[93350] in North American Network Operators' Group
Re: odd hijack
daemon@ATHENA.MIT.EDU (Josh Karlin)
Fri Nov 10 01:01:35 2006
Date: Thu, 9 Nov 2006 22:59:20 -0700
From: "Josh Karlin" <karlinjf@cs.unm.edu>
To: "Hank Nussbacher" <hank@efes.iucc.ac.il>
Cc: nanog@nanog.org
In-Reply-To: <Pine.LNX.4.64.0611100709120.7769@efes.iucc.ac.il>
Errors-To: owner-nanog@merit.edu
Wouldn't they want to hijack more specifics to spam? I doubt much of
that space is going to correctly route for spamming purposes.
On 11/9/06, Hank Nussbacher <hank@efes.iucc.ac.il> wrote:
>
> On Thu, 9 Nov 2006, Josh Karlin wrote:
>
> > Here is one that is somewhat the opposite, the AS announced a
> > significant portion of IANA allocated space. Note, they are large
> > blocks and as such probably did not cause much damage because most
> > networks announce more specifics. My question to the community is,
> > what kind of misconfiguration could cause this set of prefixes to be
> > announced? I asked the AS responsible, but have not had a response.
>
> Misconfiguration? :-) That's a nice word for spammer. See Joe's PPT at:
> http://www.uoregon.edu/~joe/maawg8/maawg8.ppt
>
> AS29449 is not the problem. It is the upstreams of AS5602 (KPNQwest
> Italia) and AS286 (KPN) that let this crap leak.
>
> -Hank Nussbacher
> http://www.interall.co.il
>
>
