<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hola,</p>
    <p>  Recordaba que había un RFC que tenía el concepto de BGP Leak,
      lo conseguí, está muy bueno.<br>
    </p>
    <p><a href="https://tools.ietf.org/html/rfc7908">https://tools.ietf.org/html/rfc7908</a></p>
    <p><br>
    </p>
    <p>  Voy a intentar hacer un pequeño resumen:</p>
    <p><br>
    </p>
    <p>En en punto 2 el RFC indica como "Working Definition of Route
      Leaks":</p>
    <p>"A route leak is the propagation of routing announcement(s)
      beyond<br>
         their intended scope.  That is, an announcement from an
      Autonomous<br>
         System (AS) of a learned BGP route to another AS is in
      violation of<br>
         the intended policies of the receiver, the sender, and/or one
      of the<br>
         ASes along the preceding AS path..." <br>
    </p>
    <p>  [....]<br>
    </p>
    <p>  "Route leaks can<br>
         be accidental or malicious but most often arise from accidental<br>
         misconfigurations."<br>
    </p>
    <p><br>
    </p>
    <p>Por otro lado, interesantemente hay una clasificación de Route
      Leaks. Solo voy a mencionarlos:</p>
    <p>3.1.  Type 1: Hairpin Turn with Full Prefix<br>
      3.2.  Type 2: Lateral ISP-ISP-ISP Leak<br>
      3.3.  Type 3: Leak of Transit-Provider Prefixes to Peer<br>
      3.4.  Type 4: Leak of Peer Prefixes to Transit Provider<br>
      3.5.  Type 5: Prefix Re-origination with Data Path to Legitimate
      Origin<br>
      3.6.  Type 6: Accidental Leak of Internal Prefixes and
      More-Specific<br>
            Prefixes<br>
    </p>
    <p><br>
    </p>
    <p>Revisando el artículo + peeringdb (no conseguí nada) +  lo que
      puedo apreciar en:  <a href="https://bgp.he.net/AS21217#_graph4">https://bgp.he.net/AS21217#_graph4<br>
      </a></p>
    <p>indica que China Telecom no pareciera ser upstream provider de
      Safe Host por ello cae en las categorías:</p>
    <p>3.2.  Type 2: Lateral ISP-ISP-ISP Leak.  ----> Descartado (no
      parece haber peering)<br>
    </p>
    <p>3.5.  Type 5: Prefix Re-origination with Data Path to Legitimate
      Origin</p>
    <p>3.6.  Type 6: Accidental Leak of Internal Prefixes and
      More-Specific<br>
            Prefixes</p>
    <p><br>
    </p>
    <p>IMHO, todo lo ocurrido parece caer en  Type 5 y/o Type 6. Ahora
      bien,  por la gran cantidad de rutas me inclino que la situación
      fue un BGP Leak: Type 5 Prefix Re-origination with Data Path to
      Legitimate Origin</p>
    <p><br>
    </p>
    <p>Saludos,</p>
    <p><br>
    </p>
    <p>Alejandro,</p>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 6/10/19 6:03 AM, Arturo Servin
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CALo9H1a7frSyXi1S85eDNh_fGP2X1TfDpKHX_oT7NU0_quFZLg@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">Nico
        <div><br>
        </div>
        <div>Es leak.</div>
        <div><br>
        </div>
        <div>AS21217 anuncio redes de peers que no debia (es un peer de
          ellos, no un proveedor de transito.)<br>
        </div>
        <div><br>
        </div>
        <div>AS4134 no tenia los filtros apropiados y dejo pasar redes
          de un cliente las cuales su cliente no tenia autorizacion de
          propagar.</div>
        <div><br>
        </div>
        <div>Aqui los culpables son AS21217 por re-anunciar cosas que no
          debia, y AS4134 por aceptarlas. </div>
