[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    Re: How secure is BGP? was Re: Two ISP's to one DMZ -
From:       "David Lang" <dlang () diginsite ! com>
Date:       1997-07-11 10:10:30
[Download RAW message or body]

This type of thing has happened. look at the history of net problems. The
design of the net is such that all the BGP providers are trusted.

David Lang

----------
> From: mikech@avana.net
> To: Firewalls@GreatCircle.COM; Paul Ferguson   <pferguso@cisco.com>;
Rusty Zickefoose   <rusty@mci.net>
> Subject: How secure is BGP? was Re: Two ISP's to one DMZ -
> Date: Friday, July 11, 1997 1:07 AM
> 
> All of this discussion of the mechanics of BGP made me think. What if I 
> decided to grab Cisco's block of addresses and announce them as being
routed 
> through my ISP with BGP? As long as my ISP's are peering with me, will
they 
> accept *any* route update? If I announced the Cisco update to my ISP
(let's 
> say MCI), would all of the MCI clients trying to access www.cisco.com
come to 
> my web server instead? What would happen on with other ISP's? Would they 
> accept this exception route?
> 
> Has this happened in the real world?
> 
> Is there any mechanism to prevent this?
> 
> Mike
> --
> 03:07:53
> 07/11/97
> _______________________________________________________________________
> Michael W. Chalkley                                Tel: +1.770.772.4567
> ZapNet! Inc.                                       Fax: +1.770.475.7640
> Suite 400-120                                E-mail: mikech@iproute.com
> 10945 State Bridge Road                                mikech@avana.net
> Alpharetta, GA 30202                             http://www.iproute.com
> 

[prev in list] [next in list] [prev in thread] [next in thread]