Re: BGP Hijack by ATT... was: Need Help Getting IP Unblocked by ATT

2009-09-08 Thread Brian Raaen
It appears that ATT started announcing a block of a former customer that we had reclaimed. ATT contacted me offline and let me know that the issue was resolved. Brian Raaen wrote: I have sent a complaint to the ATT abuse contact from my ARIN contact address asking them to stop announcing the

Re: Network Ring

2009-09-08 Thread Justin Shore
Rod Beck wrote: What is EAPS? A joke of a standard and something to be avoided at all costs. I would echo the last part about Extreme switches too. Justin

RE: Network Ring

2009-09-08 Thread Paul Stewart
Since it was brought up - curious as we were recently approached by Extreme. Good/bad experiences? We're a Cisco shop and I plan to keep us that way but some powers to be are interested in them at this point.. Thanks, Paul -Original Message- From: Justin Shore

Colt outages?

2009-09-08 Thread Eric Brunner-Williams
Anyone have news on this? I understand Colt has fixed London and are working on Dublin, Bruxelles and Geneva... but that's all I have.

Repeated Blacklisting / IP reputation

2009-09-08 Thread Tom Pipes
Greetings, We obtained a direct assigned IP block 69.197.64.0/18 from ARIN in 2008. This block has been cursed (for lack of a better word) since we obtained it. It seems like every customer we have added has had repeated issues with being blacklisted by DUL and the cable carriers. (AOL,

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Ronald Cotoni
Tom Pipes wrote: Greetings, We obtained a direct assigned IP block 69.197.64.0/18 from ARIN in 2008. This block has been cursed (for lack of a better word) since we obtained it. It seems like every customer we have added has had repeated issues with being blacklisted by DUL and the cable

[NANOG-announce] NANOG 47 dates of interest

2009-09-08 Thread David Meyer
Folks, Just a brief reminder of upcoming dates of interest - The NANOG PC will be posting an updated agenda for NANOG 47 after our 09/08/2009 call - The registration fee for NANOG 47 increases to US$525 on 09/14/2009 -

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread Benjamin Billon
For Asia, I'd say Hong Kong (and personnaly Mega iAdvantage). Could be interesting thoughts on this previous thread: http://mailman.nanog.org/pipermail/nanog/2009-July/012161.html Mainland China may be fine for very special needs, but I'd advise to go to HK 95% of the time. Michael K.

RE: Datacenter recommendations - China and Latin America

2009-09-08 Thread Michael K. Smith - Adhost
Sorry to respond to my own message! Given the replies so far I think I should expand China to include Hong Kong. Regards, Mike -- Michael K. Smith - CISSP, GISP Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread Shane Ronan
I'd recommend Equinix which has a site in Hong Kong which I would recommend over mainland China. http://www.equinix.com/locations/map/asiapacific/hongkong/ Shane On Sep 8, 2009, at 12:02 PM, Benjamin Billon wrote: For Asia, I'd say Hong Kong (and personnaly Mega iAdvantage). Could be

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread Alex Balashov
Shane Ronan wrote: I'd recommend Equinix which has a site in Hong Kong which I would recommend over mainland China. http://www.equinix.com/locations/map/asiapacific/hongkong/ What is the Great Firewall relationship between Hong Kong and the mainland PRC, as compared to the mainland PRC vs.

Datacenter recommendations - China and Latin America

2009-09-08 Thread Michael K. Smith - Adhost
Hello Everyone: Does anyone have any recommendations for data centers in China (PRC) and Latin America? The Latin America site doesn't have to be in any particular country within the region, although facilities with good network connectivity are obviously preferred. Regards, Mike -- Michael

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread John Curran
Folks - It appears that we have a real operational problem, in that ARIN does indeed reissue space that has been reclaimed/returned after a hold-down period, and but it appears that even once they are removed from the actual source RBL's, there are still ISP's who are manually