        <div><br>
        </div>
        <div>Carlos</div>
        <div><br>
        </div>
        <div>Del tema de las mas especificas es normal (IMO), ya que a
          tus peers les anuncies o te anuncien mas especificas. </div>
        <div><br>
        </div>
        <div>Saludos,</div>
        <div>as</div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <div><br>
        </div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">On Mon, Jun 10, 2019 at 11:24
          AM Nicolas Antoniello <<a
            href="mailto:nantoniello@gmail.com" moz-do-not-send="true">nantoniello@gmail.com</a>>
          wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px
          0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div>
            <div dir="auto">Hola Carlos,</div>
          </div>
          <div dir="auto"><br>
          </div>
          <div dir="auto">Para mi no es ni leak ni hijack... pero bueno,
            cuando se sepa más sobre el caso (si se sabe) veremos.</div>
          <div dir="auto"><br>
          </div>
          <div dir="auto">Saludos,</div>
          <div dir="auto">Nico</div>
          <div dir="auto"><br>
          </div>
          <div><br>
            <div class="gmail_quote">
              <div dir="ltr" class="gmail_attr">El El lun, 10 de jun. de
                2019 a las 03:56, Carlos Marcelo Martinez Cagnazzo <<a
                  href="mailto:carlosm3011@gmail.com" target="_blank"
                  moz-do-not-send="true">carlosm3011@gmail.com</a>>
                escribió:<br>
              </div>
              <blockquote class="gmail_quote" style="margin:0px 0px 0px
                0.8ex;border-left:1px solid
                rgb(204,204,204);padding-left:1ex">
                <p dir="ltr" style="margin-top:0px;margin-bottom:0px">Es
                  un leak/hijack mas o menos normal, salvo ¿De dónde
                  salieron esas más específicas que no están en los
                  anuncios originales?</p>
                <br>
                <p dir="ltr" style="margin-top:0px;margin-bottom:0px">Ahí
                  está, me parece a mi, lo más interesante y "diferente"
                  de este caso. </p>
                <br>
                <p dir="ltr" style="margin-top:0px;margin-bottom:0px">/Carlos
                </p>
                <br>
                <br>
                <div
                  id="gmail-m_-6019735957394693391m_-6825063698584879747cm_signature">
                  via <a
href="https://cloudmagic.com/k/d/mailapp?ct=pa&cv=10.0.23&pv=9&source=email_footer_2"
                    target="_blank" moz-do-not-send="true">Newton Mail</a>
                </div>
                <div
                  class="gmail-m_-6019735957394693391m_-6825063698584879747cm_quote"
                  style="color:rgb(120,120,120)">On Sun, Jun 09, 2019 at
                  9:41pm, Jorge Villa <<a
                    href="mailto:villa@reduniv.edu.cu" target="_blank"
                    moz-do-not-send="true">villa@reduniv.edu.cu</a>>
                  wrote:</div>
                <br>
                <div
                  id="gmail-m_-6019735957394693391m_-6825063698584879747oldcontent"
                  style="background:rgb(255,255,255)">
                  <blockquote>
                    <div
                      class="gmail-m_-6019735957394693391m_-6825063698584879747WordSection1">
                      <p class="MsoNormal"><span>Definitivamente Nico.
