Re: 69/8...this sucks -- Centralizing filtering..

2003-03-14 Thread Shane Kerr
[ apologies for the long post ] On 2003-03-11 19:57:04 +, [EMAIL PROTECTED] wrote: > > Also, on a side rant hereWhy do all the RIR's have to give out > whois data in different, incompatible, referal-breaking formats? The reason for the different formats is partly historical, and partial

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-13 Thread Owen DeLong
It's probably harder for anyone on this list to take BandyRush seriously than the other posters in question. :-) Owen --On Wednesday, March 12, 2003 22:01 -0500 [EMAIL PROTECTED] wrote: On Wed, 12 Mar 2003 21:27:51 EST, Andy Dills <[EMAIL PROTECTED]> said: Not be offended if somebody didn't kn

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-13 Thread Owen DeLong
Can you and he please take the gender debate off-list? Thanks, Owen --On Wednesday, March 12, 2003 17:36 -0800 JC Dill <[EMAIL PROTECTED]> wrote: Miss Rothschild wrote: On 2003-03-11-21:01:00, JC Dill <[EMAIL PROTECTED]> wrote: (Note to Mr. Dill, this is not intended to pick on you specificall

Re: 69/8...this sucks

2003-03-13 Thread Niels Bakker
* [EMAIL PROTECTED] (Charles Sprickman) [Wed 12 Mar 2003, 00:22 CET]: > Seriously though, somewhere there is a popular site that is non-profit in > nature that would trade say a month of free access for the hassle of being > put into a widely-blocked block. Apparently hack.co.za has recently been

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Valdis . Kletnieks
On Wed, 12 Mar 2003 21:27:51 EST, Andy Dills <[EMAIL PROTECTED]> said: > Not be offended if somebody didn't know my gender? Fortunately, none of the simians on the list have objected to being classified as 'banana eaters' ;) pgp0.pgp Description: PGP signature

RE: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Vivien M.
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Jack Bates > Sent: March 12, 2003 9:29 PM > To: [EMAIL PROTECTED] > Subject: Re: Put part of Google on 69/8 (was Re: 69/8...this sucks) > > > > From: "Vivi

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Jack Bates
From: "Vivien M." > I've had the opposite problem (people thinking I'm female, when I'm not...), > and it can get quite annoying, I agree. > Is this a pick up list? Find the guy or gal of your dreams that can think too? I figure that you either earn people's respect or admiration or you don't. Ma

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Andy Dills
On Wed, 12 Mar 2003, JC Dill wrote: > It is offensive to many people (both male and female) when someone > automatically assumes that an "unknown" person is male. Especially since: > > Females aged 2 and up accounted for 50.4 percent of U.S. > Internet users in May, edging out their

RE: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Vivien M.
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of JC Dill > Sent: March 12, 2003 8:37 PM > To: [EMAIL PROTECTED] > Subject: Re: Put part of Google on 69/8 (was Re: 69/8...this sucks) > > It is offensive to many people (bo

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread JC Dill
Miss Rothschild wrote: On 2003-03-11-21:01:00, JC Dill <[EMAIL PROTECTED]> wrote: (Note to Mr. Dill, this is not intended to pick on you specifically, it's just a convenient place to butt in) Ahem. It's _MS._ Dill, thank you. Please post with a gender-specific name if you want to take offense whe

Re: 69/8...this sucks

2003-03-12 Thread Andy Dills
On Wed, 12 Mar 2003, Peter E. Fry wrote: > Andy Dills wrote: > > > > Sure. If the NSPs would just filter the bogon routes, nobody else would > > have to bother. Why is it that they don't? > > Filter (public, private and transit) peers or customers...? Or > themselves? Yes. Andy

Re: 69/8...this sucks

2003-03-12 Thread Peter E. Fry
Andy Dills wrote: > > On Wed, 12 Mar 2003, Randy Bush wrote: > > > maybe we should not encourage those who do not have time, talent, > > and inclination to install bogon route filters that need to be > > maintained? > > Sure. If the NSPs would just filter the bogon routes, nobody else would > ha

Re: 69/8...this sucks

2003-03-12 Thread Andy Dills
On Wed, 12 Mar 2003, Randy Bush wrote: > > > The problem is small mom&pop ISPs and companies where the NOC and the > > senior secretary share a desk, and possibly a name. > > maybe we should not encourage those who do not have time, talent, > and inclination to install bogon route filters that ne

Re: 69/8...this sucks

2003-03-12 Thread Randy Bush
> The problem is small mom&pop ISPs and companies where the NOC and the > senior secretary share a desk, and possibly a name. maybe we should not encourage those who do not have time, talent, and inclination to install bogon route filters that need to be maintained?

