On 25/03/2019 09:17, Sean Donelan wrote: > Its always a bad idea to do packet filtering at your bgp border. Wild assertion. Why? DoS mitigation, iACLs, BGP security... I can think of lots of very sensible reasons. -- Tom