                          La responsabilidad del incidente en realidad
                          es mas de quien lo origina (empresa X) que de
                          quien lo propaga (empresa J). Lo que sucede es
                          que simplemente, la empresa J aparece
                          manejando un tráfico que no tendría que
                          manejar, y la empresa J es China, y ya sabemos
                          como andan las cosas respecto a las empresas
                          chinas de tecnología; así que el efecto
                          noticioso de amplificación informativa, se va
                          a producir SI o SI. Si los 70 000 prefijos que
                          anunció la empresa X son legítimos, pues no
                          hay forma de que la empresa J no los acepte;
                          aunque tenga el filtrado correcto. Si hubiera
                          prefijos que X no tendría que anunciarle a J,
                          y la empresa J los acepta, ahí si habría
                          problemas de filtros en J, en adición al
                          problema original de la empresa X (que en
                          cualquier caso, sigue siendo la principal
                          responsable del incidente).</span></p>
                      <p class="MsoNormal"><span> </span></p>
                      <p class="MsoNormal"><span>Del articulo tampoco
                          queda claro quien bajó las rutas “malas” de la
                          tabla global, para recuperar el tráfico a su
                          estado normal, ni en que tiempo se comenzó el
                          proceso; ni tampoco hay información sobre si
                          todos los prefijos fueron corregidos de forma
                          simultánea o si fue un proceso paulatino,
                          donde los últimos prefijos terminaron de
                          “limpiarse” en un tiempo de 2 horas.</span></p>
                      <p class="MsoNormal"><span> </span></p>
                      <p class="MsoNormal"><span>Saludos,</span></p>
                      <p class="MsoNormal"><span>Jorge</span></p>
                      <div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
                        solid rgb(181,196,223);padding:3pt 0in 0in">
                        <p class="MsoNormal"><b><span
                              style="font-size:12pt;color:black">De: </span></b><span
                            style="font-size:12pt;color:black">LACNOG
                            <<a
                              href="mailto:lacnog-bounces@lacnic.net"
                              target="_blank" moz-do-not-send="true">lacnog-bounces@lacnic.net</a>>
                            en nombre de Nicolas Antoniello <<a
                              href="mailto:nantoniello@gmail.com"
                              target="_blank" moz-do-not-send="true">nantoniello@gmail.com</a>><br>
                            <b>Responder a: </b>Latin America and
                            Caribbean Region Network Operators Group
                            <<a href="mailto:lacnog@lacnic.net"
                              target="_blank" moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                            <b>Fecha: </b>domingo, 9 de junio de 2019,
                            5:34 p. m.<br>
                            <b>Para: </b>Latin America and Caribbean
                            Region Network Operators Group <<a
                              href="mailto:lacnog@lacnic.net"
                              target="_blank" moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                            <b>Asunto: </b>Re: [lacnog] BGP event sends
                            European mobile traffic through China
                            Telecom for 2 hours</span></p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <div>
                          <p class="MsoNormal">Sige sin quedarme claro
                            lo que pasó.</p>
                        </div>
                      </div>
                      <div>
                        <p class="MsoNormal">A ver: Empresa X tiene
                          peering con empresa J y esa misma empresa X le
                          publica a la empresa J un monton de sus
                          propias rutas (las de X) desagregadas de forma
                          que cuando J las propaga a Internet, si bien
                          el AS Path es mayor, gana la especificidad de
                          los prefijos... entoces tráfico que antes no
                          pasaba por J ahora pasa por J.</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">Cual es el problema? Como
                          yo lo veo, ninguno... la responsabilidad por
                          eso es de X pues bien podría ser una maniobra
                          operativa... lo que digo es que sigo sin ver
                          la responsabilidad de J.</p>
                      </div>
                      <div>
                        <p class="MsoNormal">En todo caso, si X publicó
                          prefijos que no eran de ellos, más
                          responsabilidad de X... pero hasta donde se no
                          se generaron agujeros negros sino que el
                          tráfico pasó por J y antes no lo hacía.... Y?</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">J no tiene capacidad de
                          provocar ese reenrutamiento sin hacer un
                          hijack (y hasta donde sabemos no fue ese el
                          caso). El único que puede provocar un
                          reenrutamiento así es el propio X (a drede o
                          por accidente).</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">Pensandolo bien si se puede
                          pero se me ocurre que hay que hacer cosas muy
                          raras utilizando por ejemplo MPLS o algo
                          asi... en fin, no es el caso tampoco porque
                          sabemos que los bloques se los publicó X a J.</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">Saludos,</p>
                      </div>
                      <div>
                        <p class="MsoNormal">Nico</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                        <div>
                          <div>
                            <p class="MsoNormal">El El dom, 9 de jun. de
                              2019 a las 20:39, Jorge Villa <<a
                                href="mailto:villa@reduniv.edu.cu"
                                target="_blank" moz-do-not-send="true">villa@reduniv.edu.cu</a>>
                              escribió:</p>
                          </div>
                          <blockquote
style="border-top:none;border-right:none;border-bottom:none;border-left:1pt
                            solid rgb(204,204,204);padding:0in 0in 0in
                            6pt;margin-left:4.8pt;margin-right:0in">
                            <div>
                              <div>
                                <p class="MsoNormal">Pues si, Carlos, es
                                  un caso bastante curioso, sobretodo
                                  porque según el artículo, quienes en
                                  realidad crearon el problema (o sea,
                                  los de Safe Host), aparecen exonerados
                                  de toda responsabilidad, y solo hay
                                  que prender fuego a China Telecom por
                                  propagar el anuncio incorrecto.
