RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-15 Thread Barry Greene (bgreene)


- We have this source:
http://www.iana.org/assignments/ipv4-address-space

- We source URLs for each of the RIRs in the prefix filter templates:


ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template
s/

http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-loose.htm

http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter-strict.htm

- We have the Bogon Router Server:

http://www.cymru.com/BGP/bogon-rs.html

- We have the RIPE project to help with the migration:

http://www.ris.ripe.net/debogon/
 
- We have the RADB Filters:


http://www.radb.net/cgi-bin/radb/whois.cgi?obj=MAINT-BOGON-FILTERS

- We have the RIPE DB Filters:


http://www.ripe.net/perl/whois?searchtext=MAINT-BOGON-FILTERSform_type=
simple


- And there is DNS and E-mail notifications ..


All of this is listed at http://www.cymru.com/Bogons/index.html


So what would be helpful are people who say I've done everything (or
some of the things) off the Bogon Team page and think there is a better
way. The core problem right now are that too many organizations are
doing nothing to maintain policy once that policy choice has been
selected.






 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of David Conrad
 Sent: Thursday, December 14, 2006 4:50 PM
 To: [EMAIL PROTECTED]
 Cc: nanog@merit.edu
 Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8
 
 
 Hi,
 
  or LDAP could be used ...
 
 I was wondering when this would show up... :-)
 
  If IANA and the RIRs would step up to the plate and provide an 
  authoritative data source identifying which address ranges 
 have been 
  issued for use on the Internet then bogon lists would not 
 be needed at 
  all.
  ... IANA would be the authoritative source for stuff like RFC 1918 
  address ranges and other non-RIR ranges.
 
 IANA has a project along these lines at the earliest stage of 
 development (that is, we're trying to figure out if this is a 
 good idea and if so, the best way to implement it).  I'd be 
 interested in hearing opinions (either publicly or privately) 
 as to what IANA should do here.
 
  One wonders whether it might not be more effective in the 
 long run to 
  sue ICANN/IANA rather than suing completewhois.com.
 
 Sigh.  What is the IOS command to disable lawyers again?
 
 Rgds,
 -drc
 


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-15 Thread Jeroen Massar
Barry Greene (bgreene) wrote:
[..list of good things..]

 So what would be helpful are people who say I've done everything (or
 some of the things) off the Bogon Team page and think there is a better
 way. The core problem right now are that too many organizations are
 doing nothing to maintain policy once that policy choice has been
 selected.

As Esmerelda the frog would say: S-BGP (*1) is the better way.

Any ideas when Cisco is going to drink the cool-aid to get hooked in
that and provide that to it's users? (Although one source told me that
Cisco is not more the king of the core internet and that it got taken
over by another vendor who should set steps in that direction first..)

Of course the steps that sidr(*2) is taking is also a step in the right
direction, but might be quite a slow one when people wanted this almost
10 years ago(*3) but that is the internet it seems. Running code is
important, but clearly not when it could hurt people's pockets or when
there is no real actual interest in solving this problem. That seems to
be the real core problem: There is enough money being earned by being
able to announce bogon routes and there is not enough money that can be
earned back by upgrading hardware/software to implement those checks.
Marketing 101 it seems, nothing technical to see here.

The policy can be handled by a limited amount of organizations: IANA 
the RIR's, there is only 6 of them, of which APNIC, with much thanks to
the efforts by Geoff Huston(*4) doing experiments already.

Greets,
 Jeroen

*1) http://www.ir.bbn.com/sbgp/
*2) http://www.ietf.org/html.charters/sidr-charter.html
*3) http://www.ir.bbn.com/sbgp/s-bgp-briefing/sld003.htm
*4) http://kahuna.telstra.net/presentations/2006-11-27-route-secure.pdf
http://kahuna.telstra.net/presentations/2006-11-03-caida-wide.pdf
and others: http://kahuna.telstra.net/presentations/index.html




signature.asc
Description: OpenPGP digital signature


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-14 Thread David Conrad


Hi,


or LDAP could be used ...


