Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Andy Davidson
On 9 Sep 2009, at 06:04, Peter Beckman wrote: How about a trial period from ARIN? You get your IP block, and you get 30 days to determine if it is clean or not. The reuse issue is possibly decades away in v6 land. The reuse issue can't really be solved for v4 in a year or two. Sounds

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Tim Chown
On Sun, Sep 13, 2009 at 12:45:03PM -0400, Christopher Morrow wrote: On Wed, Sep 9, 2009 at 11:48 PM, Mark Andrews ma...@isc.org wrote: skip a note about isc having quite a few legacy blocks Note we all could start using IPv6 and avoid this problem altogether. There is nothing stopping us

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Rich Kulawiec
On Tue, Sep 08, 2009 at 11:44:44AM -0700, Wayne E. Bouchard wrote: Best practices for the public or subscription RBLs should be to place a TTL on the entry of no more than, say, 90 days or thereabouts. But there's no reason to do so, and a number of reasons not to, including the very high

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread John Curran
On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: ... For example: Ron Guilmette has recently pointed out that notorious spammer Scott Richter has apparently hijacked *another* /16 block -- 150.230.0.0/16. I've dropped that block into various local blacklists, and in some cases,

Re: OT: CLEC Mailing List

2009-09-14 Thread David Hiers
If a topic has anything to do with operating a voice network, VoiceOps is a good place for it. www.voiceops.org VoiceOps covers voice over IP, TDM, TSOT, whatever... David On Sun, Sep 13, 2009 at 5:28 PM, Richey myli...@battleop.com wrote: I am looking for a CLEC related mailing list. I

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Martin Hannigan
On Sun, Sep 13, 2009 at 7:43 AM, John Curran jcur...@arin.net wrote: On Sep 11, 2009, at 6:52 PM, Martin Hannigan wrote: I honestly don't think that it's up to them to create a set-aside either, hence my comment about behind the scenes activities. I appreciate you detailing that, but I

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 11:58 AM, Chris Marlatt cmarl...@rxsec.com wrote: Christopher Morrow wrote: The end of the discussion was along the lines of: Yes, we know this guy is bad news, but he always comes to us with the proper paperwork and numbers, there's nothing in the current policy set to

Keepalives are temporarily in throttle due to closed TCP window

2009-09-14 Thread Michael Ruiz
I am having difficulty maintaining my BGP session from my 6509 with Sup-7203bxls to a 7206 VXR NPE-400. The session bounces every 3 minutes. I do have other IBGP sessions that are established with no problems, however, this is the only IBGP peer that is bouncing regularly. cr1.AUSTTXEE#show

Re: Hijacked Blocks (was: Repeated Blacklisting / IP reputation)

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 7:05 AM, John Curran jcur...@arin.net wrote: On Sep 14, 2009, at 6:49 AM, Rich Kulawiec wrote: ... For example: Ron Guilmette has recently pointed out that notorious spammer Scott Richter has apparently hijacked *another* /16 block -- 150.230.0.0/16. oh lokoie,

Re: Hijacked Blocks

2009-09-14 Thread Chris Marlatt
Christopher Morrow wrote: The end of the discussion was along the lines of: Yes, we know this guy is bad news, but he always comes to us with the proper paperwork and numbers, there's nothing in the current policy set to deny him address resources. Happily though he never pays his bill after

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
I haven't followed this entire string. Are you saying ARIN is repeatedly handing out address space to known abusers? If that's the case then yes, some form of policy should be worked on. If on the administrative level ARIN is not researching returned blocks for abuse complaints and working to

Rack Space in Chicago area

2009-09-14 Thread NANOG Acct
I may be in need of rack space in the Chicago area - the closer to downtown, the better. I have need for about 24U of space and enough AC for 4 - 2U servers, 3 - 1U servers, 2 hubs and a 3640 router. Would need connectivity (100MB ethernet) and someone that can do a BGP session with us for

RE: Hijacked Blocks

2009-09-14 Thread Azinger, Marla
FYI- I have forwarded this conversation to ARIN ppml as this is now a topic for that mailing list more than NANOG. Cheers Marla Azinger ARIN AC VC -Original Message- From: Azinger, Marla [mailto:marla.azin...@frontiercorp.com] Sent: Monday, September 14, 2009 10:29 AM To: Christopher

Re: Hijacked Blocks

2009-09-14 Thread Adrian Minta
In Europe RIPE has a nice database. Hijacking is not possible since most ISP's use filters based on RIPE Database. Why ARIN don't use a similar tool ?

