Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-31 Thread Denis Spirin
Hello All, let me tell you the final of the story with the hijacking of our networks. So, in the end of July, we found some of our networks are announced somewhere without our permission. That was the illegal announce from Internap. We sent the letter to Internap on August, 11th. Internap

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-28 Thread Denis Spirin
Hi All, I looked up here http://www.robtex.com/as/as31733.html#graph internap on 24th of August and found Internap announced our networks to Telia, Cogent, NTT, Glbx and Tinet. I wrote to all of them. First reply was from Tinet. They even had a time and wish to call me by the phone. They said

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-25 Thread Denis Spirin
Hello Adrian, I tried to reply to list from office without the TOR you don't like, and got this: nanog@nanog.org: host mailman.nanog.org[204.93.212.138] said: 550-rejected because 86.59.128.2 is in a black list at zen.spamhaus.org 550 http://www.spamhaus.org/SBL/sbl.lasso?query=SBL116130

RE: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Erik Bais
Hi Denis, Convenient as it may be to use a LIR and their historic provided prefixes, have you thought about starting with a clean slate ? If the company was close to bankrupt and one can only assume that it didn't require a couple /16's and a couple /19's ... Didn't you get ANY questions from

RE: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Erik Bais
Hi Denis, If Portnap doesn't / won't assist in this matter, you can send an abuse message to both Tinet and NTT and have them reject the prefixes on their ingress port. They will probably only do that in case you have your AS record and route objects correctly documented and can actually

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Denis Spirin
Hi Erik, The RIPE DB shows clear Internap have NO permission to route our networks as the direct uplink. Am I wrong? 2011/8/21 Erik Bais eb...@a2b-internet.com Hi Denis, If Portnap doesn't / won't assist in this matter, you can send an abuse message to both Tinet and NTT and have them

Fwd: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Denis Spirin
Of course, we have less customers than we have a year ago. Not a zero in any case. Some parts of network was rented to other ISPs and will be returned. Some was NATed after upstream shut down the BGP. How much IP we need now we will discuss with RIPE NCC, if they will. First, we should have to

Fwd: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Denis Spirin
Where do you see the permission of Internap to transit our AS31733? aut-num: AS31733 as-name: LINKTEL-AS descr: Link Telecom PJSC org: ORG-LTP1-RIPE import: from AS8342 accept ANY import: from AS12695 accept ANY import: from AS44109

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Erik Bais
Hi Denis, That is exactly why you might want to send an abuse msg to Tinet and NTT as they as accepting the prefixes fromm Portnap. Erik Verstuurd vanaf mijn iPad Op Aug 21, 2011 om 12:44 heeft Denis Spirin n...@link-telecom.net het volgende geschreven: Where do you see the permission of

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Arturo Servin
What I understand is that he is clamming that the registration of this prefix was hijacked from him. But honestly I do not what the problem is. Any how, it won't be solved here. Regards, /as On 21 Aug 2011, at 02:25, David Conrad wrote: On Aug 20, 2011, at 6:01

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread chip
On Sun, Aug 21, 2011 at 6:44 AM, Denis Spirin n...@link-telecom.net wrote: Where do you see the permission of Internap to transit our AS31733? aut-num:         AS31733 as-name:         LINKTEL-AS descr:           Link Telecom PJSC org:             ORG-LTP1-RIPE import:          from AS8342

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Jimmy Hess
On Sun, Aug 21, 2011 at 3:27 AM, Erik Bais eb...@a2b-internet.com wrote: Convenient as it may be to use a LIR and their historic provided prefixes, have you thought about starting with a clean slate ? It's probably better for the network community if he _doesn't_ let an apparently known hijack

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Joel Jaeggli
On Aug 20, 2011, at 10:29 PM, Tammy A. Wisdom wrote: I completely agree... the real issue here is the system is flawed and RIPE/ARIN/APNIC etc have zero actual authority over actual routing. Yet another reason they aren't worth the money we flush down the toilet for them to do absolutely

RE: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Nathan Eisenberg
RIPE/ARIN/APNIC etc have zero actual authority over actual routing. That is not a flaw in the system, it is a fundamental precept of it. Their function (In Curran's words: as the community has defined it) is as a registry of allocation data, not as some kind of authoritative regional route

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread Jimmy Hess
On Aug 20, 2011, at 10:29 PM, Tammy A. Wisdom wrote: I completely agree... the real issue here is the system is flawed and RIPE/ARIN/APNIC etc have zero actual authority over actual routing.  Yet another reason they aren't worth the money we flush down the toilet for them to do absolutely

resolving prefix hijacks (was Re: Prefix hijacking by Michael Lindsay via Internap)

2011-08-21 Thread Ken Chase
On Sun, Aug 21, 2011 at 05:26:46PM +, Nathan Eisenberg said: John Curran appears to be completely open to constructive suggestions, so if you have real and substantive input, why not contribute your intellect to the problem and talk to him? Every organization has things they could be

