[74790] in North American Network Operators' Group
Re: aggregation & table entries
daemon@ATHENA.MIT.EDU (Daniel Roesen)
Thu Oct 14 10:42:34 2004
Date: Thu, 14 Oct 2004 16:41:41 +0200
From: Daniel Roesen <dr@cluenet.de>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.44.0410140757010.27831-100000@netcore.fi>
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, Oct 14, 2004 at 08:05:50AM +0300, Pekka Savola wrote:
> If you do 'feasible path strict uRPF' as described in BCP84 (I don't
> know if others than Juniper are providing that), you can enable strict
> uRPF toward those customers, still de-pref them, and accept the
> packets with correct source addresses.
>
> That's what we do with our customers whether multihomed or not.
And what do you do with a BGP customer which sends you traffic from
prefixes he doesn't want to announce to you? There are such customers.
Fail filter ACL?
Best regards,
Daniel (who wishes active/feasible would be switchable per interface,
not only per router)
--
CLUE-RIPE -- Jabber: dr@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0
