Modify BGP AS Path

2010-12-31 Thread Tarig Ahmed
Dear all Hi Is there any way to change AS Path "no prepend". I am in a situation needs some Prifixes to look like it comes from my ASN ( not private ASN). Thanks

Re: Modify BGP AS Path

2010-12-31 Thread Tarig Ahmed
, Scott Morris wrote: Well, you could always aggregate them (even same prefix) in your own ASN and that would generate a fresh version of the route... Scott On 12/31/10 9:34 AM, Tarig Ahmed wrote: Dear all Hi Is there any way to change AS Path "no prepend".

Re: Router only speaks IGP in BGP network

2011-01-03 Thread Tarig Ahmed
On Jan 3, 2011, at 8:02 PM, Jeff Aitken wrote: On Sat, Dec 25, 2010 at 08:52:42AM -0500, ML wrote: If you're only redistributing 10 prefixes into OSPF? Problem? I know I'm a little late to this thread, but figured I'd point out one reason why this can be very dangerous: In IOS, you use a

Re: How many legitimate cases when Origin AS in BGP announcement changed by another AS?

2011-01-04 Thread Tarig Ahmed
st at nanog-ow...@nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. Re: Router only speaks IGP in BGP network (Tarig Ahmed) 2. Software For Telcos (jacob miller) 3. 2010 IPv4 (and IPv6)

Spamming and ssh attack from a customers

2011-01-06 Thread Tarig Ahmed
hi all I am receiving emails from many servers saying that: this ip (from a customer) is trying to attacking one of our servers. Is it appropriate to filter ssh, telnet, and smtp from my customers, or just forward the message to my customer contact persons? Thanks in advance.. Tarig Yass

Re: asymmetric routes/security concerns/Fortinet

2011-01-08 Thread Tarig Ahmed
Tarig Yassin Ahmed On Jan 7, 2011, at 10:45 PM, Anthony Pardini wrote: You can allow asymmetric traffic on the Fortinet, but you lose some functionality. Firewalls aren't routers and pretty much all of them behave in the similar manner. Hi I think u can solve this issue only by addin

Is NAT can provide some kind of protection?

2011-01-12 Thread Tarig Ahmed
We have wide range of Public IP addresses, I tried to assign public ip directly to a server behined firewall( in DMZ), but I have been resisted. Security guy told me is not correct to assign public ip to a server, it should have private ip for security reasons. Is it true that NAT can provi

Re: Is NAT can provide some kind of protection?

2011-01-12 Thread Tarig Ahmed
In fact our firewall is stateful. This is why I thought, we no need to Nat at least our servers. Tarig Yassin Ahmed On Jan 12, 2011, at 4:59 PM, Nick Hilliard wrote: On 21/03/2007 09:41, Tarig Ahmed wrote: Is it true that NAT can provide more security? No. Your security person is

how statefull firewall works for udp?

2011-01-21 Thread Tarig Ahmed
Dear All Hi Default configuration for statefull firewall is to allow traffic form TRUST ZONE to UNTRUST ZONE. As I Know those device will use some feilds in the TCP Header. But, how the firewall will handle this policy for none TCP traffics (udp, icmp, and IPsec)? I think understanding t