+1 - you can filter ASes but someone can still send a crazy as path with valid ASes and cause you chaos.
Neil. Sent from my iPad > On 30 Oct 2015, at 17:27, Nick Hilliard <n...@foobar.org> wrote: > >> On 30/10/2015 16:57, James Bensley wrote: >> What do others have, what have I missed? > > the asn32 filter can be written as "_42........_", or perhaps "_42[0-9]{8}_" > > TBH, I'd question the value of filtering weird asns. What matters is > filtering out weird prefixes. If you filter out weird ASNs, all you're > doing is chewing up the CPU on your RP. > > Nick >