Re: 69/8...this sucks

2003-03-12 Thread Valdis . Kletnieks
On Tue, 11 Mar 2003 18:22:14 EST, Charles Sprickman said: > Hey, I already came up with the slashdot idea. An excellent choice - the average slashdot reader would resent any implication that they were using a substandard clueless ISP, and would complain in a most vociferous manner.. ;) pgp0

Re: 69/8...this sucks

2003-03-12 Thread Valdis . Kletnieks
On Tue, 11 Mar 2003 14:58:10 MST, "Alec H. Peterson" said: > How about if we all chip in to hire a bunch of out of work consultants to > fly to the NOCs of the various backbones who are being boneheaded to > educate them with a clue-by-four? I suspect the problem isn't the backbones that have a

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Tim Thorne
JC Dill <[EMAIL PROTECTED]> wrote: >Sure you can. You just need content unimportant enough that no one (the >end users on a network that is still blocking 69/8, AND the networks >that put up the sacrificial target host on a 69/8 IP) is truly hurt if >the connection fails, but important enough

RE: 69/8...this sucks

2003-03-12 Thread Owen DeLong
I'm trying to get some time to actually put it in a router and test, but I believe there is a way to get similar functionality through a combination of route-map entries. When I have actual router config (I'll be testing on Cisco, but if anyone want's to provide me a Juniper testbed, I'll be happy

Re: 69/8...this sucks

2003-03-12 Thread Stephen Sprunk
Thus spake "Jack Bates" <[EMAIL PROTECTED]> > After the renumber, I'll > only have 69/8 space, which means all critical services such as my mail, > dns, and web servers will all be affected. I hear it now. "I didn't receive > mail from so and so!" I check the logs and don't see an established > co

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Stephen Sprunk
Thus spake "JC Dill" <[EMAIL PROTECTED]> > p.s. Please don't cc me on replies, or on replies to replies, etc. I > get the list email just fine and I don't need more than one copy of any > given email. Really. 1) nanog can sometimes take hours to forward posts to all members 2) the people dir

Re: [Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)]

2003-03-12 Thread Joshua Smith
for all of the $adjective schemes and ideas that have been posted, has anyone (besides jon and few others affected) been doing anything substanitive? outreach, more than any technical 'magic' that we can come up with, is the only 'real' solution (subjective real, what is real to me probably doesn

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-12 Thread Greg Maxwell
On Tue, 11 Mar 2003, Adam Rothschild wrote: > On 2003-03-11-21:01:00, JC Dill <[EMAIL PROTECTED]> wrote: > > failure will lead to the broken networks being fixed and clue being > > distributed. > > How do I configure my routers and web servers for that? no ip clue-inhibit ip bgp redistribute-clu

RE: 69/8...this sucks

2003-03-12 Thread David Luyer
Stephen J Wilcox wrote: > On Wed, 12 Mar 2003, David Luyer wrote: > > Iljitsch van Beijnum wrote: > > > On Tue, 11 Mar 2003, Owen DeLong wrote: > > > > > > > In short, it doesn't. Longer answer, if the ISP configures > > > > his router correctly, he can actually refuse to accept > > > > adverti

RE: 69/8...this sucks

2003-03-12 Thread Stephen J. Wilcox
On Wed, 12 Mar 2003, David Luyer wrote: > > Iljitsch van Beijnum wrote: > > On Tue, 11 Mar 2003, Owen DeLong wrote: > > > > > In short, it doesn't. Longer answer, if the ISP configures > > > his router correctly, he can actually refuse to accept > > > advertisements from other sessions that

RE: 69/8...this sucks

2003-03-12 Thread David Luyer
Iljitsch van Beijnum wrote: > On Tue, 11 Mar 2003, Owen DeLong wrote: > > > In short, it doesn't. Longer answer, if the ISP configures > > his router correctly, he can actually refuse to accept > > advertisements from other sessions that are longer versions > > of prefixes received through this

