Re: Bogon Filter - Please check for 77/8 78/8 79/8
Florian Lohoff wrote: > Hi *, > in august IANA handed 77/8 78/8 79/8 to RIPE which started handing out > those ranges 2 months ago. > > We (Telefonica Deutschland AS6805) are seeing a lot of reachability problems > most likely caused by not updated bogon filters. > > For testing purposes 77.181.114.4 aka bogon.mediaways.net > is up for icmp/http. > > Please check and possibly update your filters. > > Flo (aka [EMAIL PROTECTED]) To facilitate "de-bogonising" the RIPE NCC advertises some of the prefixes from the newly allocated ranges from our RIS beacons. We do this for a few months before starting allocating them to LIRs. http://www.ris.ripe.net/debogon/debogon.html Andrei Robbachevsky RIPE NCC
Re: anycast roots
Bill, [EMAIL PROTECTED] wrote: Helsinki (FI); Geneva (CH). www.root-servers.org is up to date. for those nodes that choose to use root-servers.org as a publication method, that might be true. I take your note to mean that www.root-servers.org is up to date wrt the publication of deployed sites for the K server. Yes, that's what I meant. Andrei Don't presume to speak for the other operators please. -- bill Elmar. Andrei Robachevsky RIPE NCC
Re: anycast roots
Elmar K. Bins wrote: [EMAIL PROTECTED] (Kurt Erik Lindqvist) wrote: On 2004-11-12, at 02.53, Randy Bush wrote: which roots are anycast? c f i j k? b m k (London, Amsterdam, Frankfurt) K is also in Athens (GR); Doha (QA); Milan (IT); Reykjavik (IS); Helsinki (FI); Geneva (CH). www.root-servers.org is up to date. Elmar. Andrei Robachevsky RIPE NCC
Re: Question for WHOIS query
Dan Lockwood wrote: Where can a person go to get a "one stop" WHOIS query for AS and prefix information instead of trying ARIN, then RIPE, etc? RIPE database mirrors RADB, APNIC, ARIN, VERIO and JPIRR. You may use '-a' flag with whois query to search through all the sources. Thanks, Dan Regards, Andrei Robachevsky RIPE NCC
Re: Hijacked IP space.
Larry J. Blunk wrote: On Tue, 2003-11-04 at 10:51, Randy Bush wrote: Those options are not mutually exclusive, and, while I agree that it would be better if the RIR's accepted generic GPG keys along the lines of what RADB does, the X.509 certificate is not a bad first step. At least it's better than Mail-From or Crypt-PW. Should we, as a community, register with RIR's with PGP. Each of the RIRs has either already established, or is in the process of establishing, a CA for that purpose. Please use them. thanks, but i choose to have my peers certify my identity, not the rirs the rirs already accept pgp certs. and i use them, as do all security-conscious registrants. i was disagreeing with woody's pushing x.509 certs to the exclusion of pgp certs. randy --- I would note that the RIPE NCC, while implementing X.509 support, is moving away from the concept of running their own CA. Their X.509 support will be very "PGP-like". See the following for details - http://www.ripe.net/ripe/meetings/ripe-46/presentations/ripe46-db-x509.pdf Yes and no. For the RIPE Database authentication pgp and x.509 will be equally accepted with no CA involved as such. This is different from x.509 certificates the RIPE NCC issues for the members, only to authenticate themselves while accessing RIPE NCC services. Thanks, Andrei Robachevsky RIPE NCC
RIPE NCC network affected by the DDoS attack
Dear Colleagues, Starting from 14:00 UTC today, 27 February, RIPE NCC network suffered a large DDoS attack. It was a distributed ICMP echo attack. The attack caused various congestion related problems for the RIPE NCC's network, to the extent that our BGP peering sessions were affected, and non-ICMP traffic was being randomly dropped. The attack was successfully mitigated with cooperation of our peer networks at AMS-IX. Network condition returned back to normal at 16:30 UTC. As a result some of our services, including www.ripe.net (web), whois.ripe.net (RIPE Database), ns.ripe.net (DNS) and ftp.ripe.net (FTP) were not accessible during this timeframe. Now all services are back to normal. Regards, Andrei Robachevsky CTO, RIPE NCC
Re: IRR listing of IANA-reserved, a question..
Daniel, Daniel Karrenberg wrote: > Speaking for myself too: [...] > > I know that the RIRs have efforts underway to publish such authoritative lists. > I do not know the exact status of this work. But I fully agree with your requirement > for a *single* *authoritative* list. > Yes, we at the RIPE NCC are working on such list. However the task, as you said, is not as easy as it seems to be. We have to be confident in the data we publish and this requires some work especially regarding early registrations. There are also efforts by the RIRs to make allocation records more accurate and appearing in the right RIR, the ERX project for instance http://www.arin.net/registration/erx/index.html. > Of course I would use it in the routers I operate. However these are not significant > to many peoiple these days. > > Daniel > > PS: I do not care at all about the format as long as it is readily machine parseable. > > Daniel Regards, Andrei Robachevsky DB Group Manager RIPE NCC
