[125283] in North American Network Operators' Group
Re: BGP hijack from 23724 -> 4134 China?
daemon@ATHENA.MIT.EDU (Bruce Morgan)
Sun Apr 11 22:36:50 2010
Date: Mon, 12 Apr 2010 10:36:23 +0800
From: Bruce Morgan <Bruce.Morgan@aarnet.edu.au>
To: Bob Poortinga <bobp+nanog@webster.tsc.com>
In-Reply-To: <964C943783CDCE4BBA0CE327AA8E7BA5069DD0DF@vm-a-ex1.ms.aarnet.edu.au>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hi Bob,
AARNet does have a fairly strong policy on prefix-filtering.
We also peer with route-views servers so that Cyclops and other projects can
actually get this type of information. Best not to shoot the messenger as
the message can be useful ;-)
Regards
Bruce
> From: peering-admin@aarnet.edu.au [mailto:peering-admin@aarnet.edu.au]
> On Behalf Of Bob Poortinga
> Sent: Friday, 9 April 2010 11:13 PM
> To: nanog@nanog.org
> Cc: peering@aarnet.edu.au; Bruce Morgan
> Subject: Re: BGP hijack from 23724 -> 4134 China?
>
> Jay Hennigan <jay@west.net> writes:
>
>> We just got Cyclops alerts showing several of our prefixes sourced
> from
>> AS23474 propagating through AS4134. Anyone else?
>
> For the record, yes. Two of our blocks were announced via 7575 4134
> 23724
> yesterday. First seen by Cyclops at 2010-04-08 15:57:13 UTC and lasted
> about 20 minutes.
>
> Does AS7575, Australian Academic and Reasearch Network, do any
> filtering?
>
> --
> Bob Poortinga K9SQL <http://www.linkedin.com/in/bobpoortinga>
> Technology Service Corp. <http://www.tsc.com>
> Bloomington, Indiana US
--
street address: AARNet, POD 3, 20 Dick Perry Ave, Kensington, WA 6151,
Australia
m. 0408 882 390 t. +61 8 9289 2212 e. bruce.morgan@aarnet.edu.au
w. www.aarnet.edu.au
important
This email and any files transmitted with it are confidential, and the
rights of confidentiality in such information are not waived or lost by its
mistaken delivery to you. Any dissemination, copying, use or disclosure of
the email and/or such files without the permission of AARNet, or the sender,
is strictly prohibited. If you have received this email in error, please
contact the sender immediately and delete all copies of this transmission.
