  fcisler Premium join:2004-06-14 Riverhead, NY
| Trusted Networks
Wouldn't you have to be somewhere INSIDE a DC? More specifically, within a trusted route/network? I'd find it an extremely bad practice to accept any BGP routes that I didn't trust....
Don't most ISP's filter BGP before it reaches a client's subnet? Unless they are accepting BGP routes from a client, why not block them? seems rather simple....
This seems like it could be a bigger hole - but unlike DNS, I would venture to say that 75% of most hosts wouldn't have the connectivity to do this. |