Aqui você vê as diferenças entre duas revisões dessa página.
| Ambos lados da revisão anterior Revisão anterior Próxima revisão | Revisão anterior | ||
|
docs:bgp-filter-examples [2019/01/22 11:10] marcelo [reject_bogon_asns] |
docs:bgp-filter-examples [2019/01/22 11:21] (atual) marcelo [reject_bogon_prefixes] |
||
|---|---|---|---|
| Linha 29: | Linha 29: | ||
| </code> | </code> | ||
| ===== reject_bogon_prefixes ===== | ===== reject_bogon_prefixes ===== | ||
| - | ===== reject_long_aspaths ===== | + | <code>whois -h whois.radb.net fltr-martian</code> |
| + | <code> | ||
| + | policy-options { | ||
| + | prefix-list BOGONS_v4 { | ||
| + | 0.0.0.0/8; | ||
| + | 10.0.0.0/8; | ||
| + | 100.64.0.0/10; | ||
| + | 127.0.0.0/8; | ||
| + | 169.254.0.0/16; | ||
| + | 172.16.0.0/12; | ||
| + | 192.0.2.0/24; | ||
| + | 192.88.99.0/24; | ||
| + | 192.168.0.0/16; | ||
| + | 198.18.0.0/15; | ||
| + | 198.51.100.0/24; | ||
| + | 203.0.113.0/24; | ||
| + | 224.0.0.0/4; | ||
| + | 240.0.0.0/4; | ||
| + | } | ||
| + | policy-statement BGP_FILTER_IN { | ||
| + | term IPv4 { | ||
| + | from { | ||
| + | prefix-list BOGONS_v4; | ||
| + | } | ||
| + | then reject; | ||
| + | } | ||
| + | } | ||
| + | } | ||
| + | </code> | ||
| ===== reject_transit_paths ===== | ===== reject_transit_paths ===== | ||
| + | <code> | ||
| + | policy-options { | ||
| + | policy-statement bgp-import-policy { | ||
| + | term no-transit-leaks { | ||
| + | from as-path no-transit-import-in; | ||
| + | then reject; | ||
| + | } | ||
| + | } | ||
| + | } | ||
| + | |||
| + | as-path no-transit-import-in ".* (174|209|701|702|1239|1299|2914|3257|3320|3356|3549|3561|4134|5511|6453|6461|6762|7018) .*"; | ||
| + | </code> | ||
| ===== reject_small_prefixes ===== | ===== reject_small_prefixes ===== | ||
| + | <code> | ||
| + | policy-options { | ||
| + | policy-statement bgp-import-policy { | ||
| + | term reject_too_small_prefixes_v4 { | ||
| + | from { | ||
| + | route-filter 0.0.0.0/0 prefix-length-range /25-/32; | ||
| + | } | ||
| + | then { | ||
| + | reject; | ||
| + | } | ||
| + | } | ||
| + | } | ||
| + | } | ||
| + | </code> | ||