Re: Team Cymru / Spamhaus

2014-06-27 Thread Paul S.
+1, blanket banning is probably not the best way to go. On 6/28/2014 午前 05:40, Jon Lewis wrote: On Fri, 27 Jun 2014, Adam Greene wrote: We're evaluating whether to add BGP feeds from these two sources in attempt to minimize exposure to DoS. The Team Cymru BOGON list ( http://www.team-cymru.

Re: Advice on BGP + uCARP setup on 2 Debian Gateways

2014-06-27 Thread Larry Sheldon
On 6/27/2014 4:42 AM, Toney Mareo wrote: Fascinating. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to

BGP Update Report

2014-06-27 Thread cidr-report
BGP Update Report Interval: 19-Jun-14 -to- 26-Jun-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS26615 106096 3.8% 122.7 -- Tim Celular S.A.,BR 2 - AS982986844 3.1% 6

The Cidr Report

2014-06-27 Thread cidr-report
This report has been generated at Fri Jun 27 21:13:58 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date

Re: Team Cymru / Spamhaus

2014-06-27 Thread Matthias Leisi
On Fri, Jun 27, 2014 at 10:40 PM, Jon Lewis wrote: >> We're a little more leery about trying Spamhaus's BGPf service (DROP, >> EDROP >> and BCL, >> >> http://www.spamhaus.org/bgpf/ > > > This is more about stopping spam from entering your network and stopping > compromised hosts on your network f

Re: Team Cymru / Spamhaus

2014-06-27 Thread Jon Lewis
On Fri, 27 Jun 2014, Adam Greene wrote: We're evaluating whether to add BGP feeds from these two sources in attempt to minimize exposure to DoS. The Team Cymru BOGON list ( http://www.team-cymru.org/Services/Bogons/bogon-bn-nonagg.txt or http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.

RE: Team Cymru / Spamhaus

2014-06-27 Thread SysIT
Appreciate the Clarification Darden, I wasn't aware Spamhaus had this other division / service, time for some reading. -Original Message- From: Darden, Patrick [mailto:patrick.dar...@p66.com] Sent: Friday, June 27, 2014 11:50 AM To: SysIT; Adam Greene; 'NANOG list' Subject: RE: Team Cymr

Weekly Routing Table Report

2014-06-27 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.ap

Re: Advice on BGP + uCARP setup on 2 Debian Gateways

2014-06-27 Thread Matthew Petach
On Fri, Jun 27, 2014 at 2:42 AM, Toney Mareo wrote: > > Hi Toney, I think something must have gone wrong with your email; all the fine advice you had intended to pass along didn't seem to make it through intact; all we got was an empty message body, and no advice. Thanks! Matt

RE: Team Cymru / Spamhaus

2014-06-27 Thread SysIT
That wont stop a DoS. A DoS or DDoS is pure bandwidth wars for the most part, if someone is to DoS you, they already have your IP's and urls they need to attack you, thus a spam list won't stop an attack. If you want to minimize actual spam, sure. -Original Message- From: NANOG [mailto

Advice on BGP + uCARP setup on 2 Debian Gateways

2014-06-27 Thread Toney Mareo

Re: Owning a name

2014-06-27 Thread Mark Rudholm
On 06/26/2014 10:14 PM, Collin Anderson wrote: On Thu, Jun 26, 2014 at 10:00 PM, John Levine wrote: I've been looking for the case in PACER, and don't see anything filed this year against ICANN so the case doesn't even exist. Seth Charles Ben HAIM, et al., Plaintiffs, v. The ISLAMIC REPUBLIC

Re: Owning a name

2014-06-27 Thread Tony Finch
John Levine wrote: > > The US has a long policy of not messing with ccTLDs, even of countries > that we don't like such as .kp, .cu, and .iq (back in the day). The latter had a fairly messy history: http://www.iana.org/reports/2005/iq-report-05aug2005.pdf Tony. -- f.anthony.n.finchhttp://d

Re: Team Cymru / Spamhaus

2014-06-27 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Could I also encourage you to do anti-spoofing filtering, a la BCP38? - - ferg On 6/27/2014 8:17 AM, Adam Greene wrote: > Hi all, > > > > We're evaluating whether to add BGP feeds from these two sources in > attempt to minimize exposure to DoS.

Team Cymru / Spamhaus

2014-06-27 Thread Adam Greene
Hi all, We're evaluating whether to add BGP feeds from these two sources in attempt to minimize exposure to DoS. The Team Cymru BOGON list ( http://www.team-cymru.org/Services/Bogons/bogon-bn-nonagg.txt or http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.txt ) looks promising and

Re: Owning a name

2014-06-27 Thread John Levine
>> Yes. ccTLDs are treated as national sovereign resources. > >By whom and where? > >Regardless, there are 'State Sponsors of Terrorism'-related amendments to >the Foreign Sovereign Immunities Act that come into play here. The US has a long policy of not messing with ccTLDs, even of countries that

Re: Owning a name

2014-06-27 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 6/27/2014 7:49 AM, Collin Anderson wrote: > On Fri, Jun 27, 2014 at 7:50 AM, David Conrad > wrote: > >> Yes. ccTLDs are treated as national sovereign resources. >> > > By whom and where? > > Regardless, there are 'State Sponsors of Terrorism

Re: Owning a name

2014-06-27 Thread Collin Anderson
On Fri, Jun 27, 2014 at 7:50 AM, David Conrad wrote: > Yes. ccTLDs are treated as national sovereign resources. > By whom and where? Regardless, there are 'State Sponsors of Terrorism'-related amendments to the Foreign Sovereign Immunities Act that come into play here. -- *Collin David Anderso

Re: Owning a name

2014-06-27 Thread David Conrad
On Jun 27, 2014, at 5:35 AM, Joly MacFie wrote: > But, are ccTLDs licenced by ICANN? No. Some ccTLD managers have signed "Affirmations of Commitments" with ICANN that basically say both ICANN and the ccTLD admit each other exists, but it isn't required. > I thought they were independent. Yes

Re: Owning a name

2014-06-27 Thread Bill Woodcock
On Jun 26, 2014, at 10:14 PM, Collin Anderson wrote: > On Thu, Jun 26, 2014 at 10:00 PM, John Levine wrote: > >> I've been looking for the case in PACER, and don't see >> anything filed this year against ICANN so the case doesn't even exist. >> > > Seth Charles Ben HAIM, et al., Plaintiffs,

Re: MACsec SFP

2014-06-27 Thread Pieter Hulshoff
I was wondering: Would there be an interest in a similar IPsec SFP or is that part already well taken care of by the router market? Kind regards, Pieter Hulshoff