refresher - what's happening


The ENSS still had a route to that DMZ, only the DMZ was now
partitioned. The behavior used to be that at least one peer had to be
on the DMZ but it now announces the route anyway. Rather than pull
the plug, an "ifconfig down" on the ENSS or adding "restrict" to the
"proto direct" line for the interface in the exports to IBGP in the
gated.conf file should do the trick. Next time please just call our
NOC and ask them to take it down.