[29018] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

illicit above.net announcements?

daemon@ATHENA.MIT.EDU (Kai Schlichting)
Thu Jun 1 12:12:34 2000

Message-Id: <4.2.2.20000601120538.027cdb30@mail.speedus.net>
Date: Thu, 01 Jun 2000 12:10:23 -0400
To: nanog@merit.edu
From: Kai Schlichting <kai@pac-rim.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Errors-To: owner-nanog-outgoing@merit.edu


Anyone here who is on the Vienna/London/Amsterdam exchange(s) and
who is seeing what is alleged here: above.net leaking and/or
flapping routes that are not their own ?

Is there a lookingglass at any of these exchanges that is publicly
accessible?

bye,Kai

>Delivered-To: majordom-abusespamtools-out@xuxa.iecc.com
>Date: Fri, 2 Jun 2000 04:13:23 +1200 (NZST)
>From: Alan Brown <alan@manawatu.gen.nz>
>X-Sender: alanb@mailhost.manawatu.net.nz
>To: Kai Schlichting <kai@conti.nu>
>cc: spamtools@abuse.net
>Subject: Re: [spamtools] Re: spamtools-digest V2 #326
>Sender: owner-spamtools@abuse.net
>Reply-To: spamtools@abuse.net
>
>On Thu, 1 Jun 2000, Kai Schlichting wrote:
>
> > Hmm, please give me a list of the routes advertised as well as the
> > peering points this was or is seen at.
>
>Vienna Internet Exchange.
>
>London Internet Exchange.
>
>Amsterdam Internet Exchange.
>
>Routes are 202.36.147/24, 202.36.148/24 and 202.50.71/24 ie superblocks
>of the same.
>
> > Any exchange that is more
> > than a backroom operation in someone's closet has a policy prohibiting
> > such unauthorized announcements. I will assume for now that these
> > are route leaks that are escaping through above.net's BGP distribution
> > filters: something that is entirely within the real of possibility,
> > but which has to be stopped.
>
>My suppliers refuse to stop advertising the /16s containing my netblocks
>into above.net - but claim to have set up /24 adverts into their other
>suppliers.
>
>Unfortunately, those /24 adverts appear to be flapping. <sarcasm>I
>wonder who could be causing that and why they'd do it? </sarcasm>
>
>AB



home help back first fref pref prev next nref lref last post