Re: Route leak in Bangladesh

["Justin M. Streiner" <streiner () cluebyfour org>]

On Tue, 30 Jun 2015, Matsuzaki Yoshinobu wrote:

> Randy Bush <randy () psg com> wrote
> > > A friend in AS58587 confirmed that this was caused by a configuration
> > > error - it seems like related to redistribution, and they already
> > > fixed that.
> >
> > 7007 all over again.  do not redistribute bgp into igp.  do not
> > redistribute igp into bgp.
>
> I also suggested them to implement BGP community based route filtering
> in their outbound policy.  Any other suggestions or thoughts to
> prevent such incidents in general?

At a minimum, AS-PATH filtering of outgoing routes to just your ASN(s) and 
your downstream customer ASNs.  Whether this is done manually, built 
using AS-SETs from your route registry of choice, or through some other
automated means is another story.

jms