Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Martin Hannigan
On Mon, Sep 14, 2009 at 2:58 PM, Justin Shore wrote: > Frank Bulk wrote: > >> With scarcity of IPv4 addresses, organizations are more desperate than >> ever >> to receive an allocation. If anything, there's more of a disincentive >> than >> ever before for ARIN to spend time on netblock sanitizat

Re: Dedicated Route Reflectors

2009-09-14 Thread Pshem Kowalczyk
Hi, There are multiple ways you can solve that problem. We do the following: 1. Each region has its own ibgp cluster with 2 route reflectors (usually the P nodes, since they seem to have abundance of CPU power and not much to do with it). 2. All route reflectors (across regions) are fully meshed.

Re: Hijacked Blocks

2009-09-14 Thread Jorge Amodio
Be careful about what you are asking for. >> i am not saying all is well here.  i am just trying to move slowly and >> pretend to think while on my first cuppa. I agree with Randy that this is a reasonable approach. In the transition from the old IANA to FrICANNstein and the separation of number

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
>> tough one.  those 'bad' blocks will seem less and less bad over time. > Sure things are less bad over time, once they are removed from 'bad > actor control' actually, i meant as ipv4 scarcity worsens on the other side of the coin, olaf maennel and i did a bunch of work so that rirs, specifical

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 5:12 PM, Randy Bush wrote: >> 1) not allocating to known offendors (even those who've been through >> the court system and had judgements against them, which would be >> following your proposed path) > > [ i made no proposal.  i was just a bit scared by the instant "we need

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
> 1) not allocating to known offendors (even those who've been through > the court system and had judgements against them, which would be > following your proposed path) [ i made no proposal. i was just a bit scared by the instant "we need to DO SOMETHING" reaction. ] but what you say seems some

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 4:47 PM, Randy Bush wrote: >> I haven't followed this entire string.  Are you saying ARIN is repeatedly >> handing out address space to known abusers?  If that's the case then yes, >> some form of policy should be worked on. > > i might walk more slowly and with a bit les

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
> I haven't followed this entire string. Are you saying ARIN is repeatedly > handing out address space to known abusers? If that's the case then yes, > some form of policy should be worked on. i might walk more slowly and with a bit less self-righteousness. this is not a simple area. are we

RE: Verizon Wireless (AS22394) network engineering contact needed

2009-09-14 Thread Brian R. Watters
Stacey, I will reply to these folks .. -- Brian Watters Director American Broadband Family of Companies 5718 East Shields Ave Fresno, CA. 93727 brwatt...@absfoc.com http://www.americanbroadbandservice.com tel:559-420-0205 fax:559-272-5266 toll free:866-827-4638 -

Verizon Wireless (AS22394) network engineering contact needed

2009-09-14 Thread David Ulevitch
I'm having some trouble reaching a capable network engineer who runs Verizon Wireless (AS22394). The contact on the ARIN address space I have issues with does indeed pick up the phone but is not someone who is aware of what BGP is. Additionally, VZW is not listed on the NOC contacts page host

[NANOG-announce] NANOG SC Nominations

2009-09-14 Thread Betty Burke
Last Call!! SC Candidate nominations close midnight EST 9-14-09 Current Candidates posted at http://nanog.org/governance/elections/2009elections/2009sc_candidates.php Send those additional nominations to nominati...@nanog.org! Look forward to seeing you in Dearborn, Michigan, October 18-21, 20

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Justin Shore
Frank Bulk wrote: With scarcity of IPv4 addresses, organizations are more desperate than ever to receive an allocation. If anything, there's more of a disincentive than ever before for ARIN to spend time on netblock sanitization. I do think that ARIN should inform the new netblock owner if it w

RE: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Azinger, Marla
Another one that could be discussed at the ARIN policy bof. Also, Im forwarding this to the ARIN ppml for any further discussion. Cheers Marla -Original Message- From: David Conrad [mailto:d...@virtualized.org] Sent: Monday, September 14, 2009 11:44 AM To: Douglas Otis Cc: NANOG list S

Re: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread David Conrad
On Sep 14, 2009, at 10:40 AM, Douglas Otis wrote: Perhaps ICANN could require registries establish a clearing-house, where at no cost, those assigned a network would register their intent to initiate bulk traffic, such as email, from specific addresses. ICANN can't require the RIRs do anyt

RE: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Lee Howard
> -Original Message- > From: Douglas Otis [mailto:do...@mail-abuse.org] > Sent: Monday, September 14, 2009 1:41 PM > To: joel jaeggli > Cc: NANOG list > Subject: Re: Repeated Blacklisting / IP reputation, replaced by registered use > > On 9/13/09 12:49 PM, joel jaeggli wrote: > > Frank B

RE: Hijacked Blocks

2009-09-14 Thread Lee Howard
> > If this is the case one could argue that ARIN should be reserving this > > "worthless" address space to be used when they receive similar requests > > in the future. There's no reason personX should get fresh, clean address > > space when they make additional requests. > > That implies some pr

Re: Hijacked Blocks

2009-09-14 Thread Mikael Abrahamsson
On Mon, 14 Sep 2009, Adrian Minta wrote: Hijacking is not possible since most ISP's use filters based on RIPE Database. This is not true. Some filter, but most don't. -- Mikael Abrahamssonemail: swm...@swm.pp.se

