etc/examples/bgpd.conf: add ASPA
Job Snijders <[email protected]>
| Newsgroups | gmane.os.openbsd.tech |
|---|---|
| Message-ID | <[email protected]> |
Now that the novelty has worn off, let's add ASPA filtering to the bgpd.conf example. Perhaps like so? Index: bgpd.conf =================================================================== RCS file: /cvs/src/etc/examples/bgpd.conf,v diff -u -p -r1.26 bgpd.conf --- bgpd.conf 18 Dec 2024 16:00:26 -0000 1.26 +++ bgpd.conf 11 Jun 2026 19:40:18 -0000 @@ -118,7 +118,8 @@ match from ebgp community GRACEFUL_SHUTD deny quick from any prefix-set bogons # deny RPKI invalid, built by rpki-client(8), see root crontab -deny quick from ebgp ovs invalid +deny quick from ebgp ovs invalid # deny ROA-invalids +deny quick from ebgp avs invalid # deny ASPA-invalids # filter bogon AS numbers # AS_TRANS (23456) is not supposed to show up in any path and indicates a