I was wondering when this would show up... :-)


If IANA and the RIRs would step up to the plate and
provide an authoritative data source identifying which
address ranges have been issued for use on the Internet
then bogon lists would not be needed at all.
... IANA would be the authoritative source for
stuff like RFC 1918 address ranges and other non-RIR ranges.


IANA has a project along these lines at the earliest stage of  
development (that is, we're trying to figure out if this is a good  
idea and if so, the best way to implement it).  I'd be interested in  
hearing opinions (either publicly or privately) as to what IANA  
should do here.



One wonders whether it might not be more effective in the
long run to sue ICANN/IANA rather than suing completewhois.com.


Sigh.  What is the IOS command to disable lawyers again?

Rgds,
-drc



Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-14 Thread Roland Dobbins



On Dec 14, 2006, at 4:50 PM, David Conrad wrote:

IANA has a project along these lines at the earliest stage of  
development (that is, we're trying to figure out if this is a good  
idea and if so, the best way to implement it).  I'd be interested  
in hearing opinions (either publicly or privately) as to what IANA  
should do here.


Are IANA considering operating a BGP routeserver infrastructure?   
What about LDAP and other mechanisms?


---
Roland Dobbins [EMAIL PROTECTED] // 408.527.6376 voice

All battles are perpetual.

   -- Milton Friedman





Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-14 Thread Scott Weeks


--- [EMAIL PROTECTED] wrote:
From: David Conrad [EMAIL PROTECTED]

 One wonders whether it might not be more effective in the
 long run to sue ICANN/IANA rather than suing completewhois.com.

Sigh.  What is the IOS command to disable lawyers again?
-


Haven't used cisco since 2001, but in JUNOS it's:

RE0 configure
RE0# delete system processes lawyers
RE0# commit comment no lawyers allowed
RE0# exit
RE0 exit


:-)
scott



Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-13 Thread Andrei Robachevsky

Florian Lohoff wrote:
 Hi *,
 in august IANA handed 77/8 78/8 79/8 to RIPE which started handing out
 those ranges 2 months ago.
 
 We (Telefonica Deutschland AS6805) are seeing a lot of reachability problems
 most likely caused by not updated bogon filters.
 
 For testing purposes 77.181.114.4 aka bogon.mediaways.net
 is up for icmp/http.
 
 Please check and possibly update your filters.
 
 Flo (aka [EMAIL PROTECTED])

To facilitate de-bogonising the RIPE NCC advertises some of the
prefixes from the newly allocated ranges from our RIS beacons. We do
this for a few months before starting allocating them to LIRs.

http://www.ris.ripe.net/debogon/debogon.html

Andrei Robbachevsky
RIPE NCC


RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-13 Thread David Schwartz


 So we're saying that a lawsuit is an intelligent method to force someone
 else to correct something that you are simply using to avoid the
 irritation
 of manually updating things yourself???

 That seems to be the epitomy of laziness vs. litigousness.

 Scott

No, but a lawsuit may be an intelligent method to force someone to correct
something that other people are using to avoid the irritation of manually
updating things themselves. I agree it would be idiotic if someone using the
bogon list were to sue the list operator because they didn't like what was
on the list and it was harming them.

If all other methods fail to get the bogon list updated, which is easier:

A) Track down everyone using the bogon list and convince them to switch to
manually updating their own list of bogons so that they can reach you.

B) Threaten the bogon list operator with a lawsuit for falsely claiming your
addresses are bogons and hope they take the simplest path and fix their
list.

This is a pretty classic case of someone inducing other people to rely on
the accuracy of their data and then offering incorrect data (not arguably
incorrect, manifestly incorrect and most likely negligently so) which those
other people then rely on.

It's no different from a credit report with inaccurate information affecting
a consumer who did not choose to have his credit tracked by the agency
providing the information. We generally recognize third parties have a right
to sue to correct negligently demonstrably incorrect information about them
when that information harms them.

This is not like lists of spam sources where the list is correctly reporting
information the spammer would prefer to suppress.  This is a case where the
list is wrong, and it's harming other people who stupidly relied on it and
people who never chose to rely on it.

