Free eBGP for EU countries

RouterOS General
1
  • MODS: Please remove if inappropriate *

Hi Everyone,

I’ve been running a eBGP service for quite some time privately to protect my own network infrastructure via BGP, instead of using Firewall ACLs. It is significantly less resource intensive to null-route a IP address, vs. having to firewall it. Updates are also a lot less disruptive (imho). Not going to go into the merits of firewalling vs. BGP, I am offering a service as is.

To this effect, I am with immediate effect making my service available for free to any member inside EU controlled or NATO controlled territory, as well as resources inside Ukraine. The IP lists are automatically updated, every hour, and updates are pushed out via eBGP automatically. Every IP block is community tagged to allow for your own preferences to what you want to filter / drop. Yes, the service works very similar to the BOGONs service provided by Team CYMRU’s BOGON BGP Feed (https://team-cymru.com/community-services/bogon-reference/bogon-reference-bgp/). The feed currently consists of ~33K routes, I expect this number to go up to around 60K over the next couple of days.

The following communities are provided:
65000:5001 - BOGONs (Team CYMRU’s list, via BGP and redistributed as is)
65000:5002 - Spamhaus DROP list
65000:5003 - Spamhaus EDROP list
65000:5004 - https://lists.blocklist.de/lists/all.txt
65000:5005 - https://www.dan.me.uk/tornodes (relays and exit nodes are included)
65000:5006 - https://feeds.dshield.org/block.txt
65000:5007 - Active list of IP addresses currently scanning / attacking Ukrainian Network Resources (data supplied by greynoise.io, redistributed with permission)
65000:5008 - https://www.abuseipdb.com/, with permission. A reputation rating of >60% required to be listed in the eBGP feed.

I am not going to actively monitor the forum. Please contact me at ukraine curlythingy opticnetworks dottythingy net

  1. You do NOT need a public ASN, we will accommodate you on a private ASN if you don’t have your own ASN.
  2. You DO need a public, static IP address (again, if absolutely required we will make a plan to do the eBGP via a VPN).
  3. Data is provided via multi-path eBGP only (MD5 passwords not available due to NATing).
  4. Please do NOT send any advertisements to us, we don’t want it, we don’t need it.

Thanks,