[170697] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BGPMON Alert Questions

daemon@ATHENA.MIT.EDU (Randy Bush)
Thu Apr 3 19:44:31 2014

Date: Fri, 04 Apr 2014 08:28:15 +0900
From: Randy Bush <randy@psg.com>
To: Mark Tinka <mark.tinka@seacom.mu>
In-Reply-To: <201404031515.17889.mark.tinka@seacom.mu>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

>> one nice thing about origin validation is that anyone who validates
>> anywhere on the internet can reject the mis-origination(s).
> +1.

a non-op sec person who follows nanog in read-only mode pointed out in
private email that this is a subtle difference from prefix filtering.
in general, i can not prefix filter N hops away.

randy


home help back first fref pref prev next nref lref last post