If you set up a service and induce people to use it and rely on it, there
definitely should be some minimum standard of quality you should be held to.
I think failing to update a bogon list to reflect address space that is no
longer a bogon within a week or so is negligence under any standard of care.

DS




RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-13 Thread Michael . Dillon

 B) Threaten the bogon list operator with a lawsuit for falsely claiming 
your
 addresses are bogons and hope they take the simplest path and fix their
 list.
 
 This is a pretty classic case of someone inducing other people to rely 
on
 the accuracy of their data and then offering incorrect data (not 
arguably
 incorrect, manifestly incorrect and most likely negligently so) which 
those
 other people then rely on.

It's not just incorrect data. The design of the
system used by completewhois is flawed at the core.
They only know that certain address ranges are
bogons at a certain point in time. If their system
only reported this fact along with the date for
which it is known to be valid, then they would
likely win any lawsuits for incorrect data.

The fact is, that you can only know that an address
range is a bogon at the point in time which you check
it and that it WAS a bogon for some past period. For
most bogons, it is not possible to predict the future
time period during which it will remain a bogon.

Any protocol which does not allow the address range
to be presented along with the LAST TIME IT WAS CHECKED
is simply not suitable for presenting a bogon list.
BGP simply is not suitable for this. HTTP/REST, XML-RPC
or LDAP could be used to make a suitable protocol.

But even better would be to not have any bogons at all.
If IANA and the RIRs would step up to the plate and 
provide an authoritative data source identifying which
address ranges have been issued for use on the Internet
then bogon lists would not be needed at all. And if people
plug their systems into the RIR data feed, then there would
be fewer issues when the RIRs start issuing addresses from
a new block. IANA would be the authoritative source for
stuff like RFC 1918 address ranges and other non-RIR ranges.

One wonders whether it might not be more effective in the
long run to sue ICANN/IANA rather than suing completewhois.com.

--Michael Dillon

P.S. As any lawyer will tell you, it is a good idea to make
some attempt at solving your issue outside of the courts. 
Anyone contemplating a lawsuit against ICANN should probably
try emailing them and writing a few letters first. Since they
are a somewhat democratic structure, it may be possible to
get this fixed without lawsuits.




RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-13 Thread william(at)elan.net



On Wed, 13 Dec 2006 [EMAIL PROTECTED] wrote:


It's not just incorrect data. The design of the
system used by completewhois is flawed at the core.


No more so that other systems that rely on automation
with some human involvement but see below as I generally
agree with what you meant.


They only know that certain address ranges are
bogons at a certain point in time. If their system
only reported this fact along with the date for
which it is known to be valid, then they would
likely win any lawsuits for incorrect data.


Timestamps are included in every generated file. There
is general timestamp when full list was put together
(usually daily and that's what almost everyone is using)
but also there are different timestamps for each individual
list which for semi-static list like IANA allocations,
IANA bogons, IANA special-use blocks are updated only
when this list is manually updated.


The fact is, that you can only know that an address
range is a bogon at the point in time which you check
it and that it WAS a bogon for some past period. For
most bogons, it is not possible to predict the future
time period during which it will remain a bogon.


That is why system is doing rebuilding on daily basis.


Any protocol which does not allow the address range
to be presented along with the LAST TIME IT WAS CHECKED
is simply not suitable for presenting a bogon list.
BGP simply is not suitable for this. HTTP/REST, XML-RPC
or LDAP could be used to make a suitable protocol.


I know you like LDAP a lot, but its not protocol that have
found support in operations community (as opposed to say
RSYNC not mentioned above...). But as I've already thought
about it before, I'll look into making data about each
individual entry available by whois lookups and extended
text file with comments (# after each entry) with these
comments also see in TEXT DNS lookups.


But even better would be to not have any bogons at all.
If IANA and the RIRs would step up to the plate and
provide an authoritative data source identifying which
address ranges have been issued for use on the Internet
then bogon lists would not be needed at all. And if people
plug their systems into the RIR data feed, then there would
be fewer issues when the RIRs start issuing addresses from
a new block. IANA would be the authoritative source for
stuff like RFC 1918 address ranges and other non-RIR ranges.


