RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
>-Original Message- >From: Jimmy Hess [mailto:mysi...@gmail.com] >Sent: Tuesday, March 13, 2018 5:11 PM >To: Naslund, Steve >Cc: nanog@nanog.org >Subject: Re: Proof of ownership; when someone demands you remove a prefix > >I would consider that the RIR WHO

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Jimmy Hess
On Tue, Mar 13, 2018 at 1:58 PM, Naslund, Steve wrote: I would consider that the RIR WHOIS records are currently the network's authoritative source of truth about IP number management. For 99% of situations there's no such proper thing as "delaying addressing abuse"

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Tony Tauber
On Tue, Mar 13, 2018 at 1:59 PM, Job Snijders wrote: > Dear Sean, > > On Tue, Mar 13, 2018 at 10:38:49AM -0700, Sean Pedersen wrote: > > This is more or less the situation we're in. We contacted the customer > > and they informed us the matter is in dispute with the RIR and that >

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Sean Pedersen
] On Behalf Of Naslund, Steve Sent: Tuesday, March 13, 2018 11:59 AM To: nanog@nanog.org Subject: Re: Proof of ownership; when someone demands you remove a prefix The fact that it is a newer customer would make me talk to the RIR direct and verify that a dispute is really in progress. I would also look

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
in legal jeopardy if they are not legit. Steven Naslund Chicago IL >-Original Message- >From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Sean Pedersen >Sent: Tuesday, March 13, 2018 12:39 PM >To: nanog@nanog.org >Subject: RE: Proof of ownership; when someone dem

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread William Herrin
On Tue, Mar 13, 2018 at 1:38 PM, Sean Pedersen wrote: > This is more or less the situation we're in. We contacted the customer and > they informed us the matter is in dispute with the RIR and that their > customer (the assignee) is in the process of resolving the

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Job Snijders
Dear Sean, On Tue, Mar 13, 2018 at 10:38:49AM -0700, Sean Pedersen wrote: > This is more or less the situation we're in. We contacted the customer > and they informed us the matter is in dispute with the RIR and that > their customer (the assignee) is in the process of resolving the > issue. We

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Sean Pedersen
RE: Proof of ownership; when someone demands you remove a prefix Yes, absolutely go with the RIR. Only thing I might adjust it whether I let the customer launch a dispute with the RIR before or after I make the change and to me that would depend on the preponderance of the evidence either way. I

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
Yes, absolutely go with the RIR. Only thing I might adjust it whether I let the customer launch a dispute with the RIR before or after I make the change and to me that would depend on the preponderance of the evidence either way. I might give the long term customer the reasonable doubt. A

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
Biggest problems we had as a service provider is that the block is registered to a corporate entity which is then acquired or dissolves and then you have to figure out who actually has control. We always tried to push the dispute process to go between the customer and the RIR when this

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread William Herrin
On Tue, Mar 13, 2018 at 10:23 AM, Sean Pedersen wrote: > In this case we defaulted to trusting our customer and their LOA over a > stranger on the Internet and asked our customer to review the request. > Unfortunately, that doesn't necessarily mean a stranger on the

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
org >Subject: RE: Proof of ownership; when someone demands you remove a prefix > >In this case we defaulted to trusting our customer and their LOA over a >stranger on the Internet and asked our customer to review the request. >>Unfortunately, that doesn't necessarily mean a

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Dovid Bender
Finally a use for block chain :p On Mon, Mar 12, 2018 at 7:11 PM, Randy Bush wrote: > it's a real shame there is no authorative cryptographically verifyable > attestation of address ownership. >

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Naslund, Steve
Another thing that would affect me as a service provider would be the account history. I would probably be more skeptical if this was a long term customer who has been announcing this prefix for a long period of time vs a new customer that just began announcing it. i.e. If I just began

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Joe Provo
On Mon, Mar 12, 2018 at 11:46:31AM -0700, Sean Pedersen wrote: > We recently received a demand to stop announcing a "fraudulent" prefix. Is > there an industry best practice when handling these kind of requests? Do you > have personal or company-specific preferences or requirements? To the best >

