RFC1918 conformance

Mailman List Mirror (Read Only)
1

As specified in RFC1918 (ftp://ds.internic.net/rfc/rfc1918.txt) the
netblocks 10.0.0.0/16, 172.16.0.0/12 and 192.168.0.0/16 have been
allocated for "Private Internets". Consequently, these netblocks
should not be routed over the Internet.

As shown below, they are currently advertised from AS6848 and these
advertisements are carried to us (AS6453) through various AS's of the
SprintLink system.

sh ip bgp reg _6846$

BGP table version is 9335417, local router ID is 207.45.201.5
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal
Origin codes: i - IGP, e - EGP, ? - incomplete

   Network Next Hop Metric LocPrf Weight Path
*> 10.0.0.0 144.228.164.57 0 90 0 1794 1239 1790 6846 ?
*> 172.16.0.0/12 144.228.164.57 0 90 0 1794 1239 1790 6846 ?
*> 192.168.0.0/16 144.228.164.57 0 90 0 1794 1239 1790 6846 ?
[...]

AS6846 responsibles should take immediate action to remove these
announcements. SprintLink, as any conscientious operator, should take
action to filter out these announcements from any of its peers.

Regards.

2

Hi, Pierre.

These are the changes I have made in our sl-dc-10 router:

router bgp 1790
neighbor 144.228.120.130 remote-as 6846
neighbor 144.228.120.130 version 4
neighbor 144.228.120.130 distribute-list 50 in
neighbor 144.228.120.130 distribute-list 111 out
neighbor 144.228.120.130 route-map transit-in in
neighbor 144.228.120.130 route-map transit-out out
neighbor 144.228.120.130 filter-list 53 in

access-list 50 deny 10.0.0.0 0.255.255.255
access-list 50 deny 172.16.0.0 0.15.255.255
access-list 50 deny 192.168.0.0 0.0.255.255

clear ip bgp 144.228.120.130 soft out

Please let us know if there are any problems with this new configuration.
Thank you.

Ray,
Sprintlink

3

Sorry, I forgot to include in the last email:

access-list 50 permit any

And I did a "clear ip bgp 144.228.120.130" without the "soft out".
Thanks.

Ray,
Sprintlink