Hi Marek, if you are searching for decent BGP filters you may want consult a project wiki [1]. That filters seems to be fine for most of the IPv4 cases. For the IPv6 martians you might want to use a fltr-martian6 object in RIPE-DB to modify a filter found in wiki.
As for the private ASN, make sure that you don't have "allow local as [number]" present in neighbor configuration. By default bird should not accept any route with private ASN. Other than that, the route seems fine to me. Sincerely Martin [1] https://gitlab.labs.nic.cz/labs/bird/wikis/BGP_filtering Dne čtvrtek 24. srpna 2017 14:22:02 CEST, Marek Królikowski napsal(a): > Hello Guys, > Anyone create maybe a good filters for BIRD IPv6 upstreams? > I just add this to my import filter: > import filter { > if bgp_path.len > 49 then reject; > if (net.len < 16) || (net.len > 48) then reject; > accept; > }; > > But i saw i get strange routing: > root@it-bgp:~# birdc6 show route 2404:1710::/28 > BIRD 1.6.3 ready. > 2404:1710::/28 via 2a02:XXXX:XXXX:1 on eth0 [Italy 13:52:47 from > 2a02:XXXX:XXXX::2] * (100/?) [AS65332i] > > Anyone got any good filter to block something like this? > > Best Regards > Marek
signature.asc
Description: This is a digitally signed message part.