                                  Estamos hablando de 70 mil rutas
                                  incorrectas; así que tampoco fue un
                                  error simple. No se las
                                  caracteristicas del acuerdo de peering
                                  entre Safe Host y China Telecom; pero
                                  al parecer, permiten full routing y no
                                  solo intercambio de los prefijos
                                  propios de cada una de las partes.</p>
                                <p class="MsoNormal"> </p>
                                <p class="MsoNormal">Saludos,</p>
                                <p class="MsoNormal">Jorge</p>
                              </div>
                            </div>
                            <div>
                              <div>
                                <p class="MsoNormal"> </p>
                                <div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
                                  solid rgb(181,196,223);padding:3pt 0in
                                  0in">
                                  <p class="MsoNormal"><b><span
                                        style="font-size:12pt;color:black">De:
                                      </span></b><span
                                      style="font-size:12pt;color:black">LACNOG
                                      <<a
                                        href="mailto:lacnog-bounces@lacnic.net"
                                        target="_blank"
                                        moz-do-not-send="true">lacnog-bounces@lacnic.net</a>>
                                      en nombre de Carlos Marcelo
                                      Martinez Cagnazzo <<a
                                        href="mailto:carlosm3011@gmail.com"
                                        target="_blank"
                                        moz-do-not-send="true">carlosm3011@gmail.com</a>><br>
                                      <b>Responder a: </b>Latin America
                                      and Caribbean Region Network
                                      Operators Group <<a
                                        href="mailto:lacnog@lacnic.net"
                                        target="_blank"
                                        moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                      <b>Fecha: </b>domingo, 9 de junio
                                      de 2019, 11:00 a. m.<br>
                                      <b>Para: </b>Latin America and
                                      Caribbean Region Network Operators
                                      Group <<a
                                        href="mailto:lacnog@lacnic.net"
                                        target="_blank"
                                        moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                      <b>Asunto: </b>Re: [lacnog] BGP
                                      event sends European mobile
                                      traffic through China Telecom for
                                      2 hours</span></p>
                                </div>
                                <div>
                                  <p class="MsoNormal"> </p>
                                </div>
                                <p style="margin:0in 0in 0.0001pt">El
                                  hecho de que en el incidente aparecen
                                  prefijos más específicos que los que
                                  aparecen en los anuncios legítimos a
                                  mi juicio hace parecer que acá hubo
                                  algo más que un simple error. </p>
                                <p class="MsoNormal"> </p>
                                <p style="margin:0in 0in 0.0001pt">Un
                                  leak de rutas deja pasar los mismos
                                  prefijos pero con otro aspath. </p>
                                <p class="MsoNormal"> </p>
                                <p style="margin:0in 0in 0.0001pt">Salute</p>
                                <p class="MsoNormal"> </p>
                                <p style="margin:0in 0in 0.0001pt">Carlos</p>
                                <p class="MsoNormal"
                                  style="margin-bottom:12pt"> </p>
                                <div
id="gmail-m_-6019735957394693391m_-6825063698584879747m_-224007140225957541cm_signature">
                                  <p class="MsoNormal">via <a
href="https://cloudmagic.com/k/d/mailapp?ct=pa&cv=10.0.23&pv=9&source=email_footer_2"
                                      target="_blank"
                                      moz-do-not-send="true">Newton Mail</a>
                                  </p>
                                </div>
                                <div>
                                  <p class="MsoNormal"><span
                                      style="color:rgb(120,120,120)">On
                                      Sun, Jun 09, 2019 at 11:57am,
                                      Jorge Villa <<a
                                        href="mailto:villa@reduniv.edu.cu"
                                        target="_blank"
                                        moz-do-not-send="true">villa@reduniv.edu.cu</a>>
                                      wrote:</span></p>
                                </div>
                                <p class="MsoNormal"> </p>
                                <div
id="gmail-m_-6019735957394693391m_-6825063698584879747m_-224007140225957541oldcontent">
                                  <blockquote
                                    style="margin-top:5pt;margin-bottom:5pt">
                                    <p class="MsoNormal"
                                      style="background:white">Según el
                                      escrito, los suizos al parecer
                                      introdujeron mal un grupo de
                                      prefijos en su sesion BGP, y les
                                      propagaron esos errores a China
                                      Telecom, con quien hacen peering,
                                      y a su vez China Telecom debe
