Re: New Draft Document: De-boganising New Address Blocks

2004-02-25 Thread Randy Bush
[ nick has trouble posting, so ... ] Date: Wed, 25 Feb 2004 00:27:00 -0500 From: Nick Feamster [EMAIL PROTECTED] Subject: Re: New Draft Document: De-boganising New Address Blocks To: [EMAIL PROTECTED] User-Agent: Mutt/1.4.1i On Tue, Feb 24, 2004 at 06:28:48PM +0100, Daniel Karrenberg wrote

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Michael . Dillon
The RIPE NCC has prepared a draft document titled De-Bogonising New Address Blocks: That is a misleading title. The problem is that ISPs cannot react quickly enough to open filters when new ranges are allocated. The proposed solution is to provide advance notification. I suppose this could

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Timothy Brown
On Tue, Feb 24, 2004 at 04:32:46PM +, [EMAIL PROTECTED] wrote: The RIPE NCC has prepared a draft document titled De-Bogonising New Address Blocks: That is a misleading title. The problem is that ISPs cannot react quickly enough to open filters when new ranges are allocated. The

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Daniel Karrenberg
On 24.02 16:32, [EMAIL PROTECTED] wrote: That is a misleading title. I thought it was to the point and rather cute ;-). The problem is that ISPs cannot react quickly enough to open filters when new ranges are allocated. The proposed solution is to provide advance notification. I suppose

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Petri Helenius
Daniel Karrenberg wrote: Correct, but only in the absence of more specific filtering. the problem this proposal aims to correct is the increasing number of false positives caused by the apparent *serious* lag in relatively static bogon filtering. Do you think this can be fixed after vendors

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread william(at)elan.net
On Tue, 24 Feb 2004, Timothy Brown wrote: On Tue, Feb 24, 2004 at 04:32:46PM +, [EMAIL PROTECTED] wrote: The RIPE NCC has prepared a draft document titled De-Bogonising New Address Blocks: That is a misleading title. I agree, consindering the block is still a bogon until it has

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Timothy Brown
Completewhois bogon ip lists provide data on ip blocks that are not allocated by RIRs to ISPs (rather then just list of /8 blocks not allocated by IANA to RIRs as for example cymru does). The list can be used for anti-spam filtering through dns using rbl-like feed at

RE: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Michel Py
William, william(at)elan.net wrote: [http://www.cymru.com/BGP/bogon-rs.html] Unfortunetly this is kind-of a bgp hack and as has been already mentioned it needs very carefull implemention This is not positive thinking. I don't consider this a hack (if it is, then the draft that proposes to

RE: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread Michel Py
Timothy Brown wrote: I disagree with the view that it is a hack. It's no more a hack than using a DNS feed; I concur with this. Besides, from the pragmatic side of the consumer, if it does solve a problem (albeit short or medium term) I don't care much if it's a hack. Hint: all this bogon or

Re: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread william(at)elan.net
On Tue, 24 Feb 2004, Timothy Brown wrote: Completewhois bogon ip lists provide data on ip blocks that are not allocated by RIRs to ISPs (rather then just list of /8 blocks not allocated by IANA to RIRs as for example cymru does). The list can be used for anti-spam filtering through dns

RE: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread william(at)elan.net
On Tue, 24 Feb 2004, Michel Py wrote: William, william(at)elan.net wrote: [http://www.cymru.com/BGP/bogon-rs.html] Unfortunetly this is kind-of a bgp hack and as has been already mentioned it needs very carefull implemention This is not positive thinking. I don't consider this

RE: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread william(at)elan.net
On Tue, 24 Feb 2004, Michel Py wrote: Hint: all this bogon or related filtering is not a long-term solution. We need it now, but the long term solution is some kind of authentication that will allow only the rightful owner of a block to announce it. This I completely agree with. The correct

RE: New Draft Document: De-boganising New Address Blocks

2004-02-24 Thread william(at)elan.net
BTW - in the email it meant to be just stand DOS (Original IBM PC Operating System based on CP/M), I automaticly write small o now when using this word because of how I've used it in the last sevaral years On Tue, 24 Feb 2004, william(at)elan.net wrote: On Tue, 24 Feb 2004, Michel Py