SIDR will provide authoritative signed data, but it maybe quite
some time (my guess at least 10 years) before we see majority
of BGP advertised blocks with signed certificates available
(and as to ALL doing it, I fear to guess...). And I do agree
with you about IANA; not only that but at the first (?) IETF SIDR
meeting I even mentioned need for IANA to distribute certificates
for non-allocated and special-use blocks. Others weren't very
optimistic that they'd step up; in fact put it this way -
by the time they may get to it, there may no longer by any
unassigned IPv4 blocks left.

P.S. I'd be curious if there are people who would like to see
daily activebogons list as email report including section
about changes from yesterday to today, I don't want to just
send something like this to some list I've not been invited to
do so but can setup separate list for this on new mail server.
This would allow others to check on and discuss potentially
wrong entries. If you're interested you should send email to
me privately.

---
William Leibzon
Elan Networks
[EMAIL PROTECTED]


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-13 Thread Jack Bates


[EMAIL PROTECTED] wrote:


One wonders whether it might not be more effective in the
long run to sue ICANN/IANA rather than suing completewhois.com.



Of course, it could be that I used the wrong term. IANAL after all. Perhaps the 
right term was injunction? Does that qualify as a lawsuit? Unfortunately, people 
seem to think the legal system is strictly about money. Perhaps it is. However, 
in the process of people getting money, I've noticed people have solved their 
initial problem temporarily.


besides, it didn't look like it really took all that much to solve the 
completewhois.com problem. Surely people don't pay their lawyers without first 
yelling, screaming, and calling everyone and their dog (or posting to NANOG) in 
the attempt to get what they want first. :)


Jack


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Allan Houston


Florian Lohoff wrote:

Hi *,
in august IANA handed 77/8 78/8 79/8 to RIPE which started handing out
those ranges 2 months ago.

We (Telefonica Deutschland AS6805) are seeing a lot of reachability problems
most likely caused by not updated bogon filters.

For testing purposes 77.181.114.4 aka bogon.mediaways.net
is up for icmp/http.

Please check and possibly update your filters.

Flo (aka [EMAIL PROTECTED])
  
This probably isn't helped much by sites like completewhois.com still 
showing these ranges as bogons..


http://www.completewhois.com/bogons/active_bogons.htm

They've ignored all my attempts to get them to update so far.. sigh..

Allan Houston - IP Network Operations
Tel : +44 1483 582615
ntl: Telewest



Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Jack Bates


Allan Houston wrote:
This probably isn't helped much by sites like completewhois.com still 
showing these ranges as bogons..


http://www.completewhois.com/bogons/active_bogons.htm

They've ignored all my attempts to get them to update so far.. sigh..



They just need someone using the address space to slap them with a lawsuit.

Jack Bates


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Chris L. Morrow

On Mon, 11 Dec 2006, Jack Bates wrote:


 Allan Houston wrote:
  This probably isn't helped much by sites like completewhois.com still
  showing these ranges as bogons..
 
  http://www.completewhois.com/bogons/active_bogons.htm
 
  They've ignored all my attempts to get them to update so far.. sigh..
 

 They just need someone using the address space to slap them with a lawsuit.

why would you let a third party not related to your business directly
affect packet forwarding capabilities on your network? (in other words,
why would you use them?)


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread bmanning

On Mon, Dec 11, 2006 at 08:40:41AM -0600, Jack Bates wrote:
 
 Allan Houston wrote:
 This probably isn't helped much by sites like completewhois.com still 
 showing these ranges as bogons..
 
 http://www.completewhois.com/bogons/active_bogons.htm
 
 They've ignored all my attempts to get them to update so far.. sigh..
 
 
 They just need someone using the address space to slap them with a lawsuit.
 
 Jack Bates


lawsuit?  where does it say that someone MUST accept routes or
listen to a self-appointed authority?

--bill


RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Scott Morris

So we're saying that a lawsuit is an intelligent method to force someone
else to correct something that you are simply using to avoid the irritation
of manually updating things yourself???

That seems to be the epitomy of laziness vs. litigousness. 

Scott

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 11, 2006 9:55 AM
To: Jack Bates
Cc: nanog@merit.edu
Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8


On Mon, 11 Dec 2006, Jack Bates wrote:


 Allan Houston wrote:
  This probably isn't helped much by sites like completewhois.com 
  still showing these ranges as bogons..
 
  http://www.completewhois.com/bogons/active_bogons.htm
 
  They've ignored all my attempts to get them to update so far.. sigh..
 

 They just need someone using the address space to slap them with a
lawsuit.



Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Robert E. Seastrom


no, he's saying that a lawsuit is a useful method of forcing someone
who is intentionally or negligently distributing incorrect information
that other people who do not know any better then believe and use in
their own networks.

i betcha libel laws aren't written in such a way that they are useful
here, however, there might be some kind of restraint of trade thing
that could be invoked or somesuch.  ianal, not my dept.

---rob

Scott Morris [EMAIL PROTECTED] writes:

 So we're saying that a lawsuit is an intelligent method to force someone
 else to correct something that you are simply using to avoid the irritation
 of manually updating things yourself???

 That seems to be the epitomy of laziness vs. litigousness. 

 Scott

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
 Sent: Monday, December 11, 2006 9:55 AM
 To: Jack Bates
 Cc: nanog@merit.edu
 Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8


 On Mon, 11 Dec 2006, Jack Bates wrote:


 Allan Houston wrote:
  This probably isn't helped much by sites like completewhois.com 
  still showing these ranges as bogons..
 
  http://www.completewhois.com/bogons/active_bogons.htm
 
  They've ignored all my attempts to get them to update so far.. sigh..
 

 They just need someone using the address space to slap them with a
 lawsuit.


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Allan Houston

Scott Morris wrote:

So we're saying that a lawsuit is an intelligent method to force someone
else to correct something that you are simply using to avoid the irritation
of manually updating things yourself???

That seems to be the epitomy of laziness vs. litigousness. 


Scott

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Monday, December 11, 2006 9:55 AM

To: Jack Bates
Cc: nanog@merit.edu
Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8


On Mon, 11 Dec 2006, Jack Bates wrote:

  

Allan Houston wrote:

This probably isn't helped much by sites like completewhois.com 
still showing these ranges as bogons..


http://www.completewhois.com/bogons/active_bogons.htm

They've ignored all my attempts to get them to update so far.. sigh..

  

They just need someone using the address space to slap them with a


lawsuit.



  


I've spent a fairly substantial amount of time over the last few weeks 
attempting to get ISPs / hosting centers / little Johnny's server in his 
mom's basement to debogonise my 77.96.0.0/13 prefix.


I can tell you that I've heard no less than four times from networking 
bods that we're still listed as a bogon on completewhois.com, that they 
don't think they need to update their filters etc etc.


So while I agree entirely that you shouldn't use these sites for 
accurate filters, we have to recognise that in an imperfect world there 
are some people who do choose to use them, no matter how silly we feel 
it is..


Guess the point I'm making is that chasing down bad bogons is a 
frustrating enough task without an alledgedly accurate listing site 
posting out of date info.


PS - if anyone has a networking contact at ev1servers.net , please send 
me a mail because I'm getting hair loss I can ill afford trying to get 
them to remove their bogon filters.





RE: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Donald Stahl



So we're saying that a lawsuit is an intelligent method to force someone
else to correct something that you are simply using to avoid the irritation
of manually updating things yourself???

That seems to be the epitomy of laziness vs. litigousness.
I think the point is that people are trusting this self appointed 
authority and thus others are blocking _his_ legitimate traffic.


If you're going to appoint yourself an authority then you have a 
responsibility to be accurate. If you're too lazy to keep your lists up 
to date then you need to stop offering said lists.


As an admin I can't stop other people from using such an idiotic list. 
However I can sue the list for libel- after all they are printing the
incorrect fact that the traffic I am sending is bogus and thus are harming 
my reputation and impacting my business.


