[93349] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: odd hijack

daemon@ATHENA.MIT.EDU (Hank Nussbacher)
Fri Nov 10 00:21:04 2006

Date: Fri, 10 Nov 2006 07:20:10 +0200 (IST)
From: Hank Nussbacher <hank@efes.iucc.ac.il>
To: Josh Karlin <karlinjf@cs.unm.edu>
Cc: nanog@nanog.org
In-Reply-To: <71051fe20611091646w64385d2frb5be471be198b92@mail.gmail.com>
Errors-To: owner-nanog@merit.edu


On Thu, 9 Nov 2006, Josh Karlin wrote:

> Here is one that is somewhat the opposite, the AS announced a
> significant portion of IANA allocated space.  Note, they are large
> blocks and as such probably did not cause much damage because most
> networks announce more specifics.  My question to the community is,
> what kind of misconfiguration could cause this set of prefixes to be
> announced?   I asked the AS responsible, but have not had a response.

Misconfiguration? :-)  That's a nice word for spammer.  See Joe's PPT at:
http://www.uoregon.edu/~joe/maawg8/maawg8.ppt

AS29449 is not the problem.  It is the upstreams of AS5602 (KPNQwest 
Italia) and AS286 (KPN) that let this crap leak.

-Hank Nussbacher
http://www.interall.co.il


home help back first fref pref prev next nref lref last post