Re: Keepalives are temporarily in throttle due to closed TCP window

2009-09-14 Thread Mikael Abrahamsson
On Mon, 14 Sep 2009, Michael Ruiz wrote: I am having difficulty maintaining my BGP session from my 6509 with Sup-7203bxls to a 7206 VXR NPE-400. The session bounces every 3 minutes. I do have other IBGP sessions that are established with no problems, however, this is the only IBGP peer that

Re: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Douglas Otis
On 9/13/09 12:49 PM, joel jaeggli wrote: Frank Bulk wrote: [] If anything, there's more of a disincentive than ever before for ARIN to spend time on netblock sanitization. This whole thread seems to be about shifting (I.E. by externalizing) the costs of remediation. presumably the entities

Re: Hijacked Blocks

2009-09-14 Thread Mikael Abrahamsson
On Mon, 14 Sep 2009, Adrian Minta wrote: Hijacking is not possible since most ISP's use filters based on RIPE Database. This is not true. Some filter, but most don't. -- Mikael Abrahamssonemail: swm...@swm.pp.se

RE: Hijacked Blocks

2009-09-14 Thread Lee Howard
If this is the case one could argue that ARIN should be reserving this worthless address space to be used when they receive similar requests in the future. There's no reason personX should get fresh, clean address space when they make additional requests. That implies some process

RE: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Lee Howard
-Original Message- From: Douglas Otis [mailto:do...@mail-abuse.org] Sent: Monday, September 14, 2009 1:41 PM To: joel jaeggli Cc: NANOG list Subject: Re: Repeated Blacklisting / IP reputation, replaced by registered use On 9/13/09 12:49 PM, joel jaeggli wrote: Frank Bulk

Re: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread David Conrad
On Sep 14, 2009, at 10:40 AM, Douglas Otis wrote: Perhaps ICANN could require registries establish a clearing-house, where at no cost, those assigned a network would register their intent to initiate bulk traffic, such as email, from specific addresses. ICANN can't require the RIRs do

RE: Repeated Blacklisting / IP reputation, replaced by registered use

2009-09-14 Thread Azinger, Marla
Another one that could be discussed at the ARIN policy bof. Also, Im forwarding this to the ARIN ppml for any further discussion. Cheers Marla -Original Message- From: David Conrad [mailto:d...@virtualized.org] Sent: Monday, September 14, 2009 11:44 AM To: Douglas Otis Cc: NANOG list

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Justin Shore
Frank Bulk wrote: With scarcity of IPv4 addresses, organizations are more desperate than ever to receive an allocation. If anything, there's more of a disincentive than ever before for ARIN to spend time on netblock sanitization. I do think that ARIN should inform the new netblock owner if it

[NANOG-announce] NANOG SC Nominations

2009-09-14 Thread Betty Burke
Last Call!! SC Candidate nominations close midnight EST 9-14-09 Current Candidates posted at http://nanog.org/governance/elections/2009elections/2009sc_candidates.php Send those additional nominations to nominati...@nanog.org! Look forward to seeing you in Dearborn, Michigan, October 18-21,

Verizon Wireless (AS22394) network engineering contact needed

2009-09-14 Thread David Ulevitch
I'm having some trouble reaching a capable network engineer who runs Verizon Wireless (AS22394). The contact on the ARIN address space I have issues with does indeed pick up the phone but is not someone who is aware of what BGP is. Additionally, VZW is not listed on the NOC contacts page

RE: Verizon Wireless (AS22394) network engineering contact needed

2009-09-14 Thread Brian R. Watters
Stacey, I will reply to these folks .. -- Brian Watters Director American Broadband Family of Companies 5718 East Shields Ave Fresno, CA. 93727 brwatt...@absfoc.com http://www.americanbroadbandservice.com tel:559-420-0205 fax:559-272-5266 toll free:866-827-4638

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
I haven't followed this entire string. Are you saying ARIN is repeatedly handing out address space to known abusers? If that's the case then yes, some form of policy should be worked on. i might walk more slowly and with a bit less self-righteousness. this is not a simple area. are we

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 4:47 PM, Randy Bush ra...@psg.com wrote: I haven't followed this entire string.  Are you saying ARIN is repeatedly handing out address space to known abusers?  If that's the case then yes, some form of policy should be worked on. i might walk more slowly and with a

Re: Hijacked Blocks

2009-09-14 Thread Randy Bush
1) not allocating to known offendors (even those who've been through the court system and had judgements against them, which would be following your proposed path) [ i made no proposal. i was just a bit scared by the instant we need to DO SOMETHING reaction. ] but what you say seems somewhat

Re: Hijacked Blocks

2009-09-14 Thread Christopher Morrow
On Mon, Sep 14, 2009 at 5:12 PM, Randy Bush ra...@psg.com wrote: 1) not allocating to known offendors (even those who've been through the court system and had judgements against them, which would be following your proposed path) [ i made no proposal.  i was just a bit scared by the instant we

Re: Hijacked Blocks

2009-09-14 Thread Jorge Amodio
Be careful about what you are asking for. i am not saying all is well here.  i am just trying to move slowly and pretend to think while on my first cuppa. I agree with Randy that this is a reasonable approach. In the transition from the old IANA to FrICANNstein and the separation of numbers

Re: Dedicated Route Reflectors

2009-09-14 Thread Pshem Kowalczyk
Hi, There are multiple ways you can solve that problem. We do the following: 1. Each region has its own ibgp cluster with 2 route reflectors (usually the P nodes, since they seem to have abundance of CPU power and not much to do with it). 2. All route reflectors (across regions) are fully

Re: Repeated Blacklisting / IP reputation

2009-09-14 Thread Martin Hannigan
On Mon, Sep 14, 2009 at 2:58 PM, Justin Shore jus...@justinshore.comwrote: Frank Bulk wrote: With scarcity of IPv4 addresses, organizations are more desperate than ever to receive an allocation. If anything, there's more of a disincentive than ever before for ARIN to spend time on