Re: 69/8...this sucks

2003-03-11 Thread ed
> In addition, sometimes the problem is that my user just needs to put the > crack pipe down. I just don't feel comfortable with this last one anymore, > though. I can't be sure it's the crack. It could be the IPs. How do I know? I'm not a major router admin. I manage a couple dozen /24's and th

Re: 69/8...this sucks

2003-03-11 Thread Jack Bates
From: "Andy Dills" > Are you ok with a solution of patiently waiting for some sort of critical > mass to occur with each new /8 that gets allocated? Sooner or later, > enough content will be in 69/8 (and other commonly filtered /8s) that > people will be forced to fix their filters. But is that t

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread Adam Rothschild
On 2003-03-11-21:01:00, JC Dill <[EMAIL PROTECTED]> wrote: > [...] > > (Note to Mr. Dill, this is not intended to pick on you specifically, > > it's just a convenient place to butt in) > > > Ahem. It's _MS._ Dill, thank you. Please post with a gender-specific name if you want to take offense

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread Richard A Steenbergen
On Tue, Mar 11, 2003 at 06:01:00PM -0800, JC Dill wrote: > > Ahem. It's _MS._ Dill, thank you. Woops, my apologies _MS._ Dill. The JC is ambiguous. > Maybe next time you will stop and think "will this make me look like a > sexist idiot in front of engineers across the entire planet"? before >

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread JC Dill
Richard A Steenbergen wrote: On Tue, Mar 11, 2003 at 04:44:11PM -0800, JC Dill wrote: Charles Sprickman wrote: Seriously though, somewhere there is a popular site that is non-profit in nature that would trade say a month of free access for the hassle of being put into a widely-blocked block. The

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Jack Bates
From: "Iljitsch van Beijnum" > > I don't see your point. Packets with bogon sources are just one class of > spoofed packets. As I've explained earlier S-BGP or soBGP with uRPF will > get rid of bogons. Neither this or bogon filters on the host will do > anything against non-bogon spoofed packets.

RE: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread Todd A. Blank
. Sincerely, Todd A. Blank CTO IPOutlet LLC 614.207.5853 -Original Message- From: McBurnett, Jim [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 11, 2003 8:00 PM To: JC Dill; [EMAIL PROTECTED] Subject: RE: Put part of Google on 69/8 (was Re: 69/8...this sucks) Idea #2.. CNN.com-- Put some

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread wireworks
e not just me. With all of us pounding away the problems clear quickly. - Original Message - From: "Richard A Steenbergen" <[EMAIL PROTECTED]> To: "JC Dill" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, March 11, 2003 5:17 PM Subje

Re: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread Richard A Steenbergen
On Tue, Mar 11, 2003 at 04:44:11PM -0800, JC Dill wrote: > > Charles Sprickman wrote: > > >Seriously though, somewhere there is a popular site that is non-profit in > >nature that would trade say a month of free access for the hassle of being > >put into a widely-blocked block. > > The suggesti

RE: Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread McBurnett, Jim
Idea #2.. CNN.com-- Put some of their content.. They would probrably really enjoy the publicity.. And that would really be an educational point.. Anybody here from there??? Jim > The suggestion of putting Yahoo or Google on a 69/8 IP led me to this > idea: > > Google could put their *beta*

Re: 69/8...this sucks

2003-03-11 Thread Andy Dills
On Tue, 11 Mar 2003, Richard A Steenbergen wrote: > > On Tue, Mar 11, 2003 at 11:38:23AM -0800, Owen DeLong wrote: > > > > As such, is a BGP feed a panacea? No. Is it a step in the right direction? > > Yes. Will it solve the problem by itself? No. Will it improve the > > So, someone feel fre

Put part of Google on 69/8 (was Re: 69/8...this sucks)

2003-03-11 Thread JC Dill
Charles Sprickman wrote: Seriously though, somewhere there is a popular site that is non-profit in nature that would trade say a month of free access for the hassle of being put into a widely-blocked block. The suggestion of putting Yahoo or Google on a 69/8 IP led me to this idea: Google could