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Suresh Ramasubramanian
John, its about the same situation you get when people use manually updated bogon filters. A much larger problem, I must admit .. having ISPs follow the maawg best practices might help, that - and attending MAAWG sessions (www.maawg.org - Published Documents) That said most of the larger

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jason Bertoch
Suresh Ramasubramanian wrote: That said most of the larger players already attend MAAWG - that leaves rural ISPs, small universities, corporate mailservers etc etc that dont have full time postmasters, and where you're more likely to run into this issue. I've found the opposite to hold true

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread tvest
On Sep 8, 2009, at 12:35 PM, Alex Balashov wrote: Shane Ronan wrote: I'd recommend Equinix which has a site in Hong Kong which I would recommend over mainland China. http://www.equinix.com/locations/map/asiapacific/hongkong/ What is the Great Firewall relationship between Hong Kong and

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Seth Mattinen
Suresh Ramasubramanian wrote: John, its about the same situation you get when people use manually updated bogon filters. A much larger problem, I must admit .. having ISPs follow the maawg best practices might help, that - and attending MAAWG sessions (www.maawg.org - Published Documents)

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jay Hennigan
John Curran wrote: Folks - It appears that we have a real operational problem, in that ARIN does indeed reissue space that has been reclaimed/returned after a hold-down period, and but it appears that even once they are removed from the actual source RBL's, there are still ISP's who

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jon Lewis
On Tue, 8 Sep 2009, John Curran wrote: I'm sure there's an excellent reason why these addresses stay blocked, but am unable to fathom what exactly that is... Could some folks from the appropriate networks explain why this is such a problem and/or suggest additional steps that ARIN or

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Brian Keefer
On Sep 8, 2009, at 11:13 AM, Jay Hennigan wrote: John Curran wrote: snip I'm sure there's an excellent reason why these addresses stay blocked, but am unable to fathom what exactly that is... Could some folks from the appropriate networks explain why this is such a problem and/or

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Valdis . Kletnieks
On Tue, 08 Sep 2009 13:43:39 EDT, John Curran said: I'm sure there's an excellent reason why these addresses stay blocked, but am unable to fathom what exactly that is... If I'm a smaller shop with limited clue, there's 3 likely colloraries: 1) Even a smallish spam blast is big enough to

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Wayne E. Bouchard
On Tue, Sep 08, 2009 at 10:16:33AM -0500, Ronald Cotoni wrote: Tom Pipes wrote: Greetings, We obtained a direct assigned IP block 69.197.64.0/18 from ARIN in 2008. This block has been cursed (for lack of a better word) since we obtained it. It seems like every customer we have added

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Joe Greco
On Tue, 8 Sep 2009, John Curran wrote: I'm sure there's an excellent reason why these addresses stay blocked, but am unable to fathom what exactly that is... Could some folks from the appropriate networks explain why this is such a problem and/or suggest additional steps that

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jon Lewis
On Tue, 8 Sep 2009, Joe Greco wrote: It seems like it *could* be useful to have a system to notify of network delegation changes, but it also seems like if this was particularly important to anyone, then someone would have found a trivial way to implement at least a poor man's version of it.

Re: Network Ring

2009-09-08 Thread sthaug
Rod Beck wrote: What is EAPS? A joke of a standard and something to be avoided at all costs. I would echo the last part about Extreme switches too. Disagree. I don't believe anybody would claim EAPS is a standard just because an RFC has been published. In any case, EAPS is working quite

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jon Lewis
On Tue, 8 Sep 2009, Wayne E. Bouchard wrote: This is not actually a new problem. ISPs have been fighting this for some time. When a dud customer spams from a given IP range and gets it placed in various RBLs, when that customer is booted or otherwise removed, that block will probably get

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Jay Hennigan
Seth Mattinen wrote: I was always under the impression that smaller orgs were not allowed to join the MAAWG club. They're allowed. At $4k/year minimum, up to $25K/year. By the way, among the members... Experian CheetahMail ExactTarget, Inc Responsys, Inc. Vertical Response, Inc Yesmail

