Re: PI/metro/geo [Re: The state of IPv6 multihoming development]

[Pekka Savola <pekkas@netcore.fi>]

On Tue, 5 Nov 2002, RJ Atkinson wrote:
> On Tuesday, Nov 5, 2002, at 14:10 America/Montreal, Michel Py wrote:
> > Are we talking about someone hijacking the BGP TCP connection between
> > you and your peer and actually injecting you forged routes, or a denial
> > of service by other means?
> 
> I've seen forged RSTs to take out the BGP session also, but the earliest
> attack I saw involved somone stealing a BGP TCP session and then
> injecting false routing information.  Operators who don't have BGP TCP
> MD5 deployed are at serious operational risk these days.

This only applies to eBGP sessions (if the neighbor does not do ingress
filtering) and operators which do not use proper source address ingress
filtering at their borders.

-- 
Pekka Savola                 "Tell me of difficulties surmounted,
Netcore Oy                   not those you stumble over and fall"
Systems. Networks. Security.  -- Robert Jordan: A Crown of Swords