Re: 69/8...this sucks

2003-03-11 Thread Andy Dills
On Tue, 11 Mar 2003, Randy Bush wrote: > > > Look, there's no quick fix solution here. > > so let's see how much of a kludge we can make to show how clever > we are. Excellent point...but then, what to do? Have we given up and decided that addressing the 69/8 (and similar, future issues) is a s

Re: 69/8...this sucks

2003-03-11 Thread william
To a degree the problem is ability to reach proper persons. I'd like to be able to enter as# or ip and immediatly get email for a tech who knows what to do. Radb is supposed to provide some of these functionalities, so does ip whois, so does dns whois. Usually one of these will get you what you

Re: 69/8...this sucks

2003-03-11 Thread Charles Sprickman
On Tue, 11 Mar 2003, Randy Bush wrote: > so let's see how much of a kludge we can make to show how clever > we are. Hey, I already came up with the slashdot idea. Seriously though, somewhere there is a popular site that is non-profit in nature that would trade say a month of free access for the

RE: 69/8...this sucks

2003-03-11 Thread Iljitsch van Beijnum
On Tue, 11 Mar 2003, Owen DeLong wrote: > In short, it doesn't. Longer answer, if the ISP configures his router > correctly, he can actually refuse to accept advertisements from other > sessions that are longer versions of prefixes received through this session. How???

Re: 69/8...this sucks

2003-03-11 Thread Alec H. Peterson
--On Tuesday, March 11, 2003 16:47 -0500 Randy Bush <[EMAIL PROTECTED]> wrote: so let's see how much of a kludge we can make to show how clever we are. How about if we all chip in to hire a bunch of out of work consultants to fly to the NOCs of the various backbones who are being boneheaded to e

Re: 69/8...this sucks

2003-03-11 Thread Randy Bush
> Look, there's no quick fix solution here. so let's see how much of a kludge we can make to show how clever we are. randy

RE: 69/8...this sucks

2003-03-11 Thread Andy Dills
On Tue, 11 Mar 2003, Rick Duff wrote: > I've never posted to the list, just lurk, for over a year now, but this > has to be said. Can we please take this discussion off-list to private > conversation. It's gotten worse then spam. I see a nanog message and > just start deleting them now. Come on.

Re: 69/8...this sucks

2003-03-11 Thread Richard A Steenbergen
On Tue, Mar 11, 2003 at 11:38:23AM -0800, Owen DeLong wrote: > > As such, is a BGP feed a panacea? No. Is it a step in the right direction? > Yes. Will it solve the problem by itself? No. Will it improve the So, someone feel free to smack me if I'm mentioning something which has been disc

Re: 69/8...this sucks

2003-03-11 Thread Larry J. Blunk
> I agree. > > -Original Message- > From: Rick Duff [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 11, 2003 2:09 PM > To: 'Larry J. Blunk'; 'Andy Dills' > Cc: 'Ejay Hire'; [EMAIL PROTECTED] > Subject: RE: 69/8...this sucks > >

RE: 69/8...this sucks

2003-03-11 Thread Rick Duff
om: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Larry J. Blunk Sent: Tuesday, March 11, 2003 1:01 PM To: Andy Dills Cc: Ejay Hire; [EMAIL PROTECTED] Subject: Re: 69/8...this sucks > > On Tue, 11 Mar 2003, Ejay Hire wrote: > > > Er, guys... How does this fix the pr

Re: 69/8...this sucks

2003-03-11 Thread Larry J. Blunk
> > On Tue, 11 Mar 2003, Ejay Hire wrote: > > > Er, guys... How does this fix the problem of a Malicious user > > advertising a more specific bogon route? > > Come on...clearly you haven't been paying attention. > > You need LDAP filters. LDAP filters and a South Vietnamese revolution > agai

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread jlewis
On Mon, 10 Mar 2003, Ray Bellis wrote: > Most people seem to think it would be impractical to put the root name > servers in 69.0.0.0/8 > > Why not persuade ARIN to put whois.arin.net in there instead? It > shouldn't take the people with the broken filters *too* long to figure > out why they ca

RE: 69/8...this sucks

2003-03-11 Thread Scott Granados
I think Rob's server scans all the registry web pages for announced changes and then either modifies the list automatically or sets off an alarm to have the pages and list modified. I may be corrected but I think the process is either entirely or mostly automated. On Tue, 11 Mar 2003, Owen DeLo

