nanog mailing list archives

Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers


From: Job Snijders <job () instituut net>
Date: Tue, 26 Jun 2018 18:23:55 +0000

Dear Simon,

On Tue, Jun 26, 2018 at 12:13:26PM -0600, Simon Muyal wrote:
On the France-IX route servers, we are applying filters based on IRR
DBs. I double checked the list https://pastebin.com/raw/Jw1my9Bb and
these prefixes should be filtered if bitcanal starts announcing them.
Currently, bitcanal/AS197426 is not announcing any prefix on our route
servers:

https://lg.franceix.net/irr_found_for/RS1+RS2/ipv4?q=197426
https://lg.franceix.net/irr_notfound_for/RS1+RS2/ipv4?q=197426

I'm very happy FranceIX apply filters - however Bitcanal is known to
submit fabricated/falsified IRR information to databases like RADB and
RIPE. I've reported this multiple times over the years to IRR database
operators.

In conclusion in the case of Bitcanal, most of your filtering is useless
(and so is mine). Participants like Bitcanal dillute the value of your
route servers and the IXP as a whole.

Kind regards,

Job


Current thread: