Re: illicit above.net announcements?
kai@pac-rim.net (Kai Schlichting) writes:
Anyone here who is on the Vienna/London/Amsterdam exchange(s) and who is seeing what is alleged here: above.net leaking and/or flapping routes that are not their own ?
Abovenet receives /16's from a customer, who is the upstream of Manawatu. Abovenet duly advertises these /16's to its other customers, and its peers. Abovenet also blocks all traffic to/from ORBS, due to AUP violations. Manawatu is ORBS's provider. Abovenet has done nothing to interfere with the /24 cutouts Alan is describing below. re:
Delivered-To: majordom-abusespamtools-out@xuxa.iecc.com Date: Fri, 2 Jun 2000 04:13:23 +1200 (NZST) From: Alan Brown <alan@manawatu.gen.nz> X-Sender: alanb@mailhost.manawatu.net.nz To: Kai Schlichting <kai@conti.nu> cc: spamtools@abuse.net Subject: Re: [spamtools] Re: spamtools-digest V2 #326 Sender: owner-spamtools@abuse.net Reply-To: spamtools@abuse.net
On Thu, 1 Jun 2000, Kai Schlichting wrote:
Hmm, please give me a list of the routes advertised as well as the peering points this was or is seen at.
Vienna Internet Exchange.
London Internet Exchange.
Amsterdam Internet Exchange.
Routes are 202.36.147/24, 202.36.148/24 and 202.50.71/24 ie superblocks of the same.
Any exchange that is more than a backroom operation in someone's closet has a policy prohibiting such unauthorized announcements. I will assume for now that these are route leaks that are escaping through above.net's BGP distribution filters: something that is entirely within the real of possibility, but which has to be stopped.
My suppliers refuse to stop advertising the /16s containing my netblocks into above.net - but claim to have set up /24 adverts into their other suppliers.
Unfortunately, those /24 adverts appear to be flapping. <sarcasm>I wonder who could be causing that and why they'd do it? </sarcasm>
AB
---
-- Paul Vixie <vixie@mibh.net> SVP for Internet Services, MFNX M.I.B.H. Inc. is a subsidiary of Metromedia Fiber Network, Inc.
On Thu, Jun 01, 2000 at 06:30:03PM -0700, Paul Vixie wrote:
kai@pac-rim.net (Kai Schlichting) writes:
Anyone here who is on the Vienna/London/Amsterdam exchange(s) and who is seeing what is alleged here: above.net leaking and/or flapping routes that are not their own ?
Abovenet receives /16's from a customer, who is the upstream of Manawatu. Abovenet duly advertises these /16's to its other customers, and its peers.
Abovenet also blocks all traffic to/from ORBS, due to AUP violations.
If Abovenet considers ORBS's business an AUP violation, why is it accepting the advertisements at all, other than to hijack traffic for the netblock they dislike? This is easily characterized as a backdoor MAPS RBL entry, considering that ORBS was added to the MAPS RBL last year, resulting in a widespread storm of criticism. This way, MAPS can attack ORBS without it being publically obvious. Greetz, Peter. -- petervd@vuurwerk.nl - Peter van Dijk [student:developer:madly in love]
On Tue, 6 Jun 2000, Peter van Dijk wrote:
On Thu, Jun 01, 2000 at 06:30:03PM -0700, Paul Vixie wrote:
kai@pac-rim.net (Kai Schlichting) writes:
Anyone here who is on the Vienna/London/Amsterdam exchange(s) and who is seeing what is alleged here: above.net leaking and/or flapping routes that are not their own ?
Abovenet receives /16's from a customer, who is the upstream of Manawatu. Abovenet duly advertises these /16's to its other customers, and its peers.
Abovenet also blocks all traffic to/from ORBS, due to AUP violations.
If Abovenet considers ORBS's business an AUP violation, why is it accepting the advertisements at all, other than to hijack traffic for the netblock they dislike?
The /16s that Paul referred to are aggregate supernets that cover many other New Zealand networks than just Manawatu/ORBS. Manawatu's provider is advertising longer-prefix routes specific to Manawatu to other transit providers than AboveNet, precisely to draw traffic around the blackhole. I have no opinions on the veracity of AboveNet's claims, or the validity of Alan's crusade, but the implication in your paragraph above is misleading, IMHO. Joe
participants (3)
-
Joe Abley -
Paul Vixie -
Peter van Dijk