RE: 69/8...this sucks

2003-03-11 Thread Rob Thomas
Hi again, Owen. ] Frankly, I was unaware of Rob's server. For everyone who hasn't received our copious spam. :) http://www.cymru.com/Bogons/ ] Right now, I'm betting that Rob's server requires someone in Rob's ] organization to keep up to date on all the RIRs and manually tweak ] the contents

RE: 69/8...this sucks

2003-03-11 Thread Owen DeLong
Great. If you can get _EVERYONE_ to listen to Rob's server, I'm all for it. Frankly, I was unaware of Rob's server. However, I think it makes more sense to have the people maintaining the data distribute the data directly from the source. Right now, I'm betting that Rob's server requires someon

Re: 69/8...this sucks

2003-03-11 Thread Owen DeLong
Look, there's no quick fix solution here. It's going to take real effort and real work. However, the _REASON_ all those pages reference sample bogon filters is because there isn't a global bogon filter that is dynamically updated available. If there was, and people were aware of it, they'd use i

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Iljitsch van Beijnum
On Tue, 11 Mar 2003, Peter Galbavy wrote: > > If all routes in the routing table are good (which soBGP and S-BGP can > > do for you) and routers filter based on the contents of the routing > > table, hosts will not see any bogon packets except locally generated > > ones so they shouldn't have bog

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Stephen Sprunk
Thus spake "Ray Bellis" <[EMAIL PROTECTED]> > Most people seem to think it would be impractical to put the root name > servers in 69.0.0.0/8 > > Why not persuade ARIN to put whois.arin.net in there instead? It > shouldn't take the people with the broken filters *too* long to figure > out why they

RE: 69/8...this sucks

2003-03-11 Thread Andy Dills
On Tue, 11 Mar 2003, Owen DeLong wrote: > > In short, it doesn't. Longer answer, if the ISP configures his router > correctly, he can actually refuse to accept advertisements from other > sessions that are longer versions of prefixes received through this session. > > However, it's primarily int

Re: 69/8...this sucks

2003-03-11 Thread Joe Boyce
Monday, March 10, 2003, 7:44:43 PM, you wrote: H> Well... I am pretty sure Tier1 backbones are up-to-date on the bogon H> filters :-) H> As we've already discussed, it's really the smaller networks with outdated H> bogons or with admins who don't know what they are doing.. Bingo. No silly bgp

RE: 69/8...this sucks

2003-03-11 Thread Owen DeLong
3 11:22 AM To: Stephen J. Wilcox Cc: [EMAIL PROTECTED] Subject: Re: 69/8...this sucks On Mon, 10 Mar 2003, Owen DeLong wrote: It seems to me that it would be relatively simple to solve this problem by doing the following: 1. ICANN (or an ICANN designee, such as ARIN) shall issue an

RE: 69/8...this sucks

2003-03-11 Thread Andy Dills
On Tue, 11 Mar 2003, Ejay Hire wrote: > Er, guys... How does this fix the problem of a Malicious user > advertising a more specific bogon route? Come on...clearly you haven't been paying attention. You need LDAP filters. LDAP filters and a South Vietnamese revolution against the IRRs for being

RE: 69/8...this sucks

2003-03-11 Thread Ejay Hire
Er, guys... How does this fix the problem of a Malicious user advertising a more specific bogon route? -Original Message- From: Owen DeLong [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 11, 2003 11:22 AM To: Stephen J. Wilcox Cc: [EMAIL PROTECTED] Subject: Re: 69/8...this sucks

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Peter Galbavy
> If all routes in the routing table are good (which soBGP and S-BGP can > do for you) and routers filter based on the contents of the routing > table, hosts will not see any bogon packets except locally generated > ones so they shouldn't have bogon filters of their own. So this will > indeed solv

Re: 69/8...this sucks

2003-03-11 Thread Owen DeLong
--On Tuesday, March 11, 2003 11:18 AM + [EMAIL PROTECTED] wrote: 2. Each RIR should operate one or more routers with an open peering policy which will perform the following functions: I agree that the RIR is the right source for the data but I think that BGP is

