-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Will Hargrave <will@harg.net> wrote:

Sargun Dhillon wrote:

...

So, it seems that youtube's ip block has been hijacked by a more specific prefix being advertised. This is a case of IP hijacking, not case of DNS poisoning, youtube engineers doing something stupid, etc. For people that don't know. The router will try to get the most specific prefix. This is by design, not by accident.

You are making the assumption of malice when the more likely cause is one of accident on the part of probably stressed NOC staff at 17557.

They probably have that /24 going to a gateway walled garden box which replies with a site saying 'we have banned this', and that /24 route is leaking outside of their AS via PCCW due to dodgy filters/communities.

I guess you guys missed the news that Pakistan has "blocked" YouTube due to [mumble]: http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2008/02/24/wpak324.xml AS Name AS17557 PKTELECOM-AS-AP Pakistan Telecom - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFHwdp8q1pz9mNUZTMRAt4kAKDxryR8tLk3ejGe0p2aBAvvIcanAwCg4JkC a79WB3j06mIwUPdxUI+xweA= =zTdh -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/