Kenyan Route Hijack

Sun Mar 16 06:07:36 UTC 2008

Paul,

>  Also: I have seen instances where a static route points to a next
>  hop that (inadvertently) may be "redistribute-static" injected into
>  BGP. This happens occasionally due to ad hoc configurations, back-
>  hole null routing, etc.

And why would an ISP locally try to blackhole traffic bound to some
other legitimate address space? Wouldnt this result in this service
provider's customers to lose connectivity to whatever websites fall
behind the IP address block in question? Or is that the intention?

If its done intentionally then it would only make sense if theres a
DOS attack coming from that address block, or if theres something
"blasphemous" put up there. If none of these, then why locally
blackhole traffic?

Thanks,
Glen