Re: Finding out where a bogus route is coming from?

[Dave Curado <davec () ziplink net>]

> Any hints on how to do this?  
>
> We have a situation where some person has broadcast a route which is
> mapping one of our subnets to the wrong place.
> I'm trying to track this at the Mae's to find out what's going on, but I'm
> really interested in figuring out how
> one can prevent this sort of thing or find out the original source of the
> bad route.

Resolving the issue should be straight forward:

        - traceroute to something on that subnet from a few places
          (see http://www.boardwatch.com/isp/trace.htm amongst others)

        - get a phone number for the noc or whatever of the org that
          announcing your routes, (try whois, or possibly their web
          page... (whatever, get creative))

        - give them a call and explain the situation, open a ticket
          if they have a ticketing system, and move forward from there

You may have to convince them that the problem exists, by forwarding
on traceroute info or whatever.  Hopefully their noc staff will be
helpful, reasonable, and clueful.  

I have no suggestions for how to prevent this problem from occurring.

Hope this helps,
davec

- - - - - - - - - - - - - - - - -