Re: resolving prefix hijacks (was Re: Prefix hijacking by Michael Lindsay via Internap)

2011-08-21 Thread Jon Lewis
On Sun, 21 Aug 2011, Ken Chase wrote: That said, what is the de jure responce when a prefix is hijacked? Does anyone have a 'best practices' guide? I am sure some of the most effective vs legal practices are not in fact concomittant. It doesn't hurt to complain/announce about it here and

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-21 Thread David Conrad
Jimmy, On Aug 21, 2011, at 8:15 AM, Jimmy Hess wrote: The system is this way BY DESIGN, and any other method would concentrate power which would be detrimental to the internet and counter to its open/consensus driven nature. See recent discussions in RIPEland regarding BGPSEC+RPKI

Re: resolving prefix hijacks (was Re: Prefix hijacking by Michael Lindsay via Internap)

2011-08-21 Thread Randy Bush
John Curran appears to be completely open to constructive suggestions very well phrased unfortunately it is a long way to results, with very high variance randy

Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Denis Spirin
Hello All, I was hired by the Russian ISP company to get it back to the business. Due to impact of the financial crisis, the company was almost bankrupt, but then found the investor and have a big wish to life again. When I tried to announce it's networks, upstreams rejected to accept it because

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Randy
Your claim Denis Spirin really-stinks! ./randy --- On Sat, 8/20/11, Arturo Servin arturo.ser...@gmail.com wrote: From: Arturo Servin arturo.ser...@gmail.com Subject: Re: Prefix hijacking by Michael Lindsay via Internap To: Denis Spirin n...@link-telecom.net Cc: nanog@nanog.org Date

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Adrian
On Saturday 20 August 2011 18:05, Denis Spirin wrote: Hello All, I was hired by the Russian ISP company to get it back to the business. Due to impact of the financial crisis, the company was almost bankrupt, but then found the investor and have a big wish to life again. ... Received: from

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Denis Spirin
RIPE NCC staff is already doing its investigation. And RIPE NCC can't stop the routing at all. 2011/8/21 Suresh Ramasubramanian ops.li...@gmail.com Just as interesting is that those prefixes are certainly on spamhaus. This should turn out very interesting indeed - maybe RIPE NCC should just

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Suresh Ramasubramanian
You could ask that they withdraw the prefixes and see if that works? On Sun, Aug 21, 2011 at 8:45 AM, Denis Spirin n...@link-telecom.net wrote: RIPE NCC staff is already doing its investigation. And RIPE NCC can't stop the routing at all. -- Suresh Ramasubramanian (ops.li...@gmail.com)

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Denis Spirin
Yes, they are using our ASN 31733 to originate networks. All the visible paths are through AS12182. Internap was contacted about a week ago, but did nothing. No, I'm not a venture capitalist, but IT specialist. I am too sleepy, so replied to Adrian directly while wanted to post in the list.

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Suresh Ramasubramanian
Get that changed first eh? It just might prove that you own those prefixes. On Sun, Aug 21, 2011 at 9:02 AM, Denis Spirin n...@link-telecom.net wrote: RIPE NCC can't withdraw any prefixes. They can do de-registration. In this case it will not lead to withdraw, as it is announced without any

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread William Herrin
On Sat, Aug 20, 2011 at 11:18 PM, Suresh Ramasubramanian ops.li...@gmail.com wrote: You could ask that they withdraw the prefixes and see if that works? whois 46.96.0.0 inetnum:46.96.0.0 - 46.96.39.255 netname:LINKTEL-MAN-ETHERNET-EXTENSION Updated:2011-03-15

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Suresh Ramasubramanian
I did ask him to try it and see if it works .. when it doesn't work, that'd be the next act in this little dog and pony show. On Sun, Aug 21, 2011 at 9:11 AM, William Herrin b...@herrin.us wrote: The Spamhaus reports appear credible, as does the RIPE registration issue with those prefixes. If

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Arturo Servin
On 21 Aug 2011, at 00:28, Denis Spirin wrote: Yes, they are using our ASN 31733 to originate networks. All the visible paths are through AS12182. Internap was contacted about a week ago, but did nothing. Which seems to be the right decision because the whois data backed it on.

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread David Conrad
On Aug 20, 2011, at 6:01 PM, Arturo Servin wrote: If you are claiming right over these prefixes I suggest you to contact RIPE NCC. And that will do what exactly? Back when I worked at an RIR, a prefix was misplaced. When I contacted the (country monopoly PTT) ISP and told them the

Re: Prefix hijacking by Michael Lindsay via Internap

2011-08-20 Thread Tammy A. Wisdom
: David Conrad d...@virtualized.org To: Arturo Servin arturo.ser...@gmail.com Cc: nanog@nanog.org Sent: Saturday, August 20, 2011 11:25:51 PM Subject: Re: Prefix hijacking by Michael Lindsay via Internap On Aug 20, 2011, at 6:01 PM, Arturo Servin wrote: If you are claiming right over