Hi, On Wed, May 01, 2002 at 05:55:39PM +0200, Pim van Pelt wrote:
Regarding filtering on incoming and outgoing BGP updates, kindly note my opinion on the matter (which differs somewhat from Gert's slides at the ripe42 meeting). He had pasted UUNet UK's rules, but following the current RFC and policies from RIR and 6BONE, this might be more approriate:
Thanks for your input. I will try to collect some filters, and put them (with comments "this does permit ...", and "this is very restrictive") somewhere public.
ipv6 prefix-list strict seq 5 permit 3ffe::/17 ge 24 le 24 ipv6 prefix-list strict seq 10 permit 3ffe:8000::/17 ge 28 le 28 ipv6 prefix-list strict seq 15 permit 3ffe:4000::/18 ge 32 le 32 ipv6 prefix-list strict seq 20 permit 2000::/3 ge 16 le 16
I'm not sure about this one...? What is it doing?
ipv6 prefix-list strict seq 25 permit 2001::/16 ge 29 le 35 ipv6 prefix-list strict seq 27 permit 2002::/16 ipv6 prefix-list strict seq 30 deny 2000::/3
Your list is already very strict. As we have discussed yesterday, it might be desireable (until there is a better solution for multihoming) to explicitely permit prefixes up to a /48. This could be done "for your own region only", or "for all regions", depending on RAM and policy.
This might clean up some of the broken elements in the current global routing tables. Regarding the informational aspect, looking at the project I am forming and briefly presented at the ripe42 meeting, perhaps this project can contribute to some form in the RIPE region education of LIRs.
Yes. regards, Gert Doering -- NetMaster -- Total number of prefixes smaller than registry allocations: 47584 (44543) SpaceNet AG Mail: netmaster@Space.Net Joseph-Dollinger-Bogen 14 Tel : +49-89-32356-0 80807 Muenchen Fax : +49-89-32356-299