-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok Henning.

I'm using 3.9, and my config is:

group "peering ASXXXX" {
        remote-as XXXX
        neighbor $principal {
                descr   "Link Principal"
                announce all
                local-address $mypeer1
                depend on carp1
                set metric 1
                set localpref 200
         }
        neighbor $backup {
                descr "Link BKP"
                announce all
                local-address $mypeer2
                depend on carp2
                set metric 10
                set localpref 100
         }
}

group "peering bogon" {
        remote-as 65333
        neighbor $peer_bogon1 {
                descr "Peering Bogon 1"
                local-address $my_bogon
                depend on carp0
                multihop 64
                announce none
                max-prefix 1000
                 tcp md5sig password XXXXX
       }
        neighbor $peer_bogon2 {
                descr "Peering Bogon 2"
                local-address $my_bogon
                depend on carp0
                multihop 64
                announce none
                max-prefix 1000
                tcp md5sig password XXXX
        }
}




# filter out prefixes longer than 24 or shorter than 8 bits
deny from any
allow from any prefixlen 8 - 24


match to $principal set community XXXX:200
match to $backup set community XXXX:100

#BOGON
allow from any community 65333:888 set pftable "bogons"
allow from any community 65333:888 set nexthop blackhole


# do not accept a default route
deny from any prefix 0.0.0.0/0

# filter bogus networks
deny from any prefix 10.0.0.0/8 prefixlen >= 8
deny from any prefix 172.16.0.0/12 prefixlen >= 12
deny from any prefix 192.168.0.0/16 prefixlen >= 16
deny from any prefix 169.254.0.0/16 prefixlen >= 16
deny from any prefix 192.0.2.0/24 prefixlen >= 24
deny from any prefix 224.0.0.0/4 prefixlen >= 4
deny from any prefix 240.0.0.0/4 prefixlen >= 4


The only relevant messages in the log before the crash is:

Feb 25 21:53:27 my_router bgpd[8131]: neighbor 38.229.0.5 (Peering Bogon
1): state change Active -> OpenSent, reason: Connection opened
Feb 25 21:53:27 my_router bgpd[8131]: neighbor 38.229.0.5 (Peering Bogon
1): state change OpenSent -> OpenConfirm, reason: OPEN message received
Feb 25 21:53:27 my_router bgpd[8131]: neighbor 38.229.0.5 (Peering Bogon
1): state change OpenConfirm -> Established, reason: KEEPALIVE message
received
Feb 25 21:53:28 my_router bgpd[3075]: fatal in RDE:
rde_dispatch_imsg_parent: pipe closed
Feb 25 21:53:28 my_router bgpd[8131]: fatal in SE:
session_dispatch_imsg: pipe closed: Connection refused

But, i have a lot os this messages all the time:

Feb 26 09:02:06 my_router bgpd[7117]: neighbor XXXX (ASXXXX) withdraw
87.236.67.0/24
Feb 26 09:02:06 my_router bgpd[7117]: neighbor XXXX (ASXXXX) withdraw
87.236.66.0/23


[]'s
Nadal


"Nco discuta com idiotas, eles te levam ati o nmvel deles e te vencem
por serem experientes"

+-------------------------------------------------------+
|  Anderson Nadal <nadal@ondacorp.com.br> - CCNA/RHCE   |
|                Coordenador Tecnico                    |
|          Fone: + 55 41 3331 8200                      |
|          FAX:     + 55 41 3331 8256                      |
|                     OndaRPC                           |
|               www.ondarpc.com.br                      |
|            Registered Linux User: 56841               |
|     PGP KEY: www.keyserver.net KEY ID 6ABB668D        |
+-------------------------------------------------------+



Henning Brauer escreveu:
quoted text
> * Anderson Nadal <security@onda.com.br> [2007-02-26 05:28]:
>> I found a possible OpenBGPD bug.
>
> you're petty much leaving out all relevant information.
> you don't mention which version you run, you don't show your config,
> and you don't show complete logs at time of failure. impossible to
> track down possible bugs like this.
>
> that said, chances are very good this is fixed in -current/4.1.
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF4x9kLQAusHT90XQRAru6AKC4vsg8pCcBi/ZIj+8g2QXBKu17AQCfZpsu
H6fXMN/4UzQmG1gM0EWnYvc=
=J3k7
-----END PGP SIGNATURE-----