AS8584 taking over the internet

Mr. Dana Hudes dhudes at graphnet.com
Tue Apr 7 18:53:43 UTC 1998


It is such accidents that reinforce the notion of per-prefix
filtering.
Of course if one changes one's IRR/RIPE DB/RADB entries to
deliberately
announce the world there could still be a problem with
auto-generated
accept policy. The solution to *that* is quality assurance of the
database, an ongoing issue in RIPE DB WG at least.

Even then how does one prevent someone coding 'ANY' for their
announce policy when they should not? In the old NFSNET days
human inspection of IRR entries assured quality but that's not
practical anymore at a central registry. 

sure, one has accept policy but other than excluding RFC1918 and
your own address space and default you have no practical choice
but to reference the other guy's aut-num object and the
associated routes.


Dana Hudes
Graphnet


Bernhard Kroenung wrote:
> 
> At the Moment AS4000 / AS8584 is announcing the whole internet :-(
> 
> For programming the cuise-missiles or SS20's - here is the data :
> 
> aut-num:     AS8584
> descr:       Barak AS
> as-in:       from AS4000 10 accept ANY
> as-in:       from AS5585 100 accept ANY
> as-out:      to AS4000 announce AS8584
> as-out:      to AS5585 announce AS8584
> default:     AS4000 10
> admin-c:     AS261-RIPE
> tech-c:      AS261-RIPE
> mnt-by:      AS8584-MNT
> changed:     ashor at barakitc.co.il 971126
> source:      RIPE
> 
> person:      Amir Shor
> address:     Barak I.T.C.
> address:     15 Ha-Melacaha St.
> address:     Rosh Ha-Ayin 48091, Israel
> phone:       +972 3 9001082
> fax-no:      +972 3 9001090
> e-mail:      ashor at barakitc.co.il
> nic-hdl:     AS261-RIPE
> changed:     ashor at barakitc.co.il 971112
> source:      RIPE
> 
>   Ciao
>     Bernhard
> --
> Bernhard Kroenung, Bahnhofstr 8, 36157 Ebersburg/Rhoen, Germany +49 6656 910101
> @work : bernhard at kroenung.de                              Work: +49 661 9011777
> @home : horke at Rhoen.De       @school : Bernhard.Kroenung at Informatik.FH-Fulda.De



More information about the NANOG mailing list