Orange : Propagating Bogus Saudi Telecom Announcement

Mon Aug 24 20:13:40 UTC 2020

Maybe. Would be for someone at Zayo to comment on.

Looks like 39386 has been ( and still is )  announcing the NY9 prefix since
early June. ( Fix your filters, please. )

Not sure if Zayo is having an issue by which they would have started using
the route via ST all of a sudden. In any event, Orange said they're not
passing it along anymore.

On Mon, Aug 24, 2020 at 4:04 PM Richard Porter <richard at pedantictheory.com>
wrote:

> https://twitter.com/millionaire_xrp/status/1297952306357567488?s=10
>
> Related? reports of outages at Chase?
>
> On Mon, Aug 24, 2020 at 2:13 PM Tom Beecher <beecher at beecher.cc> wrote:
>
>> Saudi Telecom ( AS 39386 ) is currently announcing Equinix NY9's IX
>> prefix, and Orange is gladly sharing that for the world to see.
>>
>> Zayo : You might want to not be using that either when you're directly
>> connected to that exchange. :)
>>
>> *Router:* New York, NY
>> *Command:* show route protocol bgp table inet.0 198.32.118.0/24 terse
>> exact
>>
>>
>> inet.0: 833301 destinations, 5821043 routes (833250 active, 16 holddown, 88 hidden)
>> + = Active Route, - = Last Active, * = Both
>> A V Destination        P Prf   Metric 1   Metric 2  Next hop        AS path
>> * ? 198.32.118.0/24    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>>   unverified                                       >64.125.29.222
>>                                                     64.125.29.220
>>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>>   unverified                                       >64.125.29.222
>>                                                     64.125.29.220
>>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>>   unverified                                       >64.125.29.220
>>                                                     64.125.29.222
>>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>>   unverified                                       >64.125.29.220
>>                                                     64.125.29.222
>>   ?                    B 170        100 4294967294                  5511 39386 39386 39386 39386 I
>>   unverified                                       >64.125.29.220
>>                                                     64.125.29.222
>> {master}
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20200824/58d0a390/attachment.html>