Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Hank Nussbacher
On 28/06/2018 04:43, Randy Bush wrote:
>> People - please just stop the off topic chatter. It is ludicrous that a
>> thread about bgp hijacks morphed into font discussions.
>>
>> Either contribute to the operational issue at hand by evaluating your terms
>> & conditions (or abuse policies) and applying them to your operations, or
>> remain silent.
> ah!  there are net police.
>
> come back with a warrant
>
Of course there are cuz I made them up 24 years ago:
http://www.interall.co.il/netcops.html

-Hank



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Randy Bush
> People - please just stop the off topic chatter. It is ludicrous that a
> thread about bgp hijacks morphed into font discussions.
> 
> Either contribute to the operational issue at hand by evaluating your terms
> & conditions (or abuse policies) and applying them to your operations, or
> remain silent.

ah!  there are net police.

come back with a warrant


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Cole Busby
hey all,

while I'm in no place to make demands or requests of anyone, like many of
you I have this thread on "loud". it may be beneficial to add a
"-discussions" for when threads go off topic. outages implemented something
similar and (for the most part) squelched the "me too" and off-topic
threads from the main sub list with mods politely reminding off topic
messages to use discussions for banter.

I love read the conversation but as with most folks, maybe keeping it
relevant to the subscription model.

there's always discord, slack, mumble and IRC if you want to make a banter
area too.

sincerely,
CB

On Wed, Jun 27, 2018, 5:15 PM Job Snijders  wrote:

> People - please just stop the off topic chatter. It is ludicrous that a
> thread about bgp hijacks morphed into font discussions.
>
> Either contribute to the operational issue at hand by evaluating your terms
> & conditions (or abuse policies) and applying them to your operations, or
> remain silent.
>


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Job Snijders
People - please just stop the off topic chatter. It is ludicrous that a
thread about bgp hijacks morphed into font discussions.

Either contribute to the operational issue at hand by evaluating your terms
& conditions (or abuse policies) and applying them to your operations, or
remain silent.


RE: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Scott Weeks



I suppose next you'll be telling me to get rid of 
my CRT when it works just fine? Black background, 
white text. :)

scott



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Dan Hollis

On Tue, 26 Jun 2018, Suresh Ramasubramanian wrote:

"we are not the internet police" right? (


Indeed. Aid and abet would be a more accurate description.

-Dan


RE: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Keith Medcalf


My VT52 does not do fonts ...

---
The fact that there's a Highway to Hell but only a Stairway to Heaven says a 
lot about anticipated traffic volume.


>-Original Message-
>From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Ryan Hamel
>Sent: Wednesday, 27 June, 2018 14:54
>To: aheb...@pubnix.net; nanog@nanog.org
>Subject: RE: AS3266: BitCanal hijack factory, courtesy of Cogent,
>GTT, and Level3
>
>Why would we need an RFC for Comic Sans?
>
>-Original Message-
>From: NANOG  On Behalf Of Alain Hebert
>Sent: Wednesday, June 27, 2018 1:50 PM
>To: nanog@nanog.org
>Subject: Re: AS3266: BitCanal hijack factory, courtesy of Cogent,
>GTT, and Level3
>
>     I ain't friday, but: There is no RFC for the Sarcastica font
>yet?
>
>     PS:  Our little adventure in BGP who-done-it (a few weeks back)
>burned about 25-30h man hours estimated.  Should have been sub 5
>hours if 1 guy would have cooperated instead of ignoring the issue.
>
>-
>Alain Hebertaheb...@pubnix.net
>PubNIX Inc.
>50 boul. St-Charles
>P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
>Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443
>
>On 06/27/18 03:25, Mark Tinka wrote:
>>
>> On 27/Jun/18 04:18, Suresh Ramasubramanian wrote:
>>
>>> Oh dear. The problem with sarcasm is that it falls flat if people
>don't realize you're being sarcastic.
>> Text-based messaging is terribly reliable at helping miss the
>point...
>>
>> It's a good things our kids of today call each other on the phone
>to
>> avoid that :-)...
>>
>> Mark.
>>






RE: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Ryan Hamel
Why would we need an RFC for Comic Sans?