Re: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Douglas Otis
On 9/13/09 12:49 PM, joel jaeggli wrote: Frank Bulk wrote: [] If anything, there's more of a disincentive than ever before for ARIN to spend time on netblock sanitization. This whole thread seems to be about shifting (I.E. by externalizing) the costs of remediation. presumably the entities re

Re:

2009-09-14 Thread Mikael Abrahamsson
On Mon, 14 Sep 2009, Michael Ruiz wrote: I am having difficulty maintaining my BGP session from my 6509 with Sup-7203bxls to a 7206 VXR NPE-400. The session bounces every 3 minutes. I do have other IBGP sessions that are established with no problems, however, this is the only IBGP peer that is

Re: Hijacked Blocks

2009-09-14 Thread Adrian Minta
In Europe RIPE has a nice database. Hijacking is not possible since most ISP's use filters based on RIPE Database. Why ARIN don't use a similar tool ?

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
FYI- I have forwarded this conversation to ARIN ppml as this is now a topic for that mailing list more than NANOG. Cheers Marla Azinger ARIN AC VC -Original Message- From: Azinger, Marla [mailto:marla.azin...@frontiercorp.com] Sent: Monday, September 14, 2009 10:29 AM To: Christopher M

Rack Space in Chicago area

2009-09-14 Thread NANOG Acct
I may be in need of rack space in the Chicago area - the closer to downtown, the better. I have need for about 24U of space and enough AC for 4 - 2U servers, 3 - 1U servers, 2 hubs and a 3640 router. Would need connectivity (100MB ethernet) and someone that can do a BGP session with us for 3

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
I haven't followed this entire string. Are you saying ARIN is repeatedly handing out address space to known abusers? If that's the case then yes, some form of policy should be worked on. If on the administrative level ARIN is not researching returned blocks for abuse complaints and working to

nanog@nanog.org

2009-09-14 Thread Michael Ruiz
I am having difficulty maintaining my BGP session from my 6509 with Sup-7203bxls to a 7206 VXR NPE-400. The session bounces every 3 minutes. I do have other IBGP sessions that are established with no problems, however, this is the only IBGP peer that is bouncing regularly. cr1.AUSTTXEE#show

Re: Hijacked Blocks

2009-09-14 Thread Chris Marlatt
Christopher Morrow wrote: > The end of the discussion was along the lines of: "Yes, we know this > guy is bad news, but he always comes to us with the proper paperwork > and numbers, there's nothing in the current policy set to deny him > address resources. Happily though he never pays his bill aft

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 11:58 AM, Chris Marlatt wrote: > Christopher Morrow wrote: >> The end of the discussion was along the lines of: "Yes, we know this >> guy is bad news, but he always comes to us with the proper paperwork >> and numbers, there's nothing in the current policy set to deny him >

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Martin Hannigan
On Sun, Sep 13, 2009 at 7:43 AM, John Curran wrote: > On Sep 11, 2009, at 6:52 PM, Martin Hannigan wrote: > > > > I honestly don't think that it's up to them to create a set-aside > > either, > > hence my comment about behind the scenes activities. I appreciate you > > detailing that, but I hones

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 7:05 AM, John Curran wrote: > On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: >> ... >> For example: Ron Guilmette has recently pointed out that notorious >> spammer >> Scott Richter has apparently hijacked *another* /16 block -- >> 150.230.0.0/16. oh lokoie, announced b

Re: OT: CLEC Mailing List

2009-09-14 Thread David Hiers
If a topic has anything to do with operating a voice network, VoiceOps is a good place for it. www.voiceops.org VoiceOps covers voice over IP, TDM, TSOT, whatever... David On Sun, Sep 13, 2009 at 5:28 PM, Richey wrote: > I am looking for a CLEC related mailing list. I looked through the ar

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread John Curran
On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: > ... > For example: Ron Guilmette has recently pointed out that notorious > spammer > Scott Richter has apparently hijacked *another* /16 block -- > 150.230.0.0/16. > I've dropped that block into various local blacklists, and in some > cases,

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Rich Kulawiec
On Tue, Sep 08, 2009 at 11:44:44AM -0700, Wayne E. Bouchard wrote: > Best practices for the public or subscription RBLs should be to place > a TTL on the entry of no more than, say, 90 days or thereabouts. But there's no reason to do so, and a number of reasons not to, including the very high pro

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Tim Chown
On Sun, Sep 13, 2009 at 12:45:03PM -0400, Christopher Morrow wrote: > On Wed, Sep 9, 2009 at 11:48 PM, Mark Andrews wrote: > > > > > Note we all could start using IPv6 and avoid this problem altogether. > > There is nothing stopping us using IPv6 especially for MTA's. > > that'd solve the spam

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Andy Davidson
On 9 Sep 2009, at 06:04, Peter Beckman wrote: How about a trial period from ARIN? You get your IP block, and you get 30 days to determine if it is "clean" or not. The reuse issue is possibly decades away in v6 land. The reuse issue can't really be solved for v4 in a year or two. Sounds li