Seems to me like this is _exactly_ what the courts are for. There is no 
gray area- it's not a question of whether or not this is spam for example. 
This list is publishing the false statement that the traffic this ISP is 
trying to send is bogus. If they won't correct their mistake then you 
absolutely should be able to petition the courts to get them to stop 
publishing false information about you.


-Don


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Jack Bates


Scott Morris wrote:

So we're saying that a lawsuit is an intelligent method to force someone
else to correct something that you are simply using to avoid the irritation
of manually updating things yourself???

That seems to be the epitomy of laziness vs. litigousness. 


Scott



I would doubt the person using a bogon list would be the initiator of a lawsuit. 
It would be more plausible that the person using the netspace listed incorrectly 
as a bogon would have just cause for filing a lawsuit.


It's annoying enough to chase after all the people who manually configure bogon 
networks and forget them in their firewalls. From previous posts, it appears 
that this is a case of continued propagation of incorrect information after 
being notified of the inaccuracy, and the information is published as being 
fact; implying accuracy.


Jack Bates


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Jared Mauch

On Mon, Dec 11, 2006 at 10:28:27AM -0500, Robert E. Seastrom wrote:
 
 
 no, he's saying that a lawsuit is a useful method of forcing someone
 who is intentionally or negligently distributing incorrect information
 that other people who do not know any better then believe and use in
 their own networks.
 
 i betcha libel laws aren't written in such a way that they are useful
 here, however, there might be some kind of restraint of trade thing
 that could be invoked or somesuch.  ianal, not my dept.

My recommendation is to write a letter (in german) and fax it
over to their fax# with the urls clearly written out (eg: iana vs their url)
showing the problem with the address space.  it'll likely sufficently
confuse someone that they'll be curious and research it and solve
the problem.

linking to stuff like the bogon-announce list too wouldn't
be a bad idea either :)

- jared

 
 ---rob
 
 Scott Morris [EMAIL PROTECTED] writes:
 
  So we're saying that a lawsuit is an intelligent method to force someone
  else to correct something that you are simply using to avoid the irritation
  of manually updating things yourself???
 
  That seems to be the epitomy of laziness vs. litigousness. 
 
  Scott
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  Sent: Monday, December 11, 2006 9:55 AM
  To: Jack Bates
  Cc: nanog@merit.edu
  Subject: Re: Bogon Filter - Please check for 77/8 78/8 79/8
 
 
  On Mon, 11 Dec 2006, Jack Bates wrote:
 
 
  Allan Houston wrote:
   This probably isn't helped much by sites like completewhois.com 
   still showing these ranges as bogons..
  
   http://www.completewhois.com/bogons/active_bogons.htm
  
   They've ignored all my attempts to get them to update so far.. sigh..
  
 
  They just need someone using the address space to slap them with a
  lawsuit.

-- 
Jared Mauch  | pgp key available via finger from [EMAIL PROTECTED]
clue++;  | http://puck.nether.net/~jared/  My statements are only mine.


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Stephen Satchell


Jared Mauch wrote:

linking to stuff like the bogon-announce list too wouldn't
be a bad idea either :)



Bogon announce list?


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Jeroen Massar
Stephen Satchell wrote:
 
 Jared Mauch wrote:
 linking to stuff like the bogon-announce list too wouldn't
 be a bad idea either :)
 
 
 Bogon announce list?

Read here: http://www.cymru.com/

And you will find:
http://puck.nether.net/mailman/listinfo/bogon-announce

Btw it is the first hit on google(bogon announce list)

Greets,
 Jeroen



signature.asc
Description: OpenPGP digital signature


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Florian Weimer

* Jared Mauch:

   My recommendation is to write a letter (in german) and fax it
 over to their fax# with the urls clearly written out (eg: iana vs
 their url) showing the problem with the address space.  it'll likely
 sufficently confuse someone that they'll be curious and research it
 and solve the problem.

Isn't completewhois.com William's project?  I doubt he cares about
German letters if he doesn't even notice the peer pressure on NANOG.