                                      haberlos propagado, y al tener
                                      prefijos mas especificos para un
                                      grupo de bloques, el trafico
                                      empezo a ir hacia alla.</p>
                                    <p class="MsoNormal"
                                      style="background:white"> </p>
                                    <p class="MsoNormal"
                                      style="background:white">Saludos,</p>
                                    <p class="MsoNormal"
                                      style="background:white">Jorge</p>
                                    <p class="MsoNormal"
                                      style="background:white"> </p>
                                    <div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
                                      solid rgb(181,196,223);padding:3pt
                                      0in 0in">
                                      <p class="MsoNormal"
                                        style="background:white"><b><span
style="font-size:12pt;color:black">De: </span></b><span
                                          style="font-size:12pt;color:black">LACNOG
                                          <<a
                                            href="mailto:lacnog-bounces@lacnic.net"
                                            target="_blank"
                                            moz-do-not-send="true">lacnog-bounces@lacnic.net</a>>
                                          en nombre de Nicolas
                                          Antoniello <<a
                                            href="mailto:nantoniello@gmail.com"
                                            target="_blank"
                                            moz-do-not-send="true">nantoniello@gmail.com</a>><br>
                                          <b>Responder a: </b>Latin
                                          America and Caribbean Region
                                          Network Operators Group <<a
href="mailto:lacnog@lacnic.net" target="_blank" moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                          <b>Fecha: </b>domingo, 9 de
                                          junio de 2019, 10:49 a. m.<br>
                                          <b>Para: </b>Latin America
                                          and Caribbean Region Network
                                          Operators Group <<a
                                            href="mailto:lacnog@lacnic.net"
                                            target="_blank"
                                            moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                          <b>Asunto: </b>Re: [lacnog]
                                          BGP event sends European
                                          mobile traffic through China
                                          Telecom for 2 hours</span></p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white"> </p>
                                    </div>
                                    <div>
                                      <div>
                                        <p class="MsoNormal"
                                          style="background:white">Pero
                                          que fue lo que configuraron
                                          para enrrutar tráfico al ASN
                                          de China... no me doy cuenta
                                          que hicieron.</p>
                                      </div>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white"> </p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white">Saludos,</p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white">Nico</p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white"> </p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white"> </p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"
                                        style="background:white"> </p>
                                      <div>
                                        <div>
                                          <p class="MsoNormal"
                                            style="background:white">El
                                            El dom, 9 de jun. de 2019 a
                                            las 15:50, Jorge Villa <<a
href="mailto:villa@reduniv.edu.cu" target="_blank"
                                              moz-do-not-send="true">villa@reduniv.edu.cu</a>>
                                            escribió:</p>
                                        </div>
                                        <blockquote
style="border-top:none;border-right:none;border-bottom:none;border-left:1pt
                                          solid
                                          rgb(204,204,204);padding:0in
                                          0in 0in 6pt;margin:5pt 0in 5pt
                                          4.8pt">
                                          <div>
                                            <div>
                                              <p class="MsoNormal"
                                                style="background:white">En
                                                efecto Nico, no estamos
                                                en presencia de
                                                hickjack. Se trata de
                                                una especie de “fat
                                                fingers” dentro del
                                                proveedor suizo Safe
                                                Host; quien fue
                                                realmente el origen del
                                                tema. Como quiera que
                                                andan los chinos “de
                                                moda” a partir de los
                                                enredos con Huawei, todo
                                                lo que pueda incluir a
                                                China se puede vender
                                                facilmente como noticia.
