AS3266: BitCanal hijack factory, courtesy of many connectivity providers

Tue Jun 26 18:50:33 UTC 2018

RPKI? BGPsec?

26.06.18 21:27, Mike Hammett пише:
> Any solution to that? Yell at the IRRs more? 
> 
> 
> 
> 
> ----- 
> Mike Hammett 
> Intelligent Computing Solutions 
> http://www.ics-il.com 
> 
> Midwest-IX 
> http://www.midwest-ix.com 
> 
> ----- Original Message -----
> 
> From: "Job Snijders" <job at instituut.net> 
> To: "Simon Muyal" <smuyal at franceix.net> 
> Cc: nanog at nanog.org 
> Sent: Tuesday, June 26, 2018 1:23:55 PM 
> Subject: Re: AS3266: BitCanal hijack factory, courtesy of many connectivity providers 
> 
> Dear Simon, 
> 
> On Tue, Jun 26, 2018 at 12:13:26PM -0600, Simon Muyal wrote: 
>> On the France-IX route servers, we are applying filters based on IRR 
>> DBs. I double checked the list https://pastebin.com/raw/Jw1my9Bb and 
>> these prefixes should be filtered if bitcanal starts announcing them. 
>> Currently, bitcanal/AS197426 is not announcing any prefix on our route 
>> servers: 
>>
>> https://lg.franceix.net/irr_found_for/RS1+RS2/ipv4?q=197426 
>> https://lg.franceix.net/irr_notfound_for/RS1+RS2/ipv4?q=197426 
> 
> I'm very happy FranceIX apply filters - however Bitcanal is known to 
> submit fabricated/falsified IRR information to databases like RADB and 
> RIPE. I've reported this multiple times over the years to IRR database 
> operators. 
> 
> In conclusion in the case of Bitcanal, most of your filtering is useless 
> (and so is mine). Participants like Bitcanal dillute the value of your 
> route servers and the IXP as a whole. 
> 
> Kind regards, 
> 
> Job 
> 
> 