Re: [isp-bgp] filtering pratice

[Daniel Schild <sch-ispbgp@...>]

On Tue, May 24, 2005 at 05:23:09PM -0400, James wrote:
> The current best practice is as follows:
> 
> 1. Strictly filter your BGP customers on both prefix-lists and AS_PATH.
> 
> 2. Loosely filter your peers -- i.e. place a generic "one-size-fits-all"
>    type of prefix-list, that will block prefixes longer than /24, or any
>    other martian prefixes like RFC1918 as desired.  Also place a loose
>    filtering AS_PATH filter, such as one blocking private ASNs but not
>    much of anything else.
> 
> 3. Place maximum-prefix limit on your peers to a value that is appropriate.
> 
> 
> Obviously if your peer is a small ISP with only a few prefixes, it may be
> a good idea to strictly filter them as well.  But strict filtering starts
> getting difficult to manage as number of peers increase and as you peer
> with larger peers.
> 
> -J

hi,

in my last post about what i will filter on (answer to another post), i will 
add maximum-prefix limit, since i forgot to write that.


thanks for your reminder of what i tend to forget :).


kind regards,
daniel





To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Copyright 2005 Jupitermedia Corporation All Rights Reserved.