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Jon Lewis


On Mon, 11 Dec 2006, Robert E. Seastrom wrote:


no, he's saying that a lawsuit is a useful method of forcing someone
who is intentionally or negligently distributing incorrect information
that other people who do not know any better then believe and use in
their own networks.

i betcha libel laws aren't written in such a way that they are useful
here, however, there might be some kind of restraint of trade thing
that could be invoked or somesuch.  ianal, not my dept.


If you google for it, you'll find lots of obsolete bogon info, typically 
lacking the suggestion to check IANA's web site or other resources to 
check the freshness of the data or any warning that the data will change 
over time as more space gets allocated.



From the first page of google: bogon ACL cisco

http://www.tech-recipes.com/modules.php?name=Forumsfile=viewtopicp=6817

Do you threaten to sue them all?  The real problems are all the networks 
that setup static bogon filters some time ago which nobody maintains or in 
some cases, even knows about.  Changing a few web sites won't fix any of 
those routers.


It's a lousy position to be in, but my suggestion is try to make contact 
with the bigger / more important networks blocking your new space and let 
the rest of them figure it out on their own.


I'm surprised William's site hasn't been updated.  He used to be fairly
active online.  Has anyone heard from him at all recently?

--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread william(at)elan.net



On Mon, 11 Dec 2006, Allan Houston wrote:


Florian Lohoff wrote:

Hi *,
in august IANA handed 77/8 78/8 79/8 to RIPE which started handing out
those ranges 2 months ago.

We (Telefonica Deutschland AS6805) are seeing a lot of reachability 
problems

most likely caused by not updated bogon filters.

For testing purposes 77.181.114.4 aka bogon.mediaways.net
is up for icmp/http.

Please check and possibly update your filters.

Flo (aka [EMAIL PROTECTED])

This probably isn't helped much by sites like completewhois.com still showing 
these ranges as bogons..


http://www.completewhois.com/bogons/active_bogons.htm

They've ignored all my attempts to get them to update so far.. sigh..


Completewhois email server is down right now and needs to be rebuilt.
That's not to say that is a good excuse - I should have updated bogon 
list 3 months ago when allocation was made, but I missed it among

many emails on this list and other lists; its fixed as of right now,
so my apologies to those who received new allocations from 77/8
(apparently RIPE started allocating two weeks ago; a bit sooner
after IANA allocation then before, but I guess they are out of
available space on other blocks...). I also added daily emailing of 
active_bogons list to this and one other of my actively used email 
accounts which would make it easier to catch similar problems.


--
William Leibzon
Elan Networks
[EMAIL PROTECTED]


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread Chris L. Morrow

On Mon, 11 Dec 2006, william(at)elan.net wrote:

 Completewhois email server is down right now and needs to be rebuilt.

what no backup MX? now postmaster/abuse/root working emails at that
domain? did you put the domain also on 'rfc ignorant'?


Re: Bogon Filter - Please check for 77/8 78/8 79/8

2006-12-11 Thread william(at)elan.net



On Tue, 12 Dec 2006, Chris L. Morrow wrote:


On Mon, 11 Dec 2006, william(at)elan.net wrote:


Completewhois email server is down right now and needs to be rebuilt.


what no backup MX? now postmaster/abuse/root working emails at that
domain? did you put the domain also on 'rfc ignorant'?


Mail store is not working, not mail service for domain and backups do
exist. But as far as 'rfc ignorant' while it would probably not qualify,
I'd have no problem with the listing as until mail server is fixed [that 
would be about one more week] no emails would be sent from the domain.
I did put catchall on another server for email, but its just impossible 
to read with 4000 emails per day and 99.9..% of them being spam (including 
unfortunetly bots doing webform submission). BTW - I wanted to see how 
many people actually reported it (as it was mentioned here as being 
multiple attempts to contact), while I can't be 100% sure just from
grep -P it looks like two people reported it on Dec 6th (one of them 
Allan) and that's about it; those who did report it will receive 
separate answers once email can be properly sorted.


--
William Leibzon
Elan Networks
[EMAIL PROTECTED]