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Joe Greco
On Tue, 8 Sep 2009, Joe Greco wrote: It seems like it *could* be useful to have a system to notify of network delegation changes, but it also seems like if this was particularly important to anyone, then someone would have found a trivial way to implement at least a poor man's version of

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread JC Dill
John Curran wrote: On Sep 8, 2009, at 2:18 PM, JC Dill wrote: It seems simple and obvious that ARIN, RIPE, et. al. should determine the blacklist state of a reclaimed IP group and ensure that the IP group is usable before re-allocating it. When IPs are reclaimed, first check to see if the

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread bmanning
On Tue, Sep 08, 2009 at 02:34:10PM -0500, Joe Greco wrote: there is a fundamental disconnect here. the IP space is neutral. it has no bias toward or against social behaviours. its a tool. the actual/real target here are the people who are using these tools to be antisocial. blacklisting

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Justin Shore
Jason Bertoch wrote: Suresh Ramasubramanian wrote: That said most of the larger players already attend MAAWG - that leaves rural ISPs, small universities, corporate mailservers etc etc that dont have full time postmasters, and where you're more likely to run into this issue. I've found the

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Joe Greco
John Curran wrote: On Sep 8, 2009, at 2:18 PM, JC Dill wrote: It seems simple and obvious that ARIN, RIPE, et. al. should determine the blacklist state of a reclaimed IP group and ensure that the IP group is usable before re-allocating it. When IPs are reclaimed, first check

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread J.D. Falk
Seth Mattinen wrote: I was always under the impression that smaller orgs were not allowed to join the MAAWG club. I've heard that, too, but have no idea where it comes from. It's not true; there's no size requirement or anything like that. http://www.maawg.org/ has the membership

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread William Astle
J.D. Falk wrote: Seth Mattinen wrote: I was always under the impression that smaller orgs were not allowed to join the MAAWG club. I've heard that, too, but have no idea where it comes from. It's not true; there's no size requirement or anything like that. http://www.maawg.org/ has the

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Joe Greco
there is a fundamental disconnect here. the IP space is neutral. it has no bias toward or against social behaviours. its a tool. the actual/real target here are the people who are using these tools to be antisocial. blacklisting IP space is always reactive and should only beused in

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread O'Reirdan, Michael
MAAWG is has no size limitations as to members. Yes we do have a $4000 supporter membership. This has not proved a barrier to many organisations. Mike O'Reirdan Chairman, MAAWG - Original Message - From: Benjamin Billon bbillon...@splio.fr To: nanog@nanog.org nanog@nanog.org Sent: Tue

Re: Datacenter recommendations - China and Latin America [SUMMARY]

2009-09-08 Thread tvest
For those who have a real need for both hosting within the Chinese autonomous routing domain *and* good, English-friendly remote hands support, I would also recommend considering the Silk Road Technologies data center in Hangzhou: http://www.srt.com.cn/en/ TV On Sep 8, 2009, at 3:57 PM,

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Alex Balashov
Joe Greco wrote: I'm sorry, I agree that there's a problem, but this just sounds like it isn't feasible. Some people suffer from the culturally ingrained inability to understand that certain kinds of problems just can't. Be. Solved. And/or they aren't worth solving under present

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Tom Pipes
I am amazed with the amount of thoughtful comments I have seen, both on and off list. It really illustrates that people are willing to try to help out, but there is an overall lack of clear direction on how to improve things. Most of us seem to adopt that which has always just worked for us.

