[afnog] BGP /AS filtering

[Saul Stein]

Hi
OK so now my question needs to change. I was thinking that I shouldn't
accept bad/private  AS paths from customers that buy transit from me and
should either get them to fix their things or block them until they do.
Clearly this isn't the way things are done.

(Yes soon RPKI will really assist with this but in the meantime)  does one
just filter ^AS-path_ and then all the prefixes that can be received from
them?
How is this generally done?

Thanks
Saul


-----Original Message-----
From: Mark Tinka [mailto:mark.tinka at seacom.mu] 
Sent: 28 June 2013 03:36 PM
To: Randy Bush
Cc: Saul Stein; African Network Operators
Subject: Re: [afnog] BGP /AS filtering

On Friday, June 28, 2013 03:12:31 PM Randy Bush wrote:

> no choice.  privates may only be stripped at the AS receiving them, 
> i.e. immediately next in the path.  i think mark or someone pointed 
> this out to you.

It was Nishal.

In my post just a minute ago, I indicate that AS33771 could do it if they
had the right box + code combination, i.e., break earlier rules on how
stripping can be done.

But then again, AS33771 run their network...

Mark.