[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    How secure is BGP? was Re: Two ISP's to one DMZ -
From:       mikech () avana ! net
Date:       1997-07-11 3:07:52
[Download RAW message or body]

All of this discussion of the mechanics of BGP made me think. What if I 
decided to grab Cisco's block of addresses and announce them as being routed 
through my ISP with BGP? As long as my ISP's are peering with me, will they 
accept *any* route update? If I announced the Cisco update to my ISP (let's 
say MCI), would all of the MCI clients trying to access www.cisco.com come to 
my web server instead? What would happen on with other ISP's? Would they 
accept this exception route?

Has this happened in the real world?

Is there any mechanism to prevent this?

Mike
--
03:07:53
07/11/97
_______________________________________________________________________
Michael W. Chalkley                                Tel: +1.770.772.4567
ZapNet! Inc.                                       Fax: +1.770.475.7640
Suite 400-120                                E-mail: mikech@iproute.com
10945 State Bridge Road                                mikech@avana.net
Alpharetta, GA 30202                             http://www.iproute.com

[prev in list] [next in list] [prev in thread] [next in thread]