[175837] in North American Network Operators' Group
Re: BGP Security Research Question
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Nov 4 12:19:33 2014
X-Original-To: nanog@nanog.org
To: "Roland Dobbins" <rdobbins@arbor.net>
In-Reply-To: Your message of "Tue, 04 Nov 2014 18:02:47 +0700."
<27B373CC-D215-4729-9E2D-C97E123124B4@arbor.net>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 04 Nov 2014 12:17:21 -0500
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1415121441_2534P
Content-Type: text/plain; charset=us-ascii
On Tue, 04 Nov 2014 18:02:47 +0700, "Roland Dobbins" said:
> Networks which haven't implemented the BCPs sometimes find their BGP
> peering sessions disrupted via DDoS attacks against the routers
> themselves; SYN-floods and the like against TCP/179 are sometimes used
> to disrupt BGP sessions in such scenarios, for example. Aggressive
> scanning per the above against BGP speakers which haven't implemented
> the BCPs could result in inadvertent disruption of BGP sessions.
Am I the only guy wondering how many boxes out there are *still*
vulnerable to forged RST packets?
--==_Exmh_1415121441_2534P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Exmh version 2.5 07/13/2001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=835Z
-----END PGP SIGNATURE-----
--==_Exmh_1415121441_2534P--
