On Wed, May 05, 2021 at 12:52:51PM +0200, Kurt Kayser wrote: > you surely know that every enabled protocol/port is a potential threat.
Sometimes disabling a protocol or port is a potential threat (because hindering troubleshooting efforts harms network stability). RIPE NCC is the only RIR that does not respond to ICMP Echo Requests on their main RPKI service. Kind regards, Job $ ping -c 1 rpki.afrinic.net PING rpki.afrinic.net (196.216.2.26): 56 data bytes 64 bytes from 196.216.2.26: icmp_seq=0 ttl=48 time=183.631 ms --- rpki.afrinic.net ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 183.631/183.631/183.631/0.000 ms $ ping -c 1 rpki.apnic.net PING rpki.apnic.net (203.119.101.18): 56 data bytes 64 bytes from 203.119.101.18: icmp_seq=0 ttl=240 time=315.433 ms --- rpki.apnic.net ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 315.433/315.433/315.433/0.000 ms $ ping -c 1 rpki.lacnic.net PING rpki.lacnic.net (200.3.14.185): 56 data bytes 64 bytes from 200.3.14.185: icmp_seq=0 ttl=49 time=204.922 ms --- rpki.lacnic.net ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 204.922/204.922/204.922/0.000 ms $ ping -c 1 rpki.arin.net ping: Warning: rpki.arin.net has multiple addresses; using 199.71.0.150 PING rpki.arin.net (199.71.0.150): 56 data bytes 64 bytes from 199.71.0.150: icmp_seq=0 ttl=51 time=152.630 ms --- rpki.arin.net ping statistics --- 1 packets transmitted, 1 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 152.630/152.630/152.630/0.000 ms