                                                El problema que veo, es
                                                que China Telecom es un
                                                proveedor de mucha
                                                envergadura como para no
                                                tener buenas politicas
                                                de filtrado en BGP (como
                                                comenta Darwin); que
                                                pienso, es el principal
                                                aprendizade de esta
                                                historia. Hoy les
                                                sucedió a ellos, mañana
                                                nos puede suceder a
                                                cualquiera de nosotros,
                                                así que habría que estar
                                                revisando en nuestras
                                                redes, cuan bien o mal
                                                tenemos todo
                                                configurado. </p>
                                              <p class="MsoNormal"
                                                style="background:white"> </p>
                                              <p class="MsoNormal"
                                                style="background:white">Saludos,</p>
                                              <p class="MsoNormal"
                                                style="background:white">Jorge</p>
                                            </div>
                                          </div>
                                          <div>
                                            <div>
                                              <p class="MsoNormal"
                                                style="background:white"> </p>
                                              <div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
                                                solid
                                                rgb(181,196,223);padding:3pt
                                                0in 0in">
                                                <p class="MsoNormal"
                                                  style="background:white"><b><span
style="font-size:12pt;color:black">De: </span></b><span
                                                    style="font-size:12pt;color:black">LACNOG
                                                    <<a
                                                      href="mailto:lacnog-bounces@lacnic.net"
                                                      target="_blank"
                                                      moz-do-not-send="true">lacnog-bounces@lacnic.net</a>>
                                                    en nombre de Darwin
                                                    Da Costa <<a
                                                      href="mailto:dacostadarwin@gmail.com"
                                                      target="_blank"
                                                      moz-do-not-send="true">dacostadarwin@gmail.com</a>><br>
                                                    <b>Responder a: </b>Latin
                                                    America and
                                                    Caribbean Region
                                                    Network Operators
                                                    Group <<a
                                                      href="mailto:lacnog@lacnic.net"
                                                      target="_blank"
                                                      moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                                    <b>Fecha: </b>domingo,
                                                    9 de junio de 2019,
                                                    4:43 a. m.<br>
                                                    <b>Para: </b>Latin
                                                    America and
                                                    Caribbean Region
                                                    Network Operators
                                                    Group <<a
                                                      href="mailto:lacnog@lacnic.net"
                                                      target="_blank"
                                                      moz-do-not-send="true">lacnog@lacnic.net</a>><br>
                                                    <b>Asunto: </b>Re:
                                                    [lacnog] BGP event
                                                    sends European
                                                    mobile traffic
                                                    through China
                                                    Telecom for 2 hours</span></p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white"> </p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white">Aunque
                                                  sea una posible mal
                                                  configuración, la
                                                  verdade es que las
                                                  reglas básicas de
                                                  “filtering” no se han
                                                  respetado por ninguna
                                                  de las partes.</p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white"> </p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white">“Hello
                                                  filtering”….</p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white"> </p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white">Saludos,</p>
                                              </div>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="background:white">Darwin.</p>
                                              </div>
                                              <p class="MsoNormal"
                                                style="background:white"> </p>
                                              <div>
                                                <p class="MsoNormal"
                                                  style="margin-bottom:12pt;background:white"> </p>
                                                <blockquote
                                                  style="margin-top:5pt;margin-bottom:5pt">
                                                  <div>
                                                    <p class="MsoNormal"
style="background:white">On 9 Jun 2019, at 06:14, Nicolas Antoniello
                                                      <<a
                                                        href="mailto:nantoniello@gmail.com"
                                                        target="_blank"
moz-do-not-send="true">nantoniello@gmail.com</a>> wrote:</p>
                                                  </div>
                                                  <p class="MsoNormal"
                                                    style="background:white"> </p>
                                                  <div>
                                                    <div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal"
style="background:white">Ojo que hasta donde se esto no fue hijack...
