Re: Lazy Engineers and Viable Excuses

[william () elan net]

> --On Tuesday, August 26, 2003 9:35 AM -0400 Leo Bicknell <bicknell () ufp org> 
> wrote:
>
> > Almost everyone filters customers.  The large ISP's all have the
> > same opinion, if small to medium sized players abuse the system
I wish this was true but it is not!!!

In particular I call your attention to Qwest. Their customer in LA with
AS29809 was announcing ip block 138.252.0.0/16, which is hijacked ip block,
see details at http://www.completewhois.com/hijacked/files/138.252.0.0.txt
It took us a little time to find out who to report it to because amount
of abuse was small and all traceroutes were faked, here is part of it 
as it was several days ago:
  8  204.255.169.138 (204.255.169.138)  33.299 ms  28.885 ms  30.188 ms
  9  bur-core-01.inet.qwest.net (205.171.13.9)  35.992 ms  28.280 ms  
 10  bux-edge-01.inet.qwest.net (205.171.13.174)  32.468 ms  30.766 ms  
 11  tbr1-p012201.la2ca.ip.att.net (12.123.28.130)  40.104 ms  <-- Faked here
 12  gbr4-p20.sffca.ip.att.net (12.122.2.69)  51.680 ms  52.195 ms  50.259 
 13  gbr6-p70.sffca.ip.att.net (12.122.5.153)  62.751 ms  61.256 ms  
 14  ar2-p3110.sfcca.ip.att.net (12.123.195.81)  71.827 ms  71.376 ms  
 15  12.119.200.38 (12.119.200.38)  83.024 ms  82.612 ms  82.004 ms
 16  203.148.164.170 (203.148.164.170)  89.747 ms  92.942 ms  87.614 ms
 17  203.148.164.228 (203.148.164.228)  103.087 ms  99.536 ms  99.910 ms
 18  svoa-bkk.a-net.net.th (203.148.200.145)  1104.594 ms  1098.491 ms  
 19  138.252.0.1 (138.252.0.1)  33.634 ms  33.220 ms  32.514 ms"
And that is when "sh ip bgp" was showing:
  8001 7911 209 29809
  6395 1239 209 29809
  5650 1239 209 29809