Re: ru tld down?

a report widespread access issues to [.] ru domains, including of Yandex, Megafon, and Sberbank: Local News Outlet via Forbes Russia. — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Re: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)

. These filters may be more applicable to some devices, such as gear that functions as a border router, than other devices. Be well, Rabbi Rob. — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Re: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)

n be > used for everything. > > > You can't have it both ways. Either you provide a list of prefixes to > be dropped on autonomous system borders *and make that clear* or you > provide a list of prefixes that can be dropped in all systems. > > > > Lukas — Rabbi R

Re: Susan Harris

narbor/name/susan-harris-obituary?id=33543415> > > John — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree.” - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: update - Re: Facebook post-mortems...

ad - might be best to ignore the above post as it is a > unconfirmed/undated post-mortem that may reference a different event. If I'm reading the source correctly, the timestamp inside is for 09 SEP 2021 14:22:49 GMT (Unix time 1631197369). Then again, I may not be reading

Re: "Tactical" /24 announcements

www.ris.ripe.net/dumps/riswhoisdump.IPv4.gz > <http://www.ris.ripe.net/dumps/riswhoisdump.IPv4.gz> from > about a month ago. > > That dump lists all the IPv4 prefixes seen in the collective of latest > RIS table dumps, together with origin AS and number of peers th

Re: Don Smith, RIP.

ablished plans for his memorial, they will be > posted here. > -------- > Roland Dobbins > > > -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: RIP: Bill Manning

committee. I literally created a "trouble ticket" accounting >>> scheme to track change requests for his thesis. >>> >>> Bill was a valued member of the WIDE Project here in Japan. He worked >>> with the DNS root operations group here, and participated

Re: De-bogonising 2a10::/12

dated as allocations are made. https://www.team-cymru.com/bogon-reference-bgp.html Be well, Rabbi Rob. -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: Recommended DDoS mitigation appliance?

risoft.com/software/wanguard - https://www.andrisoft.com/software/wanguard/ddos-mitigation-protecti on . A10 Thunder ADC - https://a10networks.optrics.com/products/application-delivery.aspx . FastNetMon - Free or inexpensive - https://fastnetmon.com/ Thank you! Rob, the routing rabbi. - --

Re: Recommended DDoS mitigation appliance?

, the routing rabbi. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3TQCsACgkQQ+hhY

Re: Recommended DDoS mitigation appliance?

t is correct. Be well, Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3SB

Re: Recommended DDoS mitigation appliance?

e fine, and I'm happy to summarize back to the > list if there is interest. > > Thank you! Rob. > - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGN

Recommended DDoS mitigation appliance?

if there is interest. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3Rx08ACg

Re: historical Bogon lists

that in place after the new year. Will that work for folks, or would a git repository be useful in different ways? My thanks to Paul Hick, CAIDA, and Alessandro Improta for the assistance here! Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru

Re: historical Bogon lists

ation around that info. (Not that I'm > hating on wget / curl ... :) ) We'd be happy to make that happen, if folks are keen. We're fine with Git, as we use it regularly. Be well! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe

Re: historical Bogon lists

obably worth asking. I have found them to > be very responsive and quite helpful. Thank you for the kind words, Grant! Sadly, we don't keep an archive of prior bogon lists, so we can't help here. Sorry! Be well, Rob. - -- Rabbi Rob Thomas Team Cymru

Re: BCP38/84 and DDoS ACLs

mats and styles can be found here: <http://www.team-cymru.org/bogon-reference.html> Be well, Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo M

Brighthouse Networks security contact?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear team, I'm looking for a Brighthouse Networks security contact, please. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Re: Cymru Bogon AS path change

to the contributor list. :) Again my apologies for any inconvenience or consternation this mishap has caused. Thanks, Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ Does this augment or diminish human liberty? - William F. Buckley -BEGIN PGP SIGNATURE- iQCVAwUBUjc

Re: Cymru Bogon AS path change

window, and my apologies for that. We're almost at the finish line, however, so I'll beg your indulgences while we wind it up. Thank you as always for your patience and support! Thanks, Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ Does this augment or diminish human liberty

Re: Cymru Bogon AS path change

window is now closed. If anyone comes across anything that looks awry, please reach out to us at supp...@cymru.com and we will address it immediately. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ Does this augment or diminish human liberty? - William F. Buckley

Providers with RTBH capability?

