Re: SafeHost AS21217 accused to leak routes for two hours to China Telecom AS4134 - anyone from SafeHost to comment?

Job Snijders <[email protected]> Sun, 9 Jun 2019 07:56:52 -0400
Newsgroups gmane.org.operators.swinog
Message-ID <CACWOCC-L07rNDbN-ifh9OG=o10R6JfV9Y-dRS0odUUZw6cpbjA@mail.gmail.com>
--===============1827370513==
Content-Type: multipart/alternative; boundary="0000000000001be5d2058ae2c36f"

--0000000000001be5d2058ae2c36f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Yes, we all make errors. However, a number of the leaked routes don=E2=80=
=99t exist
in the DFZ, so they were either generated or picked up some place special.
I=E2=80=99d like to learn from this incident to see if we can protect ourse=
lves
better.

If this was a typo, I=E2=80=99d like them to confirm. If it was a software =
defect,
I=E2=80=99d also like to know.

On Sun, Jun 9, 2019 at 7:47 <[email protected]> wrote:

> Hi,
>
> Nobody of us made ever a typo...
>
> Here is a good article:
>
> https://blogs.oracle.com/internetintelligence/large-european-routing-leak=
-sends-traffic-through-china-telecom
>
> Cheers,
> G=C3=BCnti
>
> Am 09.06.2019 um 13:43 schrieb Job Snijders <[email protected]>:
>
> And they have yet to explain how this could happen. I tried calling their
> NOC but they didn=E2=80=99t pick up the phone :-(
>
> https://twitter.com/swisscolo/status/1136980918227341312?s=3D21
>
> Kind regards,
>
> Job
>
> On Sun, Jun 9, 2019 at 7:25 Fredy Kuenzler <[email protected]> wrote:
>
>>
>> https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traf=
fic-through-china-telecom/
>>
>>
>> <https://www.google.com/maps/search/Technoparkstrasse+5+%0D%0A+CH-8406+W=
interthur+%0D%0A+Switzerland?entry=3Dgmail&source=3Dg>
>> --
>> <https://www.google.com/maps/search/Technoparkstrasse+5+%0D%0A+CH-8406+W=
interthur+%0D%0A+Switzerland?entry=3Dgmail&source=3Dg>
>> Fredy Kuenzler
>> Init7 (Switzerland) Ltd.
>> Technoparkstrasse 5
>> <https://www.google.com/maps/search/Technoparkstrasse+5+CH-8406+Winterth=
ur+Switzerland?entry=3Dgmail&source=3Dg>
>> CH-8406 Winterthur
>> <https://www.google.com/maps/search/Technoparkstrasse+5+CH-8406+Winterth=
ur+Switzerland?entry=3Dgmail&source=3Dg>
>> Switzerland
>> <https://www.google.com/maps/search/Technoparkstrasse+5+CH-8406+Winterth=
ur+Switzerland?entry=3Dgmail&source=3Dg>
>>
>> http://www.init7.net/
>>
>>
>> _______________________________________________
>> swinog mailing list
>> [email protected]
>> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
>>
>
> _______________________________________________
> swinog mailing list
> [email protected]
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
>
>

--0000000000001be5d2058ae2c36f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div dir=3D"auto">Yes, we all make errors. However, a number of the le=
aked routes don=E2=80=99t exist in the DFZ, so they were either generated o=
r picked up some place special. I=E2=80=99d like to learn from this inciden=
t to see if we can protect ourselves better.</div></div><div dir=3D"auto"><=
br></div><div dir=3D"auto">If this was a typo, I=E2=80=99d like them to con=
firm. If it was a software defect, I=E2=80=99d also like to know.</div><div=
><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Su=
n, Jun 9, 2019 at 7:47 &lt;<a href=3D"mailto:Robert.Guentensperger@swisscom=
.com">[email protected]</a>&gt; wrote:<br></div><blockquot=
e class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc sol=
id;padding-left:1ex">