Re: 69/8...this sucks

2003-03-11 Thread Owen DeLong
On Mon, 10 Mar 2003, Owen DeLong wrote: It seems to me that it would be relatively simple to solve this problem by doing the following: 1. ICANN (or an ICANN designee, such as ARIN) shall issue an ASN range of 20 ASNs to be used as BOGON-ORIGINATE. Why not just one or private/reserve

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Iljitsch van Beijnum
On Tue, 11 Mar 2003, Jack Bates wrote: > > Fortunately, in this particular case there is a solution on the horizon: > > S-BGP or soBGP. These BGP extensions authenticate all prefix > > announcements, so there is no longer any need to perform bogon filtering > > on routing information. uRPF can th

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Owen DeLong
Thanks for your support Jim. I've gotten mixed feedback to my proposal here for a centralized bogon filter from the RIRs via BGP, but I will say there's been more support than opposition. (Most of the support has been sent to me, not the list, while most of the opposition has been to the list, ho

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Michael Whisenant
Well Jon, I spent some time reading your message below, and trying to look at if I experienced the issue, just what I would have done differently, or what would have been more meaningful in your initial email blast... Here are some of my thoughts... First since you are taking the

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Jack Bates
From: "Iljitsch van Beijnum" > Fortunately, in this particular case there is a solution on the horizon: > S-BGP or soBGP. These BGP extensions authenticate all prefix > announcements, so there is no longer any need to perform bogon filtering > on routing information. uRPF can then be used to fil

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-11 Thread Iljitsch van Beijnum
On Mon, 10 Mar 2003, Todd A. Blank wrote: > I continue to agree that moving critical resources (see below) to these > new blocks is the best approach I have seen or heard in the months since > I made the original post. This approach punishes the clueless instead > of the people that already know

Re: 69/8...this sucks

2003-03-11 Thread Michael . Dillon
> 2. Each RIR should operate one or more routers with an open peering >policy which will perform the following functions: I agree that the RIR is the right source for the data but I think that BGP is the wrong protocol for publishing the data. Would you give a BGP fe

Re: 69/8...this sucks

2003-03-11 Thread Stephen J. Wilcox
On Mon, 10 Mar 2003, Owen DeLong wrote: > It seems to me that it would be relatively simple to solve this problem by > doing the following: > > 1.ICANN (or an ICANN designee, such as ARIN) shall issue an ASN range > of 20 ASNs to be used as BOGON-ORIGINATE. Why not just one or private

Re: 69/8...this sucks

2003-03-11 Thread Stephen J. Wilcox
On Mon, 10 Mar 2003, E.B. Dreger wrote: > The suggestion is to move ALL root, and as many TLD as possible, > servers into the new space. Nobody has said "move one or two", > which indeed would be ineffective. So, you cant get people to fix bogons but you can get them all to fix their dns cache

Re: 69/8...this sucks

2003-03-11 Thread Hank Nussbacher
At 05:16 PM 10-03-03 -0800, Owen DeLong wrote: OK... I'm late to this discussion (been mostly ignoring it due to volume in other places), but, Sean's 911->855 mail makes me wonder... It seems to me that it would be relatively simple to solve this problem by doing the following: 1. ICANN (or a

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Dr. Jeffrey Race
On Mon, 10 Mar 2003 23:19:38 -0500, McBurnett, Jim wrote: >If you read PPML, there is a HUGE push via Owen DeLong's Policy >2003-1a to help with some aspects of the whois Contact.. >his policy is mainly based on the abuse contact, But I think may >get extended to all contacts eventually... >Owen-

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread McBurnett, Jim
>From Chris Adams: > This isn't meant to be a pick on you (we've got some SWIPs filed > incorrectly that we are working on). I've just run into more and more > cases where ARIN (or other RIR, but I'm typically interested in ARIN > info) info is out of date. Maybe ARIN should periodically > send

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Chris Adams
Once upon a time, Michael Whisenant <[EMAIL PROTECTED]> said: > You could reach MANY NASA locations, but those at one particular center, > and that issue was related to a firewall update at ONLY one particular > center. This filter was placed in after August when the cental bogon was > removed at