/prod_white_paper0900aecd80313fac.pdf [1] http://tools.ietf.org/html/rfc5635 Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ Say little and do much. M Avot 1:15 -BEGIN PGP SIGNATURE- iQCVAwUBUVoFKlkX3QAo5sgJAQLzWAP+KnDgvSQo9iXkKOpEE190DRqIu0CDP8Kh

Re: Historical records of IP allocations

OVH Telecom as the origin. Other folks on this list may have data that goes further back. Thanks, Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ Say little and do much. M Avot 1:15

Re: RIP dmr

. Dennis always answered my email queries. I asked him all sorts of silly programming and Unix questions early in my career, and he patiently answered them all. I wouldn't have my career without both his contributions and his guidance. His memory is for blessing. -- Rob Thomas Team Cymru https

Re: [Nanog-futures] Admission for Committee Members

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, team. i do not support getting paid for community service. a primrose path. Bravo and agreed! Thanks, Rob. - -- Rob Thomas Team Cymru https://www.team-cymru.org/ Say little and do much. M Avot 1:15 -BEGIN PGP SIGNATURE- Version

Re: Connectivity status for Egypt

197.194.128.0/17 | 36992 197.195.0.0/17 | 36992 212.103.160.0/24 | 8452 212.103.169.0/24 | 8452 213.131.64.0/24 | 24863 213.181.236.0/24 | 33789 213.247.0.0/20 | 28045 213.247.16.0/20 | 28045 217.29.128.0/20 | 15834 Thanks, Rob. -- Rob Thomas Team Cymru https://www.team

AS23724 oops? was Re: China prefix hijack

see if we can find someone at AS23724 to ask, and perhaps assist if needed. Thanks, Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ Say little and do much. M Avot 1:15

Re: Chuck Norris Botnet and Broadband Routers

built a large overlay network of tunnels between compromised routers (most of which spoke eBGP). Concerned that your routers might be compromised? Send us a note at team-cy...@cymru.com and we'll let you know what we've seen. We'll need your ASN(s) or CIDR block(s). Thanks, Rob. -- Rob Thomas

Re: Checking bogon status of new address space

the static bogon lists from our Secure [BIND|IOS|BGP] Templates. My thanks to Randy Bush (and a few other folks) for the suggestion. We still have the bogon list and the dynamic bogon route-servers. https://www.team-cymru.org/Services/Bogons/ Thanks, Rob. -- Rob Thomas Team Cymru http

Re: IPv6 bogons/unallocated space list?

It is maintained by Team 6Bogon 6bogon at inetcore.com. We and they would LOVE to have your feedback! -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Is it time to abandon bogon prefix filters?

% 2008-07: 0.002327683% 2008-08: 0.001258054% (thus far) That's not a lot of bogon activity in the Darknets, though Darknets are only one measure of malevolent traffic. Your mileage may vary, etc. [1] http://www.team-cymru.org/Services/darknets.html Thanks, Rob. -- Rob Thomas Team Cymru

Re: Is it time to abandon bogon prefix filters?

I guess I parsed that differently than you did. When he said fully 60% of the naughty packets were obvious bogons, I read that as meaning 60% of all bad packets (bogon-sourced or otherwise) were from bogon space. That's correct. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err

Re: Is it time to abandon bogon prefix filters?

as sparse as I can. :) and can you separate reserved (127, ...) and unallocated? I can indeed, though it'll take me a bit to do so. Again, stay tuned. Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Is it time to abandon bogon prefix filters?

This is scanning of darknets - usually you're interested in what comes back, i.e. can you 0wn it? so src has to be valid. Yep yep. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Is it time to abandon bogon prefix filters?

This makes sense especially for static filters. Automated feeds, such as the bogon route-server or DNS zones, leaves folks with options. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Is it time to abandon bogon prefix filters?

interest. Stay tuned, I should have some answers in a few hours. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Is it time to abandon bogon prefix filters?

on imagination, we also have some friends at commercial pen-testers hit us regularly, just to be sure. :) Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, Out of coffee!);

Re: Bogon Filter Update Request

attention and I hope to see some of you at an upcoming NANOG meeting. Stan Barber [EMAIL PROTECTED] (called the other SOB on the Internet by Scott Bradner many years ago in his first column for Network World magazine) -- Rob Thomas Team Cymru The WHO and WHY team http://www.team-cymru.org/

Re: [NANOG] Limiting ICMP

valid packets. Your mileage may vary of course, as it apparently does? John -- Rob Thomas Team Cymru The WHO and WHY team http://www.team-cymru.org/

Re: Q: What do ISPs really think about security issues?

us under their wing and mentored us on the processes and setups that best help ISPs. That alone would make a great *NOG presentation. -- Rob Thomas Team Cymru Research NFP http://www.cymru.com/ cmn_err(do_panic, Out of coffee!);

Re: DNS issues?

Hi, NANOGers. This might help a bit when debugging root and TLD name server connectivity concerns: http://www.cymru.com/monitoring/dnssumm/index.html Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ cmn_err(do_panic, Out of coffee!);