Re: [db-wg] Getting fraudulent entries removed

2018-04-07 Thread Nick Hilliard via db-wg
> Generally it's sensible practice to filter on source: attributes, as > there is a good deal ... of unfinished emails on the internet. Also, of junk stored in a bunch of irrdbs, some of which have ended up as unmaintained toxic dumping grounds for route objects. Nick

Re: [db-wg] Getting fraudulent entries removed

2018-04-07 Thread Nick Hilliard via db-wg
Randy Bush wrote: > peval() does not look at source:. and thanks, don't tell a whole lot of > folk to change software. it does if you tell it to: % peval -s RIPE AS-BLAH Generally it's sensible practice to filter on source: attributes, as there is a good deal > and you know that the point of

Re: [db-wg] Getting fraudulent entries removed

2018-04-05 Thread Brian Rak via db-wg
On 4/5/2018 2:27 PM, Nick Hilliard via db-wg wrote: Randy Bush via db-wg wrote: and we are supposed to use the high quality ripe irr as authoritative data for routing validation? the current plan is to re-mark all out-of-region route / route6 / autnum objects with source: RIPE-NONAUTH and to

Re: [db-wg] Getting fraudulent entries removed

2018-04-05 Thread Nick Hilliard via db-wg
Randy Bush via db-wg wrote: > and we are supposed to use the high quality ripe irr as authoritative > data for routing validation? the current plan is to re-mark all out-of-region route / route6 / autnum objects with source: RIPE-NONAUTH and to disable creation of these objects in future. Unless

Re: [db-wg] Getting fraudulent entries removed

2018-04-05 Thread Randy Bush via db-wg
> We're back to this again...  more of our space is being hijacked using > a RIPE IRR entry: > > route:  108.160.128.0/20 > descr:  2nd route > origin: AS19529 > mnt-by: ADMASTER-MNT > created:    2017-11-15T17:41:46Z > last-modified:  2017-11-15T17:41:46Z >

Re: [db-wg] Getting fraudulent entries removed

2018-04-05 Thread Brian Rak via db-wg
We're back to this again...  more of our space is being hijacked using a RIPE IRR entry: route:  108.160.128.0/20 descr:  2nd route origin: AS19529 mnt-by: ADMASTER-MNT created:    2017-11-15T17:41:46Z last-modified:  2017-11-15T17:41:46Z source: RIPE

Re: [db-wg] Getting fraudulent entries removed

2017-11-09 Thread Nick Hilliard via db-wg
denis walker via db-wg wrote: > Perhaps after the RIPE NCC implements the agreed actions on foreign > ROUTE objects, it would be a good idea to do a (one time?) > cleanup/review of all foreign ROUTE objects in the RIPE IRR. Find the > contact details in the appropriate RIR Database for all non

Re: [db-wg] Getting fraudulent entries removed

2017-11-09 Thread Job Snijders via db-wg
lete the ROUTE object. > > cheers > denis > co-chair DB WG > > > -- > *From:* Job Snijders via db-wg <db-wg@ripe.net> > *To:* Brian Rak <b...@choopa.com> > *Cc:* db-wg@ripe.net > *Sent:* Thursday, 9 November 2017, 17:5

Re: [db-wg] Getting fraudulent entries removed

2017-11-09 Thread denis walker via db-wg
hoopa.com> Cc: db-wg@ripe.net Sent: Thursday, 9 November 2017, 17:53 Subject: Re: [db-wg] Getting fraudulent entries removed Dear Brian, It appears that RIPE NCC is lacking a clear and expedient procedure to remedy unauthorised route object creation. I'd be happy to volunteer to work with

Re: [db-wg] Getting fraudulent entries removed

2017-11-09 Thread Bengt Gördén via db-wg
Den 2017-11-09 kl. 17:22, skrev Brian Rak via db-wg: > Hi, > > We've run into an issue where an unknown malicious party appears to > have hijacked some of our IP space.  They created entries in the RIPE > database that they are using to actually get this space announced.  > What's even worse is

Re: [db-wg] Getting fraudulent entries removed

2017-11-09 Thread Job Snijders via db-wg
Dear Brian, It appears that RIPE NCC is lacking a clear and expedient procedure to remedy unauthorised route object creation. I'd be happy to volunteer to work with the RIPE NCC to develop a procedure that aligns with industry standards on how to verify abuse reports like these and resolve them