Alpha test of MAE filtering capability

Erik Sherk sherk at UU.NET
Tue Feb 4 16:11:26 UTC 1997


> i, for one didn't understand the request.  
> 
> hypothetically,  if mci enters into
> an agreement with MAE E/W to allow a list of mac header addresses
> to have access to our port on a gigaswitch, what reason is there
> for MAE E/W to share that list with anyone else?  if there is no
> peering arrangement between two networks you could assume that the
> the mac header of one network's interface isn't on the list, right?
> 
> Jeff Young
> young at mci.net

Jeff,
	Initially, I thought that you were right, but on second thought
I see a problem. If a peer of yours is giving someone third party routes,
this filtering will blackhole traffic. While your peer should not be
giving these routes with your router as the next hop, it will happen
and we need a way to debug it.

Erik

 
> > 
> > I din't see an answer on this one....
> > 
> > >----------
> > >From: 	Andrew Partan[SMTP:asp at partan.com]
> > >Sent: 	Saturday, February 01, 1997 10:55 PM
> > >To: 	feldman at mfst.com
> > >Cc: 	nanog at merit.edu
> > >Subject: 	Re: Alpha test of MAE filtering capability
> > >
> > >> In response to requests from several customers for a filtering solution
> > >> at MAE EAST and MAE WEST, MFS WorldCom is developing an automated
> > >> system to enable ISPs to control traffic destined for their own routers
> > >> and networks.
> > >
> > >Are you going to post the list of permitted/denied addresses?
> > >
> > >Operationally it would be *very* useful to know what addresses are
> > >blocked.
> > >	--asp at partan.com (Andrew Partan)
> > >
> 





More information about the NANOG mailing list