On Sat, Feb 18, 2012 at 23:18, Michael Mol <mike...@gmail.com> wrote: >
---- >8 snippage > > And it's not so easy to take the Internet down with injected BGP > routes any more, either; most network operators apply some sort of > filtering. > Yes, there *are* filters against injecting BGP from non-trusted sources. But if the government somehow controls a Network Service Provider (NSP, the maintainers of Internet backbones), they can easily poison the BGP updates. Routers connected to the NSP will happily accept the poisoned updates since they rely on the NSP to provide "big picture" traffic management. Rgds, -- FdS Pandu E Poluan ~ IT Optimizer ~ • LOPSA Member #15248 • Blog : http://pepoluan.tumblr.com • Linked-In : http://id.linkedin.com/in/pepoluan