[c-nsp] Efficient way to block spammer networks?
Jon Lewis
jlewis at lewis.org
Mon Apr 25 14:53:06 EDT 2005
On Mon, 25 Apr 2005, Jeff Chan wrote:
> What's the most efficient/preferred way to stop their traffic at
> the edge of our network? Static route to null0? Filter their
> AS? ACL their prefixes?
If you're sure about not wanting to exchange traffic with that ASN, just
reject any route with that ASN in the path (input route-map) and make sure
you don't point default at your transit providers. Then you'll have no
way to talk to that ASN regardless of what routes they advertise.
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
More information about the cisco-nsp
mailing list