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Jimmy Hess
On Tue, Mar 13, 2018 at 9:23 AM, Sean Pedersen wrote: > In this case we defaulted to trusting our customer and their LOA over a > stranger on the > Internet and asked our customer to review the request. Unfortunately, that > doesn't > necessarily mean a stranger on

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-13 Thread Sean Pedersen
al Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Jason Hellenthal Sent: Monday, March 12, 2018 6:40 PM To: George William Herbert <george.herb...@gmail.com> Cc: nanog@nanog.org Subject: Re: Proof of ownership; when someone demands you remove a prefix How about signed owner

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Jason Hellenthal
haha. Sorry for the top posts. iOS what ya goin to do on a very long thread capability. :-) -- The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. > On Mar 12, 2018, at 22:26, Scott Weeks wrote: > >

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Scott Weeks
>> On Mar 12, 2018, at 4:11 PM, Randy Bush wrote: >> >> it's a real shame there is no authorative cryptographically verifyable >> attestation of address ownership. > On Mar 12, 2018, at 21:20, George William Herbert > wrote: > > Ownership?... > >

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Jason Hellenthal
How about signed ownership ? (https://keybase.io) if you are able to update the record … and it is able to be signed then shouldn’t that be proof enough of ownership of the ASN ? If you can update a forward DNS record then you can have the reverse record updated in the same sort of fashion and

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread George William Herbert
Ownership?... (Duck) -george Sent from my iPhone > On Mar 12, 2018, at 4:11 PM, Randy Bush wrote: > > it's a real shame there is no authorative cryptographically verifyable > attestation of address ownership.

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Randy Bush
it's a real shame there is no authorative cryptographically verifyable attestation of address ownership.

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Jim Mercer
i have been the requestor of such actions before, and i generally sent the take-down request with a referral to the ARIN entry with the netblock, which shows the appropriate contacts. i always sent the request from the account listed as ADMIN contact for the netblock or OrgID. in the request i

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread William Herrin
On Mon, Mar 12, 2018 at 3:46 PM, Sean Pedersen wrote: > I was just curious what others have experienced. Since so much of the > Internet is "best effort" in terms of validation, I wasn't sure if there was > much else that could be done. Hi Sean, The best practice is

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Naslund, Steve
...@imap.cc; nanog@nanog.org Subject: RE: Proof of ownership; when someone demands you remove a prefix Without revealing too much identifying information, the prefix is allocated to a 3rd party that is a customer of our customer. We have a signed LOA on hand that matches the RIR database object

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Sean Pedersen
validation, I wasn't sure if there was much else that could be done. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of n...@imap.cc Sent: Monday, March 12, 2018 12:08 PM To: nanog@nanog.org Subject: Re: Proof of ownership; when someone demands you remove a prefix

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread nop
I've seen this type of situation come up more than a few times with the shadier IP brokers that lease and don't care who they lease to, for example Logicweb, Cloudinnovation ( see bgp.he.net/search?search[search]=cloudinnovation+OR+%22cloud+innovation%22 ), Digital Energy-host1plus. The ranges

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Matt Harris
On Mon, Mar 12, 2018 at 1:46 PM, Sean Pedersen wrote: > We recently received a demand to stop announcing a "fraudulent" prefix. Is > there an industry best practice when handling these kind of requests? Do > you > have personal or company-specific preferences or

Re: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread james jones
What about contacting ARIN? Does the customer have their own ASN? ETC ETC On Mon, Mar 12, 2018 at 2:52 PM, Naslund, Steve wrote: > I would personally reach out to the technical POC for the customer. > Perhaps have your sales rep for the account resolve the issue. > >

RE: Proof of ownership; when someone demands you remove a prefix

2018-03-12 Thread Naslund, Steve
I would personally reach out to the technical POC for the customer. Perhaps have your sales rep for the account resolve the issue. Steven Naslund Chicago IL -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Sean Pedersen Sent: Monday, March 12, 2018 1:47 PM