[c-nsp] Efficient way to block spammer networks?

Jon Lewis jlewis at lewis.org
Mon Apr 25 14:53:06 EDT 2005


On Mon, 25 Apr 2005, Jeff Chan wrote:

> What's the most efficient/preferred way to stop their traffic at
> the edge of our network?  Static route to null0?  Filter their
> AS?  ACL their prefixes?

If you're sure about not wanting to exchange traffic with that ASN, just
reject any route with that ASN in the path (input route-map) and make sure
you don't point default at your transit providers.  Then you'll have no
way to talk to that ASN regardless of what routes they advertise.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


More information about the cisco-nsp mailing list