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Justin Shore
to trim the block list considerably because many of my older PEs couldn't handle that many routes without problems. I already named each static with a reason for the block(SSH, Telnet, Proxy-scan, etc) but ended up prepending a date to that string as well: 20090908-SSH-Scan. That way I can parse

Datacenter recommendations - China and Latin America [SUMMARY]

2009-09-08 Thread Michael K. Smith - Adhost
Hello: Thank you to everyone that provided off-list recommendations. I've compiled the list of providers in no particular order. Regards, Mike Latin America - Securehost - http://www.securehost.com - Triara (Telmex) - http://www.triara.com/Datacenter.htm - KIO Networks - Xertix - Hortolandia

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Benjamin Billon
ISPs can be invited and there are specific meetings for them (closed to other members). There're also whitepapers for ISP (and others). But I agree, hoping ALL the ISPs join MAAWG or even hear about it is utopian. -- Benjamin William Astle a écrit : J.D. Falk wrote: Seth Mattinen wrote:

Re: Network Ring

2009-09-08 Thread Justin Shore
sth...@nethelp.no wrote: Rod Beck wrote: What is EAPS? A joke of a standard and something to be avoided at all costs. I would echo the last part about Extreme switches too. Disagree. I don't believe anybody would claim EAPS is a standard just because an RFC has been published. Pannaway

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Justin Shore
Jay Hennigan wrote: By the way, among the members... Experian CheetahMail ExactTarget, Inc Responsys, Inc. Vertical Response, Inc Yesmail Have you been reading from my blacklist again, Jay? Justin

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread Benjamin Billon
You could get a China Telecom link in HK as well as many others: sit astride the Great Firewall! What is the Great Firewall relationship between Hong Kong and the mainland PRC, as compared to the mainland PRC vs. the rest of the world?

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Ronald Cotoni
Joe Greco wrote: there is a fundamental disconnect here. the IP space is neutral. it has no bias toward or against social behaviours. its a tool. the actual/real target here are the people who are using these tools to be antisocial. blacklisting IP space is always reactive and should only

Block of AS Numbers allocated to APNIC

2009-09-08 Thread Leo Vegoda
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, The IANA AS Numbers registry has been updated to reflect the allocation of a block of AS Numbers to APNIC. 55296-56319Assigned by APNICwhois.apnic.net2009-09-02 The registry can be found at:

Re: Colt outages?

2009-09-08 Thread Arnaud de Prelle
On 08 Sep 2009, at 16:41, Eric Brunner-Williams wrote: Anyone have news on this? I understand Colt has fixed London and are working on Dublin, Bruxelles and Geneva... but that's all I have. The only interesting news and comments I found about this outage were on TheRegister.co.uk

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread William Astle
O'Reirdan, Michael wrote: MAAWG is has no size limitations as to members. Yes we do have a $4000 supporter membership. This has not proved a barrier to many organisations. Likely because for the ones for whom it is a barrier, they look at the cost and don't even bother considering an initial

Cable and Wireless Antigua

2009-09-08 Thread Ken Gilmour
Hi there, I have gone through all normal channels to try to get through to someone in Cable and Wireless Antigua (LIME). It seems difficult to get a fast response through normal channels (it can take up to 48 hours some times to get a response to a network down situation). Is there any senior

Re: Datacenter recommendations - China and Latin America

2009-09-08 Thread tvest
On Sep 8, 2009, at 5:20 PM, Benjamin Billon wrote: You could get a China Telecom link in HK as well as many others: sit astride the Great Firewall! From a cost, operational, and routing perspective, the same would be true if you got a CT link in Los Angeles or San Francisco. Since CT

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Peter Beckman
How about a trial period from ARIN? You get your IP block, and you get 30 days to determine if it is clean or not. Do some testing, check the blacklists, do some magic to see if there are network-specific blacklists that might prevent your customers from sending or receiving email/web/other

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread Seth Mattinen
Peter Beckman wrote: How about a trial period from ARIN? You get your IP block, and you get 30 days to determine if it is clean or not. Do some testing, check the blacklists, do some magic to see if there are network-specific blacklists that might prevent your customers from sending or

Re: Repeated Blacklisting / IP reputation

2009-09-08 Thread bmanning
sounds like domain tasting to me. --bill On Wed, Sep 09, 2009 at 01:04:48AM -0400, Peter Beckman wrote: How about a trial period from ARIN? You get your IP block, and you get 30 days to determine if it is clean or not. Do some testing, check the blacklists, do some magic to see if there