Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Owen DeLong
On Mar 30, 2011, at 10:26 PM, Suresh Ramasubramanian wrote: It also needs 1. Someone to complain to law enforcement True, 2. Law enforcement to decide this is something worth following up on re prosecution - especially if the crook is not within their jurisdiction, it'd be FBI, and

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Suresh Ramasubramanian
Local law isnt likely to touch this at all. On Thu, Mar 31, 2011 at 11:27 AM, Owen DeLong o...@delong.com wrote: If the crook is in another county, same state, it could be simple extradition. If the crook is across state lines, it could still be handled as an extradition, but, slightly

PCH survey on peering

2011-03-31 Thread Bill Woodcock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Howdy. We're conducting a statistical overview of peering sessions for a research paper. The paper we produce will be input into OECD guidelines on national communications regulatory frameworks, so we'd very much like it to accurately reflect

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Ronald F. Guilmette
In message Pine.OSX.4.64.1103310053260.312@cevin-2.local, Brandon Ross br...@pobox.com wrote: On Wed, 30 Mar 2011, Ross Harvey wrote: Wait a second, I'm pretty sure that in most contexts, a signature or letterhead means not so much this is real because it's so obviously genuine, but rather:

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Christopher Morrow
On Thu, Mar 31, 2011 at 7:57 AM, Owen DeLong o...@delong.com wrote: On Mar 30, 2011, at 10:26 PM, Suresh Ramasubramanian wrote: It also needs 1. Someone to complain to law enforcement True, as has been brought up in the past here... some folk rely heavily upon IRR data for route prefix

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Christopher Morrow
On Thu, Mar 31, 2011 at 11:48 AM, Christopher Morrow morrowc.li...@gmail.com wrote: On Thu, Mar 31, 2011 at 7:57 AM, Owen DeLong o...@delong.com wrote: On Mar 30, 2011, at 10:26 PM, Suresh Ramasubramanian wrote: It also needs 1. Someone to complain to law enforcement True, as has been

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Ronald F. Guilmette
In message b2506b41-ad1f-4fb0-9d8e-c0a54e44b...@delong.com, Owen DeLong o...@delong.com wrote: Cleaning up the routing {is not what ARIN does or thinks it should do}, true. However, this sounds like there are two issues... 1. Routing -- Would be nice if the advertising provider(s) stopped

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Tony Tauber
I don't believe this record indicates that Level3 proxy registered the route object. It means that someone used the DBANK-MNT maintainer ID in the Level3 RR to enter a route object 18 months ago. It looks like Level3 is originating the route in AS3356, not accepting it from AS13767 (which is what

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Christopher Morrow
On Thu, Mar 31, 2011 at 5:33 PM, Tony Tauber ttau...@1-4-5.net wrote: I don't believe this record indicates that Level3 proxy registered the route object. It means that someone used the DBANK-MNT maintainer ID in the Level3 RR to enter a route object 18 months ago. possibly... It looks

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Jima
On 03/30/2011 03:53 PM, Ronald F. Guilmette wrote: I just stumbled onto this one the other day. Apparently, Spamhaus has known about this one for THREE MONTHS already: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL98308 It's being routed by AS11730, aka Circle Internet LTD, a known

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread rr
For the record, Integra Telecom did have LOA for said netblock. Needless to say LOA was forged on company letterhead with appropriate signatures. Once brought to our attention we attempted to contact customer to no avail, netblock has been removed until they prove otherwise. Randy Rooney On Thu,

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Jima
On 03/31/2011 12:12 PM, rr wrote: For the record, Integra Telecom did have LOA for said netblock. Needless to say LOA was forged on company letterhead with appropriate signatures. Once brought to our attention we attempted to contact customer to no avail, netblock has been removed until they

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Matthew Petach
On Thu, Mar 31, 2011 at 3:11 AM, Ronald F. Guilmette r...@tristatelogic.com wrote: ... Seriously, I was left with the impression that if IPv6 were a person, it would be you, and that if it were a company, you would be the majority shareholder.  (Not that there would be anything wrong with

NAP Capital Region Culpeper

2011-03-31 Thread Mehmet Akcin
Hello I am looking for people who has space and / or network in Terremark culpeper , please contact me off-list ( or people who is planning to get there sometime soon..) mehmet

RE: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Stefan Fouant
-Original Message- From: Matthew Petach [mailto:mpet...@netflight.com] Sent: Thursday, March 31, 2011 2:28 PM I for one would put money on the table towards the rename Owen to Mr. IPv6 effort. I think it would be wonderful to be able to honestly say IPv6 is in da house! every

