Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-18 Thread Patrick W. Gilmore
On Sep 17, 2008, at 4:07 PM, David Ulevitch wrote: Patrick W. Gilmore wrote: On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: At the end of the day, nobody is going to drop packets for amazon's IP space. I'm afraid reality disagrees with you - there already are networks doing it. Being

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-18 Thread Andy Davidson
On 17 Sep 2008, at 18:32, David Ulevitch wrote: At the end of the day, nobody is going to drop packets for amazon's IP space. I have a customer that sells online, and is dropping stuff from ec2 today due to abuse. Andy

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-18 Thread Suresh Ramasubramanian
It exists but not in bgp form - http://www.spamhaus.org/drop/ Dont Route Or Peer srs On Wed, Sep 17, 2008 at 7:01 PM, Gadi Evron <[EMAIL PROTECTED]> wrote: > On Wed, 17 Sep 2008, Skywing wrote: >> >> Putting things in the automated bogon feeds (e.g. Team Cymru) that are not >> strictly bogons (

RE: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Tomas L. Byrnes
day, September 17, 2008 11:27 AM > To: nanog@nanog.org > Subject: Re: Atrivo/Intercage: Now Only 1 Upstream > > Lamar Owen wrote: > > On Wednesday 17 September 2008 13:34:22 Patrick W. Gilmore wrote: > >> On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: > >&g

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Steve Gibbard
On Wed, 17 Sep 2008, David Ulevitch wrote: Reputation based on src_addr is /so/ 2005. ASN has a few more legs perhaps... but... All the growth in Internet-connected compute clouds (EC2, AppNexus, GoGrid, etc.) makes any system based around IP reputation decidedly less useful. At the end of

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Lamar Owen
On Wednesday 17 September 2008 16:53:35 Laurence F. Sheldon, Jr. wrote: > > Some people would really like email to be as reliable as possible, even > > if that means they have to wade through a lot of spam. > > By what twisted logic can a system where desired email is found when " > they have to wa

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Laurence F. Sheldon, Jr.
Some people would really like email to be as reliable as possible, even if that means they have to wade through a lot of spam. By what twisted logic can a system where desired email is found when " they have to wade through a lot of spam"? Have you ever inadvertently deleted a desired item

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Seth Mattinen
David Schwartz wrote: >> I occasionally get in to an argument with a customer who is trying to >> get mail from someone after a spam run came out of a google mail server >> and landed it on a DNSBL. The argument presented to me always boils down >> to "Google could never do anything wrong" or "Goog

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread David Ulevitch
Patrick W. Gilmore wrote: On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: At the end of the day, nobody is going to drop packets for amazon's IP space. I'm afraid reality disagrees with you - there already are networks doing it. Being big does not guarantee you ability to do Bad Things

RE: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread David Schwartz
> I occasionally get in to an argument with a customer who is trying to > get mail from someone after a spam run came out of a google mail server > and landed it on a DNSBL. The argument presented to me always boils down > to "Google could never do anything wrong" or "Google is too big to do > any

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Christopher Morrow
On Wed, Sep 17, 2008 at 1:32 PM, David Ulevitch <[EMAIL PROTECTED]> wrote: > Christopher Morrow wrote: > >> How about providing some open-source intelligence in a centralized and >> machine-parsable fashion (perhaps with community input of intel even) >> which would allow better decsions to be made

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Christopher Morrow
On Wed, Sep 17, 2008 at 1:40 PM, Gadi Evron <[EMAIL PROTECTED]> wrote: > On Wed, 17 Sep 2008, Christopher Morrow wrote: >> How about providing some open-source intelligence in a centralized and >> machine-parsable fashion (perhaps with community input of intel even) >> which would allow better decs

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Christopher Morrow
On Wed, Sep 17, 2008 at 1:34 PM, Lamar Owen <[EMAIL PROTECTED]> wrote: > The point made by Christopher Morrow is well taken: >> There's the additional issue of allowing a third party to >>manage/traffic-engineer inside your network which might upset some >>operations folks. If you can build a list

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Seth Mattinen
Lamar Owen wrote: > On Wednesday 17 September 2008 13:34:22 Patrick W. Gilmore wrote: >> On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: >>> At the end of the day, nobody is going to drop packets for amazon's >>> IP space. > >> I'm afraid reality disagrees with you - there already are networks

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Lamar Owen
On Wednesday 17 September 2008 13:34:22 Patrick W. Gilmore wrote: > On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: > > At the end of the day, nobody is going to drop packets for amazon's > > IP space. > I'm afraid reality disagrees with you - there already are networks > doing it. Indeed. Go

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Gadi Evron
On Wed, 17 Sep 2008, Christopher Morrow wrote: On Wed, Sep 17, 2008 at 1:01 PM, Gadi Evron <[EMAIL PROTECTED]> wrote: On Wed, 17 Sep 2008, Skywing wrote: Putting things in the automated bogon feeds (e.g. Team Cymru) that are not strictly bogons (unallocated addresses) is likely to very quickly

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Lamar Owen
On Wednesday 17 September 2008 12:55:49 Skywing wrote: >> Lamar Owen Wrote: >> Seems to me getting that IP space on a bogon list could be enough to make a >> serious dent. > Putting things in the automated bogon feeds (e.g. Team Cymru) that are not > strictly bogons (unallocated addresses) is like

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Patrick W. Gilmore
On Sep 17, 2008, at 1:32 PM, David Ulevitch wrote: Christopher Morrow wrote: How about providing some open-source intelligence in a centralized and machine-parsable fashion (perhaps with community input of intel even) which would allow better decsions to be made? Reputation based on src_add