<div dir=3D"auto">
<div dir=3D"ltr"></div>
<div dir=3D"ltr">Hi,</div>
<div dir=3D"ltr"><br>
</div>
<div dir=3D"ltr">Nobody of us made ever a typo...</div>
<div dir=3D"ltr"><br>
</div>
<div dir=3D"ltr">Here is a good article:</div>
<div dir=3D"ltr"><a href=3D"https://blogs.oracle.com/internetintelligence/l=
arge-european-routing-leak-sends-traffic-through-china-telecom" target=3D"_=
blank">https://blogs.oracle.com/internetintelligence/large-european-routing=
-leak-sends-traffic-through-china-telecom</a></div>
<div dir=3D"ltr"><br>
</div>
<div dir=3D"ltr">Cheers,</div>
<div dir=3D"ltr">G=C3=BCnti=C2=A0</div></div><div dir=3D"auto">
<div dir=3D"ltr"><br>
Am 09.06.2019 um 13:43 schrieb Job Snijders &lt;<a href=3D"mailto:[email protected]=
et" target=3D"_blank">[email protected]</a>&gt;:<br>
<br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr">
<div>
<div dir=3D"auto">And they have yet to explain how this could happen. I tri=
ed calling their NOC but they didn=E2=80=99t pick up the phone :-(</div>
</div>
<div dir=3D"auto"><br>
</div>
<div dir=3D"auto">
<div></div>
<div><a href=3D"https://twitter.com/swisscolo/status/1136980918227341312?s=
=3D21" target=3D"_blank">https://twitter.com/swisscolo/status/1136980918227=
341312?s=3D21</a></div>
<br>
</div>
<div dir=3D"auto">Kind regards,</div>
<div dir=3D"auto"><br>
</div>
<div dir=3D"auto">Job</div>
<div><br>
<div class=3D"gmail_quote">
<div dir=3D"ltr" class=3D"gmail_attr">On Sun, Jun 9, 2019 at 7:25 Fredy Kue=
nzler &lt;<a href=3D"mailto:[email protected]" target=3D"_blank">kuenzler@=
init7.net</a>&gt; wrote:<br>
</div>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<div dir=3D"auto"><a href=3D"https://blog.apnic.net/2019/06/07/large-europe=
an-routing-leak-sends-traffic-through-china-telecom/" target=3D"_blank">htt=
ps://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-th=
rough-china-telecom/</a><br>
<br><a href=3D"https://www.google.com/maps/search/Technoparkstrasse+5+%0D%0=
A+CH-8406+Winterthur+%0D%0A+Switzerland?entry=3Dgmail&amp;source=3Dg">
</a><div id=3D"m_6892267670909065527m_-3880208177095961845AppleMailSignatur=
e" dir=3D"ltr">--<a href=3D"https://www.google.com/maps/search/Technoparkst=
rasse+5+%0D%0A+CH-8406+Winterthur+%0D%0A+Switzerland?entry=3Dgmail&amp;sour=
ce=3Dg">
</a><div>Fredy Kuenzler
<div>Init7 (Switzerland) Ltd.</div>
</div>
<div><a href=3D"https://www.google.com/maps/search/Technoparkstrasse+5+CH-8=
406+Winterthur+Switzerland?entry=3Dgmail&amp;source=3Dg" target=3D"_blank">=
Technoparkstrasse 5</a></div>
<div><a href=3D"https://www.google.com/maps/search/Technoparkstrasse+5+CH-8=
406+Winterthur+Switzerland?entry=3Dgmail&amp;source=3Dg" target=3D"_blank">=
CH-8406 Winterthur</a></div>
<div><a href=3D"https://www.google.com/maps/search/Technoparkstrasse+5+CH-8=
406+Winterthur+Switzerland?entry=3Dgmail&amp;source=3Dg" target=3D"_blank">=
Switzerland</a></div>
<div><br>
</div>
<div><a href=3D"http://www.init7.net/" target=3D"_blank">http://www.init7.n=
et/</a></div>
<div><br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
swinog mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]=
inog.ch</a><br>
<a href=3D"http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog" rel=3D"n=
oreferrer" target=3D"_blank">http://lists.swinog.ch/cgi-bin/mailman/listinf=
o/swinog</a><br>
</blockquote>
</div>
</div>
</div>
</blockquote>
<blockquote type=3D"cite">
<div dir=3D"ltr"><span></span><br>
<span>_______________________________________________</span><br>
<span>swinog mailing list</span><br>
<span><a href=3D"mailto:[email protected]" target=3D"_blank">swinog@li=
sts.swinog.ch</a></span><br>
<span><a href=3D"http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog" ta=
rget=3D"_blank">http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog</a><=
/span><br>
</div>
</blockquote>
</div>

</blockquote></div></div>

--0000000000001be5d2058ae2c36f--


--===============1827370513==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

--===============1827370513==--