[117169] in North American Network Operators' Group
Re: BGP Hijack by AT&T... was: Need Help Getting IP Unblocked by AT&T
daemon@ATHENA.MIT.EDU (Brian Raaen)
Thu Sep 3 10:47:26 2009
Date: Thu, 03 Sep 2009 10:46:52 -0400
From: Brian Raaen <braaen@zcorum.com>
To: dhetzel@gmail.com, nanog@nanog.org
In-Reply-To: <7db2dcf90909030745n50a57749gd6da641e8045e494@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This is a multi-part message in MIME format.
--------------060903050904080303040907
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
No is just seems to die in their core network.
Dorn Hetzel wrote:
> If you traceroute from someplace that sees the announcement from ATT,
> does it actually go anywhere beyond the core in ATT (as if they are
> sending it to any customer circuit of their) ?
>
> On Thu, Sep 3, 2009 at 10:23 AM, Brian Raaen <braaen@zcorum.com
> <mailto:braaen@zcorum.com>> wrote:
>
> I have not seen any changes yet, although I did get an automated
> response from their abuse address that they received my message.
> Also,
> to answer another question I have not changed backbones in over two
> years. I largely suspect that this is an issue of a simple typo
> and not
> anything malicious.
>
> --
> -----------------
> Brian Raaen
> Network Engineer
> email: /braaen@zcorum.com/ <http://braaen@zcorum.com/>
> <mailto:braaen@zcorum.com <mailto:braaen@zcorum.com>>
>
>
> Gustavo Rodrigues Ramos wrote:
> > Hi Brian, has someone from at&t contacted you or have you
> noticed any change?
> >
> > Thanks,
> > Gustavo.
> >
> >
> > On Thu, Sep 3, 2009 at 9:43 AM, Brian Raaen<braaen@zcorum.com
> <mailto:braaen@zcorum.com>> wrote:
> >
> >> I have sent a complaint to the AT&T abuse contact from my ARIN
> contact
> >> address asking them to stop announcing the route.
> >>
> >> --
> >> -----------------
> >> Brian Raaen
> >> Network Engineer
> >> email: /braaen@zcorum.com/ <http://braaen@zcorum.com/>
> <mailto:braaen@zcorum.com <mailto:braaen@zcorum.com>>
> >>
> >> Brian Raaen wrote:
> >>
> >>> I appreciate the offline replies. After doing some more
> research myself
> >>> the issue appears to be related to the fact that AT&T is
> announcing the
> >>> block directly. I did show "ip bgp 72.14.76.0" in a couple
> routers and
> >>> some showed the route originating in 701 (they were able to
> reach it)
> >>> and others showed it originating in 7018 (and they could not
> reach it).
> >>>
> >>> Here is my question, since I am an ARIN admin contact for the
> IP block
> >>> how is the best way to get AT&T to quit announcing the block.
> >>>
> >>>
> >>>
>
>
--
-----------------
Brian Raaen
Network Engineer
email: /braaen@zcorum.com/ <mailto:braaen@zcorum.com>
Telephone /678-507-5000x5574/
--------------060903050904080303040907
Content-Type: text/x-vcard; charset=utf-8;
name="braaen.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="braaen.vcf"
begin:vcard
fn:Brian Raaen
n:Raaen;Brian
org:Zcorum;DataCenter
adr:;;;;Georgia;;United States of America
email;internet:braaen@zcorum.com
title:Network Engineer
tel;work:678-507-5000
version:2.1
end:vcard
--------------060903050904080303040907--