+1 - you can filter ASes but someone can still send a crazy as path with valid 
ASes and cause you chaos.

Neil.

Sent from my iPad

> On 30 Oct 2015, at 17:27, Nick Hilliard <n...@foobar.org> wrote:
> 
>> On 30/10/2015 16:57, James Bensley wrote:
>> What do others have, what have I missed?
> 
> the asn32 filter can be written as "_42........_", or perhaps "_42[0-9]{8}_"
> 
> TBH, I'd question the value of filtering weird asns.  What matters is
> filtering out weird prefixes.  If you filter out weird ASNs, all you're
> doing is chewing up the CPU on your RP.
> 
> Nick
> 

Reply via email to