-Original Message-
From: NANOG  On Behalf Of Alain Hebert
Sent: Wednesday, June 27, 2018 1:50 PM
To: nanog@nanog.org
Subject: Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and 
Level3

     I ain't friday, but: There is no RFC for the Sarcastica font yet?

     PS:  Our little adventure in BGP who-done-it (a few weeks back) burned 
about 25-30h man hours estimated.  Should have been sub 5 hours if 1 guy would 
have cooperated instead of ignoring the issue.

-
Alain Hebertaheb...@pubnix.net
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443

On 06/27/18 03:25, Mark Tinka wrote:
>
> On 27/Jun/18 04:18, Suresh Ramasubramanian wrote:
>
>> Oh dear. The problem with sarcasm is that it falls flat if people don't 
>> realize you're being sarcastic.
> Text-based messaging is terribly reliable at helping miss the point...
>
> It's a good things our kids of today call each other on the phone to 
> avoid that :-)...
>
> Mark.
>



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Alain Hebert

    I ain't friday, but: There is no RFC for the Sarcastica font yet?

    PS:  Our little adventure in BGP who-done-it (a few weeks back) 
burned about 25-30h man hours estimated.  Should have been sub 5 hours 
if 1 guy would have cooperated instead of ignoring the issue.


-
Alain Hebertaheb...@pubnix.net
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443

On 06/27/18 03:25, Mark Tinka wrote:


On 27/Jun/18 04:18, Suresh Ramasubramanian wrote:


Oh dear. The problem with sarcasm is that it falls flat if people don't realize 
you're being sarcastic.

Text-based messaging is terribly reliable at helping miss the point...

It's a good things our kids of today call each other on the phone to
avoid that :-)...

Mark.





Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Mark Tinka



On 27/Jun/18 04:18, Suresh Ramasubramanian wrote:

> Oh dear. The problem with sarcasm is that it falls flat if people don't 
> realize you're being sarcastic.

Text-based messaging is terribly reliable at helping miss the point...

It's a good things our kids of today call each other on the phone to
avoid that :-)...

Mark.


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Suresh Ramasubramanian
Oh dear. The problem with sarcasm is that it falls flat if people don't realize 
you're being sarcastic.

On 27/06/18, 6:53 AM, "NANOG on behalf of Scott Weeks" 
 wrote:


   On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 

wrote:

> Without the generous support of Cogent, GTT, and Level3 this dumbass
> lowlife IP address space thief would be largely if not entirely toast.
> So what are they waiting for?  Why don't their turf this jackass?  Are
> they waiting for an engraved invitation or what?
>
> As I always ask, retorically, in cases like this:  Where are the 
grownups?


--- ops.li...@gmail.com wrote:
From: Suresh Ramasubramanian 

"we are not the internet police" right? (
-


So your answer is to let them hijack whatever/whenever they want?

scott





Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Scott Weeks


   On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 
wrote:

> Without the generous support of Cogent, GTT, and Level3 this dumbass
> lowlife IP address space thief would be largely if not entirely toast.
> So what are they waiting for?  Why don't their turf this jackass?  Are
> they waiting for an engraved invitation or what?
>
> As I always ask, retorically, in cases like this:  Where are the grownups?


--- ops.li...@gmail.com wrote:
From: Suresh Ramasubramanian 

"we are not the internet police" right? (
-


So your answer is to let them hijack whatever/whenever they want?

scott


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Mike Hammett
IXP Manager now has IXF exports that PeeringDB can use to cleanup stale 
members. 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

- Original Message -

From: "Stephen Fulton"  
To: nanog@nanog.org 
Sent: Tuesday, June 26, 2018 11:18:19 AM 
Subject: Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and 
Level3 

Job, 

Unless of course they are not actually on an IXP listed. Bitcanal is 
not a member of TorIX and as far as I recall, never has been. The IP 
they list in PeeringDB was never assigned to them at any point and in 
fact was used by an AS112 instance which was run by TorIX directly on 
the fabric for a time. I sent in a note to PeeringDB several years ago 
about Bitcanal claiming to be a peer when they were not and never heard 
back.. I'll resend. 