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread David Ulevitch
Christopher Morrow wrote: How about providing some open-source intelligence in a centralized and machine-parsable fashion (perhaps with community input of intel even) which would allow better decsions to be made? Reputation based on src_addr is /so/ 2005. ASN has a few more legs perhaps... b

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Christian Koch
On Wed, Sep 17, 2008 at 1:07 PM, Christopher Morrow <[EMAIL PROTECTED]> wrote: > On Wed, Sep 17, 2008 at 1:01 PM, Gadi Evron <[EMAIL PROTECTED]> wrote: >> On Wed, 17 Sep 2008, Skywing wrote: >>> >>> Putting things in the automated bogon feeds (e.g. Team Cymru) that are not >>> strictly bogons (unal

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Christopher Morrow
On Wed, Sep 17, 2008 at 1:01 PM, Gadi Evron <[EMAIL PROTECTED]> wrote: > On Wed, 17 Sep 2008, Skywing wrote: >> >> Putting things in the automated bogon feeds (e.g. Team Cymru) that are not >> strictly bogons (unallocated addresses) is likely to very quickly erode >> trust in those services, if tha

RE: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Gadi Evron
; BGP feed for anyone who wants it, but the Internet is not ready for that. Gadi. - S -Original Message- From: Lamar Owen <[EMAIL PROTECTED]> Sent: Wednesday, September 17, 2008 09:26 To: nanog@nanog.org Subject: Re: Atrivo/Intercage: Now Only 1 Upstream On Tuesday 1

RE: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Skywing
nesday, September 17, 2008 09:26 To: nanog@nanog.org Subject: Re: Atrivo/Intercage: Now Only 1 Upstream On Tuesday 16 September 2008 23:36:20 *Hobbit* wrote: >you expect them to apply a null route? > > Well, I *have* been talking somewhat idealistically here and > there with this

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Lamar Owen
On Tuesday 16 September 2008 23:36:20 *Hobbit* wrote: >you expect them to apply a null route? > > Well, I *have* been talking somewhat idealistically here and > there with this crop of questions, but frankly I thought in the > 2 or 3 years I was ignoring the list that the NETWORK OPERATORS > os

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-17 Thread Suresh Ramasubramanian
Looks like PIE got themselves a /22 in spamhaus - http://www.spamhaus.org/sbl/sbl.lasso?query=SBL67906 _quote__ 206.223.144.0/22 is listed on the Spamhaus Block List (SBL) 17-Sep-2008 09:57 GMT | SR04 Pacific Internet Exchange LLC. NT Technology ; nttec.com http://cidr-report.

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread Matthew Moyle-Croft
On 16/09/2008, at 10:17 PM, *Hobbit* wrote: So in cases like this where the community appears to agree that there's a consistently bad apple, what's preventing everyone from simply nullrouting the netblocks in question and imposing the death penalty? Dunno - but something did occur to me th

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread *Hobbit*
you expect them to apply a null route? Well, I *have* been talking somewhat idealistically here and there with this crop of questions, but frankly I thought in the 2 or 3 years I was ignoring the list that the NETWORK OPERATORS ostensibly in custody of the intertubes would have pulled things to

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread Valdis . Kletnieks
On Tue, 16 Sep 2008 12:47:26 -, *Hobbit* said: > So in cases like this where the community appears to agree that there's > a consistently bad apple, what's preventing everyone from simply "what's preventing everyone"? Geez Hobbit, I *know* you've been around long enough to know better than th

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread Paul Vixie
[EMAIL PROTECTED] (*Hobbit*) writes: > So in cases like this where the community appears to agree that there's > a consistently bad apple, what's preventing everyone from simply > nullrouting the netblocks in question and imposing the death penalty? http://www.spamhaus.org/drop/ seems to have atr

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread *Hobbit*
So in cases like this where the community appears to agree that there's a consistently bad apple, what's preventing everyone from simply nullrouting the netblocks in question and imposing the death penalty? Sorry if this seems naive, but if no legitimate purpose is shown it seems like the obvious

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-16 Thread Patrick W. Gilmore
On Sep 16, 2008, at 1:55 AM, Paul Ferguson wrote: By the way, a lot of folks are watching all domains registered within Atrivo/Intercage IP address space every day. Here's a few for you to decide -- and they have been registered only in the past few days: undaground.biz pillshere.net ukrnic.inf

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-15 Thread Hank Nussbacher
On Tue, 16 Sep 2008, Paul Ferguson wrote: In any event, the badness is still there. Lots of it. Not according to this: http://www.domainnews.com/en/general/estdomains-denies-links-to-malware-distribution.html "The company also has a reliable ally in its battle against malware in a face of In

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-15 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- "Paul Wall" <[EMAIL PROTECTED]> wrote: >Cogent is keeping tabs of the Intercage/Atrivo situation in ticket >HD000789038. Be sure to e-mail or call them referencing that >number with any information you may have to share. > >AboveNet's ticket

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-15 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- "Paul Wall" <[EMAIL PROTECTED]> wrote: >Cogent is keeping tabs of the Intercage/Atrivo situation in ticket >HD000789038. Be sure to e-mail or call them referencing that >number with any information you may have to share. > >AboveNet's ticket

Re: Atrivo/Intercage: Now Only 1 Upstream

2008-09-15 Thread Paul Wall
Paul, Cogent is keeping tabs of the Intercage/Atrivo situation in ticket HD000789038. Be sure to e-mail or call them referencing that number with any information you may have to share. AboveNet's ticket auto-responder is broken. I've been unable to get a response out of NTT (AS 2914). Driv