+1 for flowspec.
meanwhile flowspec is industry standard..

Hi!

hmm - i guess there is no news about that issue?
did anyone find a workaround for that?


and i thought mikrotik is useable as a bgp border.

yes, i can confirm that! thank you! What's new in 6.38rc31 (2016-Nov-15 12:51): !) ipsec - added IKEv2 EAP RADIUS passthrough authentication for responder (cli only); !) ipsec - added IKEv2 experimental support with pre-shared-key and rsa-signature authentication methods (cli only); *) bgp - do not ...

and another poor guy got *ucked by that BUG.

http://forum.mikrotik.com/viewtopic.php?f=14&t=113170

Please fix this ASAP!

welcome to the club, you are trying to filter with bgp communities and thats just not working (as the internet is broken -> community 0:0 flying around) :) -> 10 chain=atm-out protocol=bgp bgp-communities=100:666 invert-match=no action=accept set-bgp-prepend-path="" set-bgp-communities=247...

Hi there, Currently there are around 2000 IP prefixes in the Internet table with an illegal value 0:0 community set. -> http://blog.ipspace.net/2008/03/misteries-of-internet-bgp-community.html With all other vendors, thats not a big problem, but with Mikrotik it breaks the matching algorithm for the...