-- Stephen (ops, TorIX) 



On 2018-06-26 1:01 AM, Job Snijders wrote: 
> On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette  
> wrote: 
> 
>> Without the generous support of Cogent, GTT, and Level3 this dumbass 
>> lowlife IP address space thief would be largely if not entirely toast. 
>> So what are they waiting for? Why don't their turf this jackass? Are 
>> they waiting for an engraved invitation or what? 
>> 
>> As I always ask, retorically, in cases like this: Where are the grownups? 
> 
> 
> 
> You could ask the same about the IXPs that facilitate the reach and impact 
> of Bitcanal’s BGP hijacks by allowing that network on their platform: 
> https://bgp.he.net/AS197426#_ix 
> 
> Kind regards, 
> 
> Job 
> 



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Stephen Fulton

Job,

Unless of course they are not actually on an IXP listed.  Bitcanal is 
not a member of TorIX and as far as I recall, never has been.  The IP 
they list in PeeringDB was never assigned to them at any point and in 
fact was used by an AS112 instance which was run by TorIX directly on 
the fabric for a time.  I sent in a note to PeeringDB several years ago 
about Bitcanal claiming to be a peer when they were not and never heard 
back.. I'll resend.


-- Stephen (ops, TorIX)



On 2018-06-26 1:01 AM, Job Snijders wrote:

On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 
wrote:


Without the generous support of Cogent, GTT, and Level3 this dumbass
lowlife IP address space thief would be largely if not entirely toast.
So what are they waiting for?  Why don't their turf this jackass?  Are
they waiting for an engraved invitation or what?

As I always ask, retorically, in cases like this:  Where are the grownups?




You could ask the same about the IXPs that facilitate the reach and impact
of Bitcanal’s BGP hijacks by allowing that network on their platform:
https://bgp.he.net/AS197426#_ix

Kind regards,

Job



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Hank Nussbacher
On 26/06/2018 17:08, Thomas King wrote:

Kudos to DE-CIX for getting it right.