RE: 69/8...this sucks

2003-03-10 Thread Haesu
> That's a non-solution that will never happen. How many networks are going > to trust joe somebody to inject null routes into their backbone? Will > UUNet/Sprint/C&W/Level3/etc. trust me or Rob to tell them what's a bogon > and what's not? I really doubt it. They might have an easier time > t

Re: 69/8...this sucks

2003-03-10 Thread Jack Bates
From: jlewis Sent: Monday, March 10, 2003 9:18 PM > I know some writers watch nanog for potential stories. Wake up guys, this > should be one...if not for the news value "ARIN gives out unusable IPs, > future of the Net in question", then at least for the public service value > of getting the wo

RE: 69/8...this sucks

2003-03-10 Thread jlewis
On Mon, 10 Mar 2003, Frank Scalzo wrote: > We don't need the adminstrative headache of ICANN/ARIN/RIRs on this. > Someone could just do it with a private ASN and advertise the route with > an arbitrarily null routed next-hop. That's a non-solution that will never happen. How many networks are g

RE: 69/8...this sucks

2003-03-10 Thread Frank Scalzo
y, March 10, 2003 8:16 PM To: [EMAIL PROTECTED] Subject: Re: 69/8...this sucks OK... I'm late to this discussion (been mostly ignoring it due to volume in other places), but, Sean's 911->855 mail makes me wonder... It seems to me that it would be relatively simple to solve t

Re: 69/8...this sucks

2003-03-10 Thread Owen DeLong
OK... I'm late to this discussion (been mostly ignoring it due to volume in other places), but, Sean's 911->855 mail makes me wonder... It seems to me that it would be relatively simple to solve this problem by doing the following: 1. ICANN (or an ICANN designee, such as ARIN) shall issue an A

Re: 69/8...this sucks

2003-03-10 Thread Joel Jaeggli
this has been raised an issue before... but vanity ip address are a very very bad idea. joelja On Tue, 11 Mar 2003, Brandon Butterworth wrote: > > > You want to move things like gtld servers, > > yahoo/google (and other 'important' things), including > > Do a deal with some porn hosters,

Re: 69/8...this sucks

2003-03-10 Thread Brandon Butterworth
> You want to move things like gtld servers, > yahoo/google (and other 'important' things), including Do a deal with some porn hosters, they get 69.69.69.69 in exchange for advertising tons of free porn there on their next spam run - win/win brandon

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Jack Bates
From: "Ray Bellis" > > Why not persuade ARIN to put whois.arin.net in there instead? It > shouldn't take the people with the broken filters *too* long to figure > out why they can't do IP assignment lookups... > You are presuming that people are doing IP assignment lookups from the affected netw

Re: 69/8...this sucks

2003-03-10 Thread Charles Sprickman
On Mon, 10 Mar 2003, Jared Mauch wrote: > You want to move things like gtld servers, > yahoo/google (and other 'important' things), including > things like oscar.toc.aol.com into these. No, if you really want to stir things up, start an article on slashdot, let the posters whip themselves

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Ray Bellis
> After this 69.0.0.0/8 thing is sorted out I guess > we can move the "critical resources" over to 202.0.0.0/7 > to track down all the idiots blocking that range (trying > to decide if I should put a smilie here). > > I nominate the arin.net nameservers. Most people seem to think it would be imp

RE: 69/8...this sucks

2003-03-10 Thread Rob Thomas
Hi, NANOGers. ] I bet for example we could get Rob Thomas to update his templates to ] include scarier warnings... For the right amount of coffee, I just might. ;) Seriously, I'm all for it. Here is what I have on the Bogon List page: NOTE WELL! IANA allocations change over time, so plea

202/7 (RE: 69/8...this sucks -- Centralizing filtering..)