                                                          sino que
                                                          quienes
                                                          configuraron
                                                          mal algo (o
                                                          les ganaron
                                                          acceso a
                                                          equipamiento
                                                          de
                                                          operaciones)
                                                          fueron los
                                                          propios
                                                          Europeos.</p>
                                                      </div>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white"> </p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white">Habría que quitar la nube de incertidumbre que
                                                        hay en las
                                                        noticias sobre
                                                        esto y saber
                                                        bien que fue lo
                                                        que pasó.</p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white"> </p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white">Saludos,</p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white">Nico</p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white"> </p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white"> </p>
                                                    </div>
                                                    <div>
                                                      <p
                                                        class="MsoNormal"
style="background:white"> </p>
                                                      <div>
                                                        <div>
                                                          <p
                                                          class="MsoNormal"
style="background:white">El El dom, 9 de jun. de 2019 a las 06:23,
                                                          Alejandro
                                                          Acosta <<a
href="mailto:alejandroacostaalamo@gmail.com" target="_blank"
                                                          moz-do-not-send="true">alejandroacostaalamo@gmail.com</a>>
                                                          escribió:</p>
                                                        </div>
                                                        <blockquote
style="border-top:none;border-right:none;border-bottom:none;border-left:1pt
                                                          solid
                                                          rgb(204,204,204);padding:0in
                                                          0in 0in
                                                          6pt;margin:5pt
                                                          0in 5pt 4.8pt">
                                                          <p
                                                          class="MsoNormal"
style="background:white"><a
href="https://arstechnica.com/information-technology/2019/06/bgp-mishap-sends-european-mobile-traffic-through-china-telecom-for-2-hours/"
target="_blank" moz-do-not-send="true">https://arstechnica.com/information-technology/2019/06/bgp-mishap-sends-european-mobile-traffic-through-china-telecom-for-2-hours/</a><br>
                                                          <br>
_______________________________________________<br>
                                                          LACNOG mailing
                                                          list<br>
                                                          <a
                                                          href="mailto:LACNOG@lacnic.net"
target="_blank" moz-do-not-send="true">LACNOG@lacnic.net</a><br>
                                                          <a
                                                          href="https://mail.lacnic.net/mailman/listinfo/lacnog"
target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
                                                          Cancelar
                                                          suscripcion: <a
href="https://mail.lacnic.net/mailman/options/lacnog" target="_blank"
                                                          moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a></p>
                                                        </blockquote>
                                                      </div>
                                                    </div>
                                                    <p class="MsoNormal"
style="background:white">_______________________________________________<br>
                                                      LACNOG mailing
                                                      list<br>
                                                      <a
                                                        href="mailto:LACNOG@lacnic.net"
                                                        target="_blank"
moz-do-not-send="true">LACNOG@lacnic.net</a><br>
                                                      <a
                                                        href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                                        target="_blank"
moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
                                                      Cancelar
                                                      suscripcion: <a
                                                        href="https://mail.lacnic.net/mailman/options/lacnog"
                                                        target="_blank"
moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a></p>
                                                  </div>
                                                </blockquote>
                                              </div>
                                              <p class="MsoNormal"
                                                style="background:white"><br>
_______________________________________________ LACNOG mailing list <a
href="mailto:LACNOG@lacnic.net" target="_blank" moz-do-not-send="true">LACNOG@lacnic.net</a>
                                                <a
                                                  href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                                  target="_blank"
                                                  moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                                                Cancelar suscripcion: <a
href="https://mail.lacnic.net/mailman/options/lacnog" target="_blank"
                                                  moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                                              </p>
                                            </div>
                                          </div>
                                          <p class="MsoNormal"
                                            style="background:white">_______________________________________________<br>
                                            LACNOG mailing list<br>
                                            <a
                                              href="mailto:LACNOG@lacnic.net"
                                              target="_blank"
                                              moz-do-not-send="true">LACNOG@lacnic.net</a><br>
                                            <a
                                              href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                              target="_blank"
