Why don't you block all rackspace prefixes on the border router ? You could use an acces-list or null route the prefixes. -- Best regards, Adrian Minta