Prefix hijacking, how to prevent and fix currently

Karsten Thomann karsten_thomann at linfre.de
Fri Aug 29 09:43:39 UTC 2014


Am 29.08.2014 11:39, schrieb Randy Bush:
>>>> Loose mode would drop failing routes, iff there is covering (i.e. less
>>>> specific is ok) route already in RIB.
>>> isn't that exactly the hole punching attack?
>> No, as the the more specific route is signed and is preferred (longest
>> match routing) against the less specific hijacked route
> clearly i am missing something.  got a write-up?
>
> randy
sorry my mistake, you're right


More information about the NANOG mailing list