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Ronald F. Guilmette
In message AANLkTikMqBx=cu5autr7addyn7u7wbeoww2qa9wdz...@mail.gmail.com, rr rook...@gmail.com wrote: For the record, Integra Telecom did have LOA for said netblock. Needless to say LOA was forged on company letterhead with appropriate signatures. Once brought to our attention we attempted to

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread rr
Hmm, thought it was a NANOG prerequisite to be able to do a google search. Should be pretty easy to find this info with that tool in your handbag. With the above tool I've got your phone # and would be happy to call you if you'd like clarification on our process. Please just reply to me

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Owen DeLong
On Mar 31, 2011, at 12:01 PM, Stefan Fouant wrote: -Original Message- From: Matthew Petach [mailto:mpet...@netflight.com] Sent: Thursday, March 31, 2011 2:28 PM I for one would put money on the table towards the rename Owen to Mr. IPv6 effort. I think it would be wonderful to

RE: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Rafael Cresci
I for one would put money on the table towards the rename Owen to Mr. IPv6 effort. I think it would be wonderful to be able to honestly say IPv6 is in da house! every time the person formerly known as Owen walked into the room at ARIN meetings. :D Like a v6, like a v6 could be the

Re: IPv6 SEO implecations?

2011-03-31 Thread Wil Schultz
On Mar 30, 2011, at 4:55 PM, Wil Schultz wrote: On Mar 30, 2011, at 4:39 PM, Alexander Harrowell a.harrow...@gmail.com wrote: On Tuesday 29 Mar 2011 17:54:27 Wil Schultz wrote: On Mar 29, 2011, at 3:51 AM, Franck Martin wrote: And here's a breakdown of which user agents are seen

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Ronald F. Guilmette
In message aanlktinvlqefvykc91d8p-n9zvdgr5prxreyptuim...@mail.gmail.com, rr rook...@gmail.com wrote: Hmm, thought it was a NANOG prerequisite to be able to do a google search. Should be pretty easy to find this info with that tool in your handbag. Which info is that, exactly? Your title at

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Brett Watson
On Mar 31, 2011, at 5:46 PM, Ronald F. Guilmette wrote: (Sorry, but I can't help snickering a bit at your _prior_ employment. As I feel sure you are already painfully aware, having that on your resume does not exactly inspire a whole lotta confidence in the notion that you are a straight

Fwd: IPv4 Address Exhaustion Effects on the Earth

2011-03-31 Thread Joao C. Mendes Ogawa
FYI --Jonny Ogawa - Forwarded message from Stephen H. Inden - From: Stephen H. Inden Subject: IPv4 Address Exhaustion Effects on the Earth Date: Fri, 1 Apr 2011 00:19:08 +0200 To: Global Environment Watch (GEW) mailing list X-Mailer: Apple Mail (2.1084) X-Mailman-Version: 2.1.9 List-Id:

Re: IPv4 Address Exhaustion Effects on the Earth

2011-03-31 Thread Wil Schultz
On Mar 31, 2011, at 6:14 PM, Joao C. Mendes Ogawa jonny.og...@gmail.com wrote: FYI --Jonny Ogawa - Forwarded message from Stephen H. Inden - From: Stephen H. Inden Subject: IPv4 Address Exhaustion Effects on the Earth Date: Fri, 1 Apr 2011 00:19:08 +0200 To: Global

Re: HIJACKED: 148.163.0.0/16 -- WTF? Level3 is now doing IP hijacking??

2011-03-31 Thread Suresh Ramasubramanian
On Fri, Apr 1, 2011 at 12:31 AM, Stefan Fouant sfou...@shortestpathfirst.net wrote: +1 | That, or The evangelist formerly known as Owen... :p No no ... TEFKAO. -- Suresh Ramasubramanian (ops.li...@gmail.com)

Re: HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Matthew Petach
On Thu, Mar 31, 2011 at 6:04 PM, Brett Watson br...@the-watsons.org wrote: On Mar 31, 2011, at 5:46 PM, Ronald F. Guilmette wrote: (Sorry, but I can't help snickering a bit at your _prior_ employment. As I feel sure you are already painfully aware, having that on your resume does not exactly

HIJACKED: 159.223.0.0/16 -- WTF? Does anybody care?

2011-03-31 Thread Atticus
This OT, and for those of you with virgin ears, don't read more. This is specifically to Ronald: Maybe, if you didn't act like a flaming douchebag, and were polite to people, they would be more interested in helping you out. Learn to use some fucking manners. Every single message I've seen from

Re: Final step of .com DNSSEC deployment

2011-03-31 Thread Brent Jones
On Thu, Mar 31, 2011 at 1:05 PM, Matt Larson mlar...@verisign.com wrote: As part of the deployment of DNSSEC in .com, the zone has been signed and in a deliberately unvalidatable state for several weeks.  Late last week the .com key material was unobscured and the actual keys have been visible