Re: PI/metro/geo [Re: The state of IPv6 multihoming development]

[Peter Tattam <peter@jazz-1.trumpet.com.au>]

On Tue, 5 Nov 2002, RJ Atkinson wrote:

> 
> On Tuesday, Nov 5, 2002, at 14:10 America/Montreal, Michel Py wrote:
> > Are we talking about someone hijacking the BGP TCP connection between
> > you and your peer and actually injecting you forged routes, or a denial
> > of service by other means?
> 
> I've seen forged RSTs to take out the BGP session also, but the 
> earliest attack
> I saw involved somone stealing a BGP TCP session and then injecting 
> false routing
> information.  Operators who don't have BGP TCP MD5 deployed are at 
> serious
> operational risk these days.

I thought this was a man-on-the-side attack, not man-in-the-middle

> 
> Ran
> 
> 
> 

Peter

--
Peter R. Tattam                            peter@trumpet.com
Managing Director,    Trumpet Software International Pty Ltd
Hobart, Australia,  Ph. +61-3-6245-0220,  Fax +61-3-62450210