Route received from reflector:
UbH afi=ip4 contribution=unreachable dst-address=216.40.80.0/20
routing-table=main pref-src=172.16.0.8 gateway=192.0.2.1
check-gateway=arp distance=200 scope=40 target-scope=30
belongs-to="bgp-IP-172.31.255.2"
bgp.peer-cache-id=*2C0003B .as-path="65332"
.communities=857:0,no-export,65332:888,blackhole,857:65533
.local-pref=100 .atomic-aggregate=no .origin=igp
debug.fwp-ptr=0x2031D9C0
The incoming filters in this case effectively sets the pref-src and check-gateway attributes. no-export and blackhole communities are the well-known ones and received from the route reflectors.
The route is NOT being installed in any way due to being considered unreachable.
The 192.0.2.1 destination gateway is set because in BGP (as far as I could determine) a route has to have a GW. On the linux hosts involved we simply add the following static route which results in the bogons from cymru being null routed:
ip ro sh 192.0.2.1: blackhole 192.0.2.1
in frr: ip route 192.0.2.1/32 Null0
We tried this on RouterOS 7 to no effect:
As B afi=ip4 contribution=active dst-address=192.0.2.1/32 routing-table=main
pref-src="" immediate-gw="" distance=1 scope=30 target-scope=10
belongs-to="static"
Any suggestions as to how to take the blackhole routes as received from the route servers and actually install blackhole/unreachable routes into the routing table?