[8800] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Wow, AS7007!

daemon@ATHENA.MIT.EDU (Stephen A Misel)
Fri Apr 25 13:34:49 1997

Date: Fri, 25 Apr 1997 12:52:33 -0400
To: nanog@merit.edu
From: Stephen A Misel <stevem@hway.net>

I happened to be in one of our 7505 routers this afternoon when POP -- all
of a sudden most of the internet disappeared!  I immediately thought it was
me, but looked around and saw this AS7007 broadcasting MY routes!   It
wasn't for all of our network space -- We have several /18's here, and it
seemed only the first /24 of each CIDR was affected.  When I found a
workstation at the end of the /18, we got the whois info for 7007 --
Florida Internet Exchange, and called them.

They claimed to have a customer broadcasting some bad routing information
and unplugged their router.  A few moments later, the internet stabilized
and I started seeing real routes.

Correct me if I'm wrong, but:

	(1)  We're going to read about this in EVERY computer magazine, newspaper
and TV as "the end of the internet?"

	(2)  Access lists by backbone providers *should* have prevented this.

	(3)  Does or does not the RADB and other routing registries (MCI's, etc)
prevent this?

I bet this hole will be patched up real soon!


Steve

home help back first fref pref prev next nref lref last post