[nsp-sec] 94.125.216.0/21 - ASN 47868 SUPRO-AS

[German Martinez]

On Mon Feb 16, 2009, Mike Lewinski wrote:

> We did have "bgp maxas-limit 75" configured prior to this event and that 
> should have helped but didn't. Completely dropping ALL received routes also 
> didn't help. I'm pretty sure the only thing that is going to permanently 
> fix this is an IOS upgrade and I'm working to get that into the pipeline.
>
> Everything I see shows CSCdr54230 addressed back in '04. I'm running an IOS 
> compiled in '07 (12.2(18)S13) so that's a little puzzling.

did you have this command explicitly configure in your routers?
According to Cisco:

CSCee30718 – it removes the default value of 75 from the router. 

Hank mentioned he uses this workaround 

>
>
> Thanks,
>
> Mike Lewinski
> Rockynet.com / AS13345
> 303-629-2860
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20090217/32cc78d8/attachment-0001.sig>