                                              moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
                                            Cancelar suscripcion: <a
                                              href="https://mail.lacnic.net/mailman/options/lacnog"
                                              target="_blank"
                                              moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a></p>
                                        </blockquote>
                                      </div>
                                    </div>
                                    <p class="MsoNormal"
                                      style="background:white">_______________________________________________
                                      LACNOG mailing list <a
                                        href="mailto:LACNOG@lacnic.net"
                                        target="_blank"
                                        moz-do-not-send="true">LACNOG@lacnic.net</a>
                                      <a
                                        href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                        target="_blank"
                                        moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                                      Cancelar suscripcion: <a
                                        href="https://mail.lacnic.net/mailman/options/lacnog"
                                        target="_blank"
                                        moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                                    </p>
                                    <p class="MsoNormal"
                                      style="background:white"><br>
_______________________________________________ LACNOG mailing list <a
                                        href="mailto:LACNOG@lacnic.net"
                                        target="_blank"
                                        moz-do-not-send="true">LACNOG@lacnic.net</a>
                                      <a
                                        href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                        target="_blank"
                                        moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                                      Cancelar suscripcion: <a
                                        href="https://mail.lacnic.net/mailman/options/lacnog"
                                        target="_blank"
                                        moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                                    </p>
                                  </blockquote>
                                </div>
                                <p class="MsoNormal">_______________________________________________
                                  LACNOG mailing list <a
                                    href="mailto:LACNOG@lacnic.net"
                                    target="_blank"
                                    moz-do-not-send="true">LACNOG@lacnic.net</a>
                                  <a
                                    href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                    target="_blank"
                                    moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                                  Cancelar suscripcion: <a
                                    href="https://mail.lacnic.net/mailman/options/lacnog"
                                    target="_blank"
                                    moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                                </p>
                              </div>
                            </div>
                            <p class="MsoNormal">_______________________________________________<br>
                              LACNOG mailing list<br>
                              <a href="mailto:LACNOG@lacnic.net"
                                target="_blank" moz-do-not-send="true">LACNOG@lacnic.net</a><br>
                              <a
                                href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                                target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
                              Cancelar suscripcion: <a
                                href="https://mail.lacnic.net/mailman/options/lacnog"
                                target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a></p>
                          </blockquote>
                        </div>
                      </div>
                      <p class="MsoNormal">_______________________________________________
                        LACNOG mailing list <a
                          href="mailto:LACNOG@lacnic.net"
                          target="_blank" moz-do-not-send="true">LACNOG@lacnic.net</a>
                        <a
                          href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                          target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                        Cancelar suscripcion: <a
                          href="https://mail.lacnic.net/mailman/options/lacnog"
                          target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                      </p>
                    </div>
                    <br>
                    _______________________________________________
                    LACNOG mailing list
                    <a href="mailto:LACNOG@lacnic.net" target="_blank"
                      moz-do-not-send="true">LACNOG@lacnic.net</a>
                    <a
                      href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                      target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
                    Cancelar suscripcion: <a
                      href="https://mail.lacnic.net/mailman/options/lacnog"
                      target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a>
                  </blockquote>
                </div>
                _______________________________________________<br>
                LACNOG mailing list<br>
                <a href="mailto:LACNOG@lacnic.net" target="_blank"
                  moz-do-not-send="true">LACNOG@lacnic.net</a><br>
                <a
                  href="https://mail.lacnic.net/mailman/listinfo/lacnog"
                  rel="noreferrer" target="_blank"
                  moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
                Cancelar suscripcion: <a
                  href="https://mail.lacnic.net/mailman/options/lacnog"
                  rel="noreferrer" target="_blank"
                  moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a><br>
              </blockquote>
            </div>
          </div>
          _______________________________________________<br>
          LACNOG mailing list<br>
          <a href="mailto:LACNOG@lacnic.net" target="_blank"
            moz-do-not-send="true">LACNOG@lacnic.net</a><br>
          <a href="https://mail.lacnic.net/mailman/listinfo/lacnog"
            rel="noreferrer" target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
          Cancelar suscripcion: <a
            href="https://mail.lacnic.net/mailman/options/lacnog"
            rel="noreferrer" target="_blank" moz-do-not-send="true">https://mail.lacnic.net/mailman/options/lacnog</a><br>
        </blockquote>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
LACNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:LACNOG@lacnic.net">LACNOG@lacnic.net</a>
<a class="moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/listinfo/lacnog">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
Cancelar suscripcion: <a class="moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/options/lacnog">https://mail.lacnic.net/mailman/options/lacnog</a>
</pre>
    </blockquote>
  </body>
</html>