nanog mailing list archives

Re: Prefix hijacking, how to prevent and fix currently


From: Karsten Thomann <karsten_thomann () linfre de>
Date: Fri, 29 Aug 2014 11:34:20 +0200

Am 29.08.2014 11:25, schrieb Randy Bush:
Loose mode would drop failing routes, iff there is covering (i.e. less
specific is ok) route already in RIB.
isn't that exactly the hole punching attack?

randy
No, as the the more specific route is signed and is preferred (longest match routing) against the less specific hijacked route


Current thread: