Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Mark Andrews
In message , Leo Vegoda writes: > On Sep 9, 2009, at 7:18 PM, Alex Lanstein wrote: > > > Along the same lines, I noticed that the worst Actor in recent =20 > > memory (McColo - AS26780) stopped paying their bills to ARIN and =20 > > their addresses have been returned to the pool. > > > > It's my

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Martin Hannigan
On Wed, Sep 9, 2009 at 11:30 PM, Leo Vegoda wrote: > On Sep 9, 2009, at 7:18 PM, Alex Lanstein wrote: > > > Along the same lines, I noticed that the worst Actor in recent > > memory (McColo - AS26780) stopped paying their bills to ARIN and > > their addresses have been returned to the pool. > > >

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Leo Vegoda
On Sep 9, 2009, at 7:18 PM, Alex Lanstein wrote: > Along the same lines, I noticed that the worst Actor in recent > memory (McColo - AS26780) stopped paying their bills to ARIN and > their addresses have been returned to the pool. > > It's my opinion that a very select number of CIDR blocks (a

BGP Confederation over Route Reflector

2009-09-09 Thread devang patel
Hello, What are the advantages of BGP Confederation over Route Reflector? I mean when one should decide to deploy BGP Confederation over Route Reflector deployment? Thanks, Devang Patel

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Sep 9, 2009 at 7:18 PM, Alex Lanstein wrote: > Along the same lines, I noticed that the worst Actor in recent memory > (McColo - AS26780) stopped paying their bills to ARIN and their addresses > have been returned to the pool. > > It's my opi

RE: Repeated Blacklisting / IP reputation

2009-09-09 Thread Alex Lanstein
Along the same lines, I noticed that the worst Actor in recent memory (McColo - AS26780) stopped paying their bills to ARIN and their addresses have been returned to the pool. It's my opinion that a very select number of CIDR blocks (another example being the ones belonging to Cernel/InternetPa

RFC 1149 put into practice

2009-09-09 Thread JC Dill
http://news.yahoo.com/s/nm/20090909/od_nm/us_safrica_pigeon_2 JOHANNESBURG (Reuters) – A South African information technology company on Wednesday proved it was faster for them to transmit data with a carrier pigeon than to send it using Telkom , the country's leading internet se

colo space in vancouver, bc?

2009-09-09 Thread Eric Brunner-Williams
Hi, I've a project that needs approximately a rack, in the Vancouver, BC area. Suggestions? Eric

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread David Conrad
On Sep 9, 2009, at 12:13 PM, Martin Hannigan wrote: The problem of tainted ipv4 allocations probably grows from here since at some point in the near future there isn't going to be much left in terms of "clean" space to allocate. We're running out of v4 addresses in case anyone forgot. Som

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Jay Hennigan
JC Dill wrote: Joe Greco wrote: Answer queries to whether or not IP space X is currently blocked (potentially at one of hundreds or thousands of points in their system, which corporate security may not wish to share, or even give "some random intern" access to)? Process reports of new ARIN d

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread JC Dill
Joe Greco wrote: John Curran wrote: On Sep 8, 2009, at 2:18 PM, JC Dill wrote: It seems simple and obvious that ARIN, RIPE, et. al. should determine the blacklist state of a reclaimed IP group and ensure that the IP group is usable before re-allocating it. When IPs are reclaimed,

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Valdis . Kletnieks
On Wed, 09 Sep 2009 15:13:44 EDT, Martin Hannigan said: > Not sure that this is an ARIN problem more than an operational problem since > RBL's are opt-in. An effort to identify RBL's that are behaving poorly is > probably more interesting at this point, no? I suspect the problem isn't poor RBLs, i

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread John Curran
On Sep 8, 2009, at 5:20 PM, Joe Provo wrote: > > On Tue, Sep 08, 2009 at 01:43:39PM -0400, John Curran wrote: > [snip] >> Could some folks from the appropriate networks explain why >> this is such a problem and/or suggest additional steps that >> ARIN or the receipts should be taking to avoid th

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Martin Hannigan
On Wed, Sep 9, 2009 at 1:15 PM, Seth Mattinen wrote: > Skywing wrote: > > What's to stop spammers from doing this to cycle through blocks in > rapid-fashion? > > > > This proposal seems easily abusable to me. > > > > Oh, I don't know, maybe ARIN staff can say no? The process is heavy with > human

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Seth Mattinen
Skywing wrote: > What's to stop spammers from doing this to cycle through blocks in > rapid-fashion? > > This proposal seems easily abusable to me. > Oh, I don't know, maybe ARIN staff can say no? The process is heavy with human interaction, there is nothing "rapid" about it, and bears no compa

RE: Repeated Blacklisting / IP reputation

2009-09-09 Thread Skywing
What's to stop spammers from doing this to cycle through blocks in rapid-fashion? This proposal seems easily abusable to me. - S From: Peter Beckman [beck...@angryox.com] Sent: Tuesday, September 08, 2009 10:04 PM To: Tom Pipes Cc: nanog@nanog.org Subject

RE: Repeated Blacklisting / IP reputation

2009-09-09 Thread Frank Bulk
Right on point -- we have a long list of manually entered netblocks in our spam appliance's blacklist that we've accumulated over time. Besides the mistakes we've made, we've had to delist perhaps 5 over the last 2 years, none due to ARIN reallocations. Most times it's our customer calling our he

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Joe Greco
> John, > > ARIN's role as the entity engaged in legal contractual relationship with > the previous owners of the space puts it in the position to insert > enforceable contract clauses to deter and/or mitigate "graffiti" in > allocations. That's complicated. How do you define "graffiti"? Jus

Re: You're still not important, was Repeated Blacklisting / IP reputation

2009-09-09 Thread John Levine
>Cleaning up a block of IPs previously used by shady characters has a >real cost, both in time and money. The argument as I see it is who >bears the responsibility and cost of that cleanup. ... and as we all know the fundamental axiom of Internet economics is to foist of as many of your costs as

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Joe Maimon
John, ARIN's role as the entity engaged in legal contractual relationship with the previous owners of the space puts it in the position to insert enforceable contract clauses to deter and/or mitigate "graffiti" in allocations. Policy proposals probably are not required for this. Space origi

Re: Datacenter recommendations - China and Latin America

2009-09-09 Thread Benjamin Billon
I've heard of several ISP "available" in Mainland China and offering IP transit services, but I when contacted they never confirmed they're providing the access to Mainland China Netizens, as, as far as I know, the only historical backbone in Mainland China is ChinaNet (owned by China Telecom),

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Dave Rand
[In the message entitled "Re: Repeated Blacklisting / IP reputation" on Sep 8, 14:34, Joe Greco writes:] > > there is a fundamental disconnect here. the IP space is neutral. > > it has no bias toward or against social behaviours. its a tool. > > the actual/real target here are the people who ar

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Joe Greco
> bmann...@vacation.karoshi.com wrote: > > sounds like domain tasting to me. > > Oops! Oh yeah. Spammer gets an allocation... > > "Well, if that netblock was clean before, it sure isn't now! May I > please have another?" > > Lather, rinse, repeat. THAT would probably be easy enough to dete

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Joe Greco
> > Show me ONE major MTA which allows you to configure an expiration for > > an ACL entry. > > > > The problem with your opinion, and it's a fine opinion, and it's even a > > good opinion, is that it has very little relationship to the tools which > > are given to people in order to accomplish blo

Re: Datacenter recommendations - China and Latin America

2009-09-09 Thread tvest
On Sep 9, 2009, at 4:11 AM, Benjamin Billon wrote: From a cost, operational, and routing perspective, the same would be true if you got a CT link in Los Angeles or San Francisco. I can't be sure (didn't try myself, sorry) but I think CT links are more filtered from outside PRC (HK being in

Re: Repeated Blacklisting / IP reputation

2009-09-09 Thread Chris Hills
On 08/09/09 21:34, Joe Greco wrote: Show me ONE major MTA which allows you to configure an expiration for an ACL entry. This is fairly trivial to do with Exim by storing your acl entries in a database or directory with a field/attribute for expiry, and an appropriate router configuration. No

Re: Datacenter recommendations - China and Latin America

2009-09-09 Thread Benjamin Billon
From a cost, operational, and routing perspective, the same would be true if you got a CT link in Los Angeles or San Francisco. I can't be sure (didn't try myself, sorry) but I think CT links are more filtered from outside PRC (HK being included in PRC) Since CT and CNC You mean China Unicom