-Hank

> I am the guy who gave the presentation. We ask our customers to report 
> misbehavior of peers at DE-CIX IXPs (e.g. IP hijack, ASN hijacks) to 
> ab...@de-cix.net. We will look into reported cases and collect evidence so 
> that we can act accordingly. So far, this process helped us to identify and 
> fix configuration errors from peers on a few occasions. Also, as a last 
> resort we expelled a small number of permanent and notorious rule breakers.
>
> Best regards,
> Thomas
>
>
> On 26.06.18, 15:16, "IXP User One"  wrote:
>
> Hi all,
> 
> I have heard that DE-CIX expelled BitCanal from their IXPs. One of their
> guys also gave a presentation about how DE-CIX handles abuse cases:
> https://ripe75.ripe.net/archives/video/103/
> 
> I don't know how other IXPs are handling such cases. Would be interesting
> to know.
> 
> Best regards,
> IUO
> 
> 
> On Tue, Jun 26, 2018 at 9:35 AM, Hank Nussbacher 
> wrote:
> 
> > On 26/06/2018 07:49, Ronald F. Guilmette wrote:
> >
> > You are mistaken.  Cogent and Level3 are signatories to MANRS:
> > https://www.manrs.org/participants/
> > so this clearly can't happen and you are making this up.
> >
> > :-)
> >
> > -Hank
> >
> > >
> > >
> > > The fact that there exists a jerk like this on the Internet isn't 
> really
> > > all that surprising.  What I personally -do- find rather surprising is
> > that
> > > three companies that each outght to know better, namely Cogent, GTT, 
> and
> > > Level3 are collectively supplying more than 3/4ths of this guy's IPv4
> > > connectivity, at least according to the graph displayed here:
> > >
> > > https://bgp.he.net/AS197426
> > >
> > > Without the generous support of Cogent, GTT, and Level3 this dumbass
> > > lowlife IP address space thief would be largely if not entirely toast.
> > > So what are they waiting for?  Why don't their turf this jackass?  Are
> > > they waiting for an engraved invitation or what?
> > >
> > > As I always ask, retorically, in cases like this:  Where are the
> > grownups?
> > >
> > > I would like everyone reading this who is a customer of Cogent, GTT, 
> or
> > > Level3 to try to contact these companies and ask them why they are
> > providing
> > > connectivity/peering to a hijacking jerk like this Silveira character.
> > > Ask them why -you- have to endure more spam in your inbox just so that
> > > -they- can make another one tenth of one percent profit by peering 
> with
> > > this hijacking, spammer-loving miscreant.  I would ask them myself, 
> but
> > > I personally am not a direct customer of any of them, so they would 
> all,
> > > most probably, just tell me to go pound sand.
> > >
> > > If you do manage to make contact, please be sure to mention all three 
> of
> > > Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266.  And don't 
> let
> > > whoever you talk to try to weasel out of responsibility for this
> > travesty,
> > > e.g. by claiming that they don't know anything about what's been 
> going on
> > > with all those hijacks announced by AS3266, and/or that they only 
> provide
> > > peering for AS197426.  The hijacks may all be originating from Mr.
> > Silveira's
> > > AS3266, but bgp.he.net makes clear that AS3266 has one, and only one
> > peer,
> > > i.e. Mr. Silveira's AS197426:
> > >
> > > https://bgp.he.net/AS3266
> > >
> > > So basically, Cogent, GTT, and Level3 are the prime enablers of this
> > > massive theft of IP space.  (They might try to claim that BitCanal's
> > > historical propensity to engage in hijacks is sonmething "brand new"
> > > or at least that -they- may not have been aware of it until now, in 
> which
> > > case you should ask them if they have anybody on staff who is paying
> > > attention.  As noted above, it isn't as if Bitcanal just started 
> pulling
> > > this crap yesterday.  Far from it.)
> > >
> > > Oh!  And you might also mention the fact that Spamhaus, and, I would
> > guess,
> > > at least a few of the oether public blacklists already have most or 
> all
> > of
> > > Mr.  Silveira's IP space... hijacked or otherwise... blacklisted,
> > presumably
> > > for good and ample cause.
> > >
> > > As long as Cogent, GTT, and Level3 are willing to go along with this
> > > nonsense, i.e. by selling peering to this Silveira thief, crime on
> > > the Internet -does- pay, and the theft of other people's IP space
> > > will continue to be rewarded rather than punished, as it should be.
> > >
> > > If that becomes the new normal for Internet behavior, then god help us
> > > all.
> > >
> > >
> > > 

Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Thomas King
I am the guy who gave the presentation. We ask our customers to report 
misbehavior of peers at DE-CIX IXPs (e.g. IP hijack, ASN hijacks) to 
ab...@de-cix.net. We will look into reported cases and collect evidence so that 
we can act accordingly. So far, this process helped us to identify and fix 
configuration errors from peers on a few occasions. Also, as a last resort we 
expelled a small number of permanent and notorious rule breakers.

Best regards,
Thomas


On 26.06.18, 15:16, "IXP User One"  wrote:

Hi all,

I have heard that DE-CIX expelled BitCanal from their IXPs. One of their
guys also gave a presentation about how DE-CIX handles abuse cases:
https://ripe75.ripe.net/archives/video/103/

I don't know how other IXPs are handling such cases. Would be interesting
to know.

Best regards,
IUO


On Tue, Jun 26, 2018 at 9:35 AM, Hank Nussbacher 
wrote:

> On 26/06/2018 07:49, Ronald F. Guilmette wrote:
>
> You are mistaken.  Cogent and Level3 are signatories to MANRS:
> https://www.manrs.org/participants/
> so this clearly can't happen and you are making this up.
>
> :-)
>
> -Hank
>
> >
> >
> > The fact that there exists a jerk like this on the Internet isn't really
> > all that surprising.  What I personally -do- find rather surprising is
> that
> > three companies that each outght to know better, namely Cogent, GTT, and
> > Level3 are collectively supplying more than 3/4ths of this guy's IPv4
> > connectivity, at least according to the graph displayed here:
> >
> > https://bgp.he.net/AS197426
> >
> > Without the generous support of Cogent, GTT, and Level3 this dumbass
> > lowlife IP address space thief would be largely if not entirely toast.
> > So what are they waiting for?  Why don't their turf this jackass?  Are
> > they waiting for an engraved invitation or what?
> >
> > As I always ask, retorically, in cases like this:  Where are the
> grownups?
> >
> > I would like everyone reading this who is a customer of Cogent, GTT, or
> > Level3 to try to contact these companies and ask them why they are
> providing
> > connectivity/peering to a hijacking jerk like this Silveira character.
> > Ask them why -you- have to endure more spam in your inbox just so that
> > -they- can make another one tenth of one percent profit by peering with
> > this hijacking, spammer-loving miscreant.  I would ask them myself, but
> > I personally am not a direct customer of any of them, so they would all,
> > most probably, just tell me to go pound sand.
> >
> > If you do manage to make contact, please be sure to mention all three of
> > Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266.  And don't let
> > whoever you talk to try to weasel out of responsibility for this
> travesty,
> > e.g. by claiming that they don't know anything about what's been going 
on
> > with all those hijacks announced by AS3266, and/or that they only 
provide
> > peering for AS197426.  The hijacks may all be originating from Mr.
> Silveira's
> > AS3266, but bgp.he.net makes clear that AS3266 has one, and only one
> peer,
> > i.e. Mr. Silveira's AS197426:
> >
> > https://bgp.he.net/AS3266
> >
> > So basically, Cogent, GTT, and Level3 are the prime enablers of this
> > massive theft of IP space.  (They might try to claim that BitCanal's
> > historical propensity to engage in hijacks is sonmething "brand new"
> > or at least that -they- may not have been aware of it until now, in 
which
> > case you should ask them if they have anybody on staff who is paying
> > attention.  As noted above, it isn't as if Bitcanal just started pulling
> > this crap yesterday.  Far from it.)
> >
> > Oh!  And you might also mention the fact that Spamhaus, and, I would
> guess,
> > at least a few of the oether public blacklists already have most or all
> of
> > Mr.  Silveira's IP space... hijacked or otherwise... blacklisted,
> presumably
> > for good and ample cause.
> >
> > As long as Cogent, GTT, and Level3 are willing to go along with this
> > nonsense, i.e. by selling peering to this Silveira thief, crime on
> > the Internet -does- pay, and the theft of other people's IP space
> > will continue to be rewarded rather than punished, as it should be.
> >
> > If that becomes the new normal for Internet behavior, then god help us
> > all.
> >
> >
> > Regards,
> > rfg
> >
>
>



smime.p7s
Description: S/MIME cryptographic signature


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread IXP User One
Hi all,

I have heard that DE-CIX expelled BitCanal from their IXPs. One of their
guys also gave a presentation about how DE-CIX handles abuse cases:
https://ripe75.ripe.net/archives/video/103/

I don't know how other IXPs are handling such cases. Would be interesting
to know.

Best regards,
IUO


On Tue, Jun 26, 2018 at 9:35 AM, Hank Nussbacher 
wrote:

