[36438] in North American Network Operators' Group
RE: AS Leakage (filter)
daemon@ATHENA.MIT.EDU (Robbie Harrell)
Thu Apr 5 09:13:58 2001
Reply-To: <robbie.harrell@callisma.com>
From: "Robbie Harrell" <robbie.harrell@callisma.com>
To: "Christian Nielsen" <cnielsen@nielsen.net>
Cc: <nanog@merit.edu>
Date: Thu, 5 Apr 2001 09:10:59 -0700
Message-ID: <CMEOKFNEEMFDPCLGCCNDAEKHCBAA.robbie.harrell@callisma.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <Pine.GSO.4.33.0104042122100.2975-100000@moench.nielsen.net>
Errors-To: owner-nanog-outgoing@merit.edu
Is there a published list of best practice filters out there?
-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of
Christian Nielsen
Sent: Wednesday, April 04, 2001 9:42 PM
To: John Fraizer
Cc: nanog@merit.edu
Subject: Re: AS Leakage (filter)
On Thu, 5 Apr 2001, John Fraizer wrote:
> How many ways can I say "I didn't realize that Christian was speaking
> about Exodus?
I try to speak about networks in general. I hope that many people on the
list understand peering and filtering.
For example. If I peer with any provider, from Sprint to the provider
sending me 1 route I will filter _701_ from all of them. I will also
filter _1239_ from _701_ and all other peers. Please be aware, that I used
the term PEER and not Transit provider.
I would filter the RFC1918 from peers and transit providers. I would
filter IANA-RESERVED. I would filter my own IP space (no reason to see
someone else deagg towards me)
People have emailed me privately about filtering and I have given some
examples of filtering.
At the end of Feb, Steve Meuse and I talked about filtering at the LINX
meeting. If people would have followed some of the information given, they
might not have had a problem when an internet provider leaked the linx IP
addresses
! LINX
access-list 1 deny 195.66.224.0
access-list 1 deny 195.66.225.0
Here is the URL if anyone would like to look at some of the filtering
Exodus does
http://www.nielsen.net/people/christian/linx.html
Christian
> I _DID_NOT_KNOW_ that Christian worked for Exodus.
> I _DID_NOT_KNOW_ that Christian worked for Exodus.
> I _DID_NOT_KNOW_ that Christian worked for Exodus.
btw, i still work for Exodus...
