Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers

[Max Tulyev <maxtul () netassist ua>]

RPKI? BGPsec?

26.06.18 21:27, Mike Hammett пише:
> Any solution to that? Yell at the IRRs more? 
>
>
>
>
> ----- 
> Mike Hammett 
> Intelligent Computing Solutions 
> http://www.ics-il.com 
>
> Midwest-IX 
> http://www.midwest-ix.com 
>
> ----- Original Message -----
>
> From: "Job Snijders" <job () instituut net> 
> To: "Simon Muyal" <smuyal () franceix net> 
> Cc: nanog () nanog org 
> Sent: Tuesday, June 26, 2018 1:23:55 PM 
> Subject: Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers 
>
> Dear Simon, 
>
> On Tue, Jun 26, 2018 at 12:13:26PM -0600, Simon Muyal wrote: 
> > On the France-IX route servers, we are applying filters based on IRR 
> > DBs. I double checked the list https://pastebin.com/raw/Jw1my9Bb and 
> > these prefixes should be filtered if bitcanal starts announcing them. 
> > Currently, bitcanal/AS197426 is not announcing any prefix on our route 
> > servers: 
> >
> > https://lg.franceix.net/irr_found_for/RS1+RS2/ipv4?q=197426 
> > https://lg.franceix.net/irr_notfound_for/RS1+RS2/ipv4?q=197426 
>
> I'm very happy FranceIX apply filters - however Bitcanal is known to 
> submit fabricated/falsified IRR information to databases like RADB and 
> RIPE. I've reported this multiple times over the years to IRR database 
> operators. 
>
> In conclusion in the case of Bitcanal, most of your filtering is useless 
> (and so is mine). Participants like Bitcanal dillute the value of your 
> route servers and the IXP as a whole. 
>
> Kind regards, 
>
> Job