> On 26/06/2018 07:49, Ronald F. Guilmette wrote:
>
> You are mistaken.  Cogent and Level3 are signatories to MANRS:
> https://www.manrs.org/participants/
> so this clearly can't happen and you are making this up.
>
> :-)
>
> -Hank
>
> >
> >
> > The fact that there exists a jerk like this on the Internet isn't really
> > all that surprising.  What I personally -do- find rather surprising is
> that
> > three companies that each outght to know better, namely Cogent, GTT, and
> > Level3 are collectively supplying more than 3/4ths of this guy's IPv4
> > connectivity, at least according to the graph displayed here:
> >
> > https://bgp.he.net/AS197426
> >
> > Without the generous support of Cogent, GTT, and Level3 this dumbass
> > lowlife IP address space thief would be largely if not entirely toast.
> > So what are they waiting for?  Why don't their turf this jackass?  Are
> > they waiting for an engraved invitation or what?
> >
> > As I always ask, retorically, in cases like this:  Where are the
> grownups?
> >
> > I would like everyone reading this who is a customer of Cogent, GTT, or
> > Level3 to try to contact these companies and ask them why they are
> providing
> > connectivity/peering to a hijacking jerk like this Silveira character.
> > Ask them why -you- have to endure more spam in your inbox just so that
> > -they- can make another one tenth of one percent profit by peering with
> > this hijacking, spammer-loving miscreant.  I would ask them myself, but
> > I personally am not a direct customer of any of them, so they would all,
> > most probably, just tell me to go pound sand.
> >
> > If you do manage to make contact, please be sure to mention all three of
> > Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266.  And don't let
> > whoever you talk to try to weasel out of responsibility for this
> travesty,
> > e.g. by claiming that they don't know anything about what's been going on
> > with all those hijacks announced by AS3266, and/or that they only provide
> > peering for AS197426.  The hijacks may all be originating from Mr.
> Silveira's
> > AS3266, but bgp.he.net makes clear that AS3266 has one, and only one
> peer,
> > i.e. Mr. Silveira's AS197426:
> >
> > https://bgp.he.net/AS3266
> >
> > So basically, Cogent, GTT, and Level3 are the prime enablers of this
> > massive theft of IP space.  (They might try to claim that BitCanal's
> > historical propensity to engage in hijacks is sonmething "brand new"
> > or at least that -they- may not have been aware of it until now, in which
> > case you should ask them if they have anybody on staff who is paying
> > attention.  As noted above, it isn't as if Bitcanal just started pulling
> > this crap yesterday.  Far from it.)
> >
> > Oh!  And you might also mention the fact that Spamhaus, and, I would
> guess,
> > at least a few of the oether public blacklists already have most or all
> of
> > Mr.  Silveira's IP space... hijacked or otherwise... blacklisted,
> presumably
> > for good and ample cause.
> >
> > As long as Cogent, GTT, and Level3 are willing to go along with this
> > nonsense, i.e. by selling peering to this Silveira thief, crime on
> > the Internet -does- pay, and the theft of other people's IP space
> > will continue to be rewarded rather than punished, as it should be.
> >
> > If that becomes the new normal for Internet behavior, then god help us
> > all.
> >
> >
> > Regards,
> > rfg
> >
>
>


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-26 Thread Hank Nussbacher
On 26/06/2018 07:49, Ronald F. Guilmette wrote:

You are mistaken.  Cogent and Level3 are signatories to MANRS:
https://www.manrs.org/participants/
so this clearly can't happen and you are making this up.

:-)

-Hank

>
>
> The fact that there exists a jerk like this on the Internet isn't really
> all that surprising.  What I personally -do- find rather surprising is that
> three companies that each outght to know better, namely Cogent, GTT, and
> Level3 are collectively supplying more than 3/4ths of this guy's IPv4
> connectivity, at least according to the graph displayed here:
>
> https://bgp.he.net/AS197426
>
> Without the generous support of Cogent, GTT, and Level3 this dumbass
> lowlife IP address space thief would be largely if not entirely toast.
> So what are they waiting for?  Why don't their turf this jackass?  Are
> they waiting for an engraved invitation or what?
>
> As I always ask, retorically, in cases like this:  Where are the grownups?
>
> I would like everyone reading this who is a customer of Cogent, GTT, or
> Level3 to try to contact these companies and ask them why they are providing
> connectivity/peering to a hijacking jerk like this Silveira character.
> Ask them why -you- have to endure more spam in your inbox just so that
> -they- can make another one tenth of one percent profit by peering with
> this hijacking, spammer-loving miscreant.  I would ask them myself, but
> I personally am not a direct customer of any of them, so they would all,
> most probably, just tell me to go pound sand.
>
> If you do manage to make contact, please be sure to mention all three of
> Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266.  And don't let
> whoever you talk to try to weasel out of responsibility for this travesty,
> e.g. by claiming that they don't know anything about what's been going on
> with all those hijacks announced by AS3266, and/or that they only provide
> peering for AS197426.  The hijacks may all be originating from Mr. Silveira's
> AS3266, but bgp.he.net makes clear that AS3266 has one, and only one peer,
> i.e. Mr. Silveira's AS197426:
>
> https://bgp.he.net/AS3266
>
> So basically, Cogent, GTT, and Level3 are the prime enablers of this
> massive theft of IP space.  (They might try to claim that BitCanal's
> historical propensity to engage in hijacks is sonmething "brand new"
> or at least that -they- may not have been aware of it until now, in which
> case you should ask them if they have anybody on staff who is paying
> attention.  As noted above, it isn't as if Bitcanal just started pulling
> this crap yesterday.  Far from it.)
>
> Oh!  And you might also mention the fact that Spamhaus, and, I would guess,
> at least a few of the oether public blacklists already have most or all of
> Mr.  Silveira's IP space... hijacked or otherwise... blacklisted, presumably
> for good and ample cause.
>
> As long as Cogent, GTT, and Level3 are willing to go along with this
> nonsense, i.e. by selling peering to this Silveira thief, crime on
> the Internet -does- pay, and the theft of other people's IP space
> will continue to be rewarded rather than punished, as it should be.
>
> If that becomes the new normal for Internet behavior, then god help us
> all.
>
>
> Regards,
> rfg
>



Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-25 Thread Ronald F. Guilmette


In message 
, 
Job Snijders  wrote:

>On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 
>wrote:
>> As I always ask, retorically, in cases like this:  Where are the grownups?
>
>You could ask the same about the IXPs that facilitate the reach and impact
>of Bitcanal's BGP hijacks by allowing that network on their platform:
>https://bgp.he.net/AS197426#_ix

I can and I do ask that question.  Indeed it would appear that at least one
such IX was persuaded, via a Spamhaus escalation last year, to appropriately
kick Mr. Silveira's ass to the curb:

April, 2017:
https://www.isptoday.nl/nieuws/de-cix-door-spamhaus-op-de-bon-geslingerd/

DE-CIX:
   "We are in direct contact with Spamhouse regarding this, in order to
   avoid such incidents in the future, and are counting on an open and
   direct dialog with our Spamhouse colleagues."

But first things first.  As I have stated, bgp.he.net shows that more than
three fourths of Mr. Silveira's connectivity is coming to him via just the
three companies I named, Cogent, GTT, and Level3.  Without them, both the
financial and political burden of supporting this crook would fall onto a
motley collection of smaller and more easily influenced players... ones who
might be more easily persuaded to cease and desist from their ongoing support
of IP address space theft.

But the first step is to make it clear to the various law abiding customers
of Cogent, GTT, and Level3 that these three companies are acting irresponsibly
in their continued peering with Mr. Silveira's various ASNs, and that this
-does- negatively affect everyone, or at least everyone who has an email
inbox, and/or anyone and everyone who still believes that the formal system
of IP address allocation, as administered by the five RiRs, prevents chaos
from breaking out across the entire Internet.


Regards,
rfg


Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-25 Thread Suresh Ramasubramanian
"we are not the internet police" right? (

On 26/06/18, 10:33 AM, "NANOG on behalf of Job Snijders" 
 wrote:

On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 
wrote:

> Without the generous support of Cogent, GTT, and Level3 this dumbass
> lowlife IP address space thief would be largely if not entirely toast.
> So what are they waiting for?  Why don't their turf this jackass?  Are
> they waiting for an engraved invitation or what?
>
> As I always ask, retorically, in cases like this:  Where are the grownups?



You could ask the same about the IXPs that facilitate the reach and impact
of Bitcanal’s BGP hijacks by allowing that network on their platform:
https://bgp.he.net/AS197426#_ix

Kind regards,

Job





Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-25 Thread Job Snijders
On Mon, 25 Jun 2018 at 22:49, Ronald F. Guilmette 
wrote:

> Without the generous support of Cogent, GTT, and Level3 this dumbass
> lowlife IP address space thief would be largely if not entirely toast.
> So what are they waiting for?  Why don't their turf this jackass?  Are
> they waiting for an engraved invitation or what?
>
> As I always ask, retorically, in cases like this:  Where are the grownups?



You could ask the same about the IXPs that facilitate the reach and impact
of Bitcanal’s BGP hijacks by allowing that network on their platform:
https://bgp.he.net/AS197426#_ix

Kind regards,

Job