Folks interested in Paul Vixie's recent thread (and others interested in inter-domain routing) should read: ftp://ds.internic.net/internet-drafts/draft-murphy-bgp-secr-00.txt which is a preliminary security analysis of BGP. It is also useful for folks to read draft-heffernan-* and to actually deploy the TCP MD5 Authentication option for BGP sessions (to protect against low-level attacks, not as protection for bogus prefix advertisements from otherwise legitimate BGP peers). Apologies for posting content onto NANOG and disturbing the usual noise. Ran rja@home.net