[181647] in North American Network Operators' Group
Re: Route leak in Bangladesh
daemon@ATHENA.MIT.EDU (Matsuzaki Yoshinobu)
Tue Jun 30 09:22:47 2015
X-Original-To: nanog@nanog.org
Date: Tue, 30 Jun 2015 22:22:38 +0900 (JST)
To: nanog@nanog.org
From: Matsuzaki Yoshinobu <maz@iij.ad.jp>
In-Reply-To: <m2y4j1tqfg.wl%randy@psg.com>
Errors-To: nanog-bounces@nanog.org
Randy Bush <randy@psg.com> wrote
>> A friend in AS58587 confirmed that this was caused by a configuration
>> error - it seems like related to redistribution, and they already
>> fixed that.
>
> 7007 all over again. do not redistribute bgp into igp. do not
> redistribute igp into bgp.
I also suggested them to implement BGP community based route filtering
in their outbound policy. Any other suggestions or thoughts to
prevent such incidents in general?
-----
Matsuzaki Yoshinobu <maz@iij.ad.jp>
- IIJ/AS2497 INOC-DBA: 2497*629
