicious intent). 


Brad Reynolds
brad () iagnet net