23 May
2000
23 May
'00
5:18 p.m.
On Tue, May 23, 2000 at 12:40:00PM -0400, Blaine Christian wrote:
Since the corrupted AS-path does not include the AS that the route is coming from (at least in the corruption that I saw) it seems to me that a simple solution for all is to filter on AS i.e. only allow routes that have the AS of your EBGP neighbor prepended to them.
Just a note that this breaks route servers. Caveat programmer. And how do you mean "corrupted"? If the packet is syntacically invalid, its perfectly legal to send a NOTIFY and drop the session. GateD did this to Proteon for years. :-)
Blaine
-- Jeffrey Haas - Merit RSng project - jeffhaas@merit.edu