2003-03-10 Thread E.B. Dreger
SL> Date: Tue, 11 Mar 2003 11:28:55 +1300 (NZDT) SL> From: Simon Lyall SL> After this 69.0.0.0/8 thing is sorted out I guess we can move SL> the "critical resources" over to 202.0.0.0/7 to track down SL> all the idiots blocking that range (trying to decide if I SL> should put a smilie here). Ag

RE: 69/8...this sucks

2003-03-10 Thread E.B. Dreger
FS> Date: Mon, 10 Mar 2003 17:41:56 -0500 FS> From: Frank Scalzo FS> What we can REALISTICALLY accomplish is to lean on the people FS> who publish books/web pages/templates/etc. to include big FS> scary warnings about using bogon filters and outline WHY they And all the existing books, webpages

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread jlewis
On Tue, 11 Mar 2003, Simon Lyall wrote: > Could someone publish a name of a valid resource (or even pingable ip) in > 69/8 space? This would allow people to test their (and their upsteams) > filters quickly while we wait for the list to come out. 69.atlantic.net (69.28.64.8) is a loopback on our

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread James-lists
> I'm not trying to start a flame war here, just pointing out > that a variety of feeds meet many more requirements, and that there > are several types of data feeds available now. This includes the > recently added pure text bogon files, suitable for easy parsing. > > http://www.cymru.com/Bogon

RE: 69/8...this sucks

2003-03-10 Thread Frank Scalzo
expert. -Original Message- From: Kevin Loch [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 4:22 PM To: [EMAIL PROTECTED] Subject: Re: 69/8...this sucks Stephen J. Wilcox wrote: > >>I repeat my suggestion that a number of DNS root-servers or gtld-servers >>be ren

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Jack Bates
From: "Simon Lyall" > > Could someone publish a name of a valid resource (or even pingable ip) in > 69/8 space? This would allow people to test their (and their upsteams) > filters quickly while we wait for the list to come out. > The BrightNet nameservers are both in 69.8.2.0/24 for now. ns.

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread E.B. Dreger
DR> Date: Mon, 10 Mar 2003 23:10:35 +0100 DR> From: Daniel Roesen DR> Can you point out where the rule is written that noone is to DR> announce a prefix with length le 7? Just we don't see it now DR> doesn't mean we won't see it sometime in the future... Ditto ge 25. I might have missed the RF

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Simon Lyall
On Mon, 10 Mar 2003, Todd A. Blank wrote: > I continue to agree that moving critical resources (see below) to these > new blocks is the best approach I have seen or heard in the months since > I made the original post. This approach punishes the clueless instead > of the people that already know

Re: 69/8...this sucks

2003-03-10 Thread E.B. Dreger
DB> Date: Mon, 10 Mar 2003 13:58:20 -0800 (PST) DB> From: Doug Barton DB> Ah, sorry, I wasn't aware of the full extent of your DB> crack-smoking-ness. :) You'll never get all of the root DB> server operators to agree on this (or much of anything), so I'm sorry, I'm having trouble grepping my m

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Daniel Roesen
On Mon, Mar 10, 2003 at 08:28:23PM +, E.B. Dreger wrote: > Assuming one's upstreams and peers lack 'deny le 7'. Can you point out where the rule is written that noone is to announce a prefix with length le 7? Just we don't see it now doesn't mean we won't see it sometime in the future... Re

RE: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Todd A. Blank
Maybe we should suggest that ARIN also host some of their stuff on this block :-) Todd IPOutlet LLC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 12:52 PM To: E.B. Dreger Cc: [EMAIL PROTECTED] Subject: RE: 69/8...this sucks -- Central

Re: 69/8...this sucks

2003-03-10 Thread Doug Barton
On Mon, 10 Mar 2003, E.B. Dreger wrote: > The suggestion is to move ALL root, and as many TLD as possible, > servers into the new space. Nobody has said "move one or two", > which indeed would be ineffective. Ah, sorry, I wasn't aware of the full extent of your crack-smoking-ness. :) You'll nev

Re: 69/8...this sucks -- Centralizing filtering..

2003-03-10 Thread Russell Heilling
On Mon, Mar 10, 2003 at 01:39:26PM -0600, Jack Bates wrote: > > Oh, I agree that there are times when BGP is used in a single uplink > scenario, but it is not common. However, someone pointed me to ip verify > unicast source reachable-via any which seems to be available on some of the > cisco Serv

Re: 69/8...this sucks

2003-03-10 Thread Kevin Loch
Stephen J. Wilcox wrote: I repeat my suggestion that a number of DNS root-servers or gtld-servers be renumbered into 69/8 space. If the DNS "breaks" for these neglected networks, I suspect they will quickly get enough clue to fix their ACLs. Nice idea in principal (from a purist point of view) bu

  1   2   >