Re: backbones filtering unsanctioned sites

2017-02-17 Thread Florian Weimer
* > On Friday, 17 February, 2017 08:29, "Florian Weimer" said: > >> Of course they do, see the arrest of Augusto Pinochet. > > Universal Jurisdiction is supposed to cover the likes of war crimes, > torture, extrajudicial executions and genocide, that are generally > agreed to be crimes against hu

Re: backbones filtering unsanctioned sites

2017-02-17 Thread t...@pelican.org
On Friday, 17 February, 2017 08:29, "Florian Weimer" said: > Of course they do, see the arrest of Augusto Pinochet. Universal Jurisdiction is supposed to cover the likes of war crimes, torture, extrajudicial executions and genocide, that are generally agreed to be crimes against humanity as a

Re: backbones filtering unsanctioned sites

2017-02-17 Thread Florian Weimer
* Todd Crane: > I am not familiar with Cogent’s architecture but why couldn’t they > just null route the IP address at their edge routers from within > Spain? I am not a lawyer but from what I understand, since the Spanish > government has zero say on what goes on outside of their borders, Of cou

Re: backbones filtering unsanctioned sites

2017-02-17 Thread Florian Weimer
* Jared Mauch: > So risk avoidance on the part of the 100k other sites hosted by CF is > now a conspiracy? Conspiracy is perhaps a bit too strong, but I would be annoyed if someone took my business, but then deliberately undermined the service they provide. Of course, if it's all part of the agr

Re: backbones filtering unsanctioned sites

2017-02-17 Thread Florian Weimer
* Andrew Paolucci: > Can anyone with a Cogent connection in Canada verify that they are > impacted as well? I think it's global. I tried sites in Canada and Germany, and the traces look like deliberate blocking of /32s. I don't have a BGP view for these sites, though. Why wouldn't it be global

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Todd Crane
I am not familiar with Cogent’s architecture but why couldn’t they just null route the IP address at their edge routers from within Spain? I am not a lawyer but from what I understand, since the Spanish government has zero say on what goes on outside of their borders, a court order that may or m

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Baldur Norddahl
For transit maybe Cogent should have dropped the route, so they did not advertize a route to peers that included null routed parts. Den 16/02/2017 kl. 21.52 skrev Jean-Francois Mezei: On 2017-02-16 14:59, Sadiq Saif wrote: From - https://arstechnica.com/tech-policy/2017/02/a-court-order-bloc

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Jean-Francois Mezei
On 2017-02-16 14:59, Sadiq Saif wrote: > From - > https://arstechnica.com/tech-policy/2017/02/a-court-order-blocked-pirate-sites-that-werent-supposed-to-be-blocked/ Many thanks. pardon my ignorance here, but question: For an outfit such as Cogent which acts not only as a transit provider, but

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Sadiq Saif
On 2017-02-14 08:27, Jared Mauch wrote: > So risk avoidance on the part of the 100k other sites hosted by CF is now a > conspiracy? > > I'm surprised it took this many years for something like this to happen. > Wonder which LE in which country... > > Either way seems nothing too suspicious is

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Andrew Paolucci
Can anyone with a Cogent connection in Canada verify that they are impacted as well? Regards, Andrew Paolucci Original Message Subject: Re: backbones filtering unsanctioned sites Local Time: February 14, 2017 6:10 PM UTC Time: February 14, 2017 6:10 PM From: jfmezei_na

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Kyle Drake
If it's been decided that BGP communities will now be used for purposes other than internet traffic control, then perhaps Cloudflare would also be willing to put the hundreds of DDoS-attack-for-hire services they protect on a single IP so we can blackhole those as well? At least then we can use BGP

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Ken Chase
They exist: http://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=26878307 http://canadabizdb.com/company/3264874/cogent-canada-inc http://www.contracts-contrats.hc-sc.gc.ca/cfob/mssid/contractdisc.nsf/WEBbypurpose/A35BA8F8DB21C5E98525787E0066931A?OpenDocument&lang=eng&; http:

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Christopher Morrow
On Tue, Feb 14, 2017 at 1:10 PM, Jean-Francois Mezei < jfmezei_na...@vaxination.ca> wrote: > On 2017-02-14 08:27, Jared Mauch wrote: > > So risk avoidance on the part of the 100k other sites hosted by CF is > now a conspiracy? > > > Cogent is a backbone network that is international in scope. Whe

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Jean-Francois Mezei
On 2017-02-14 08:27, Jared Mauch wrote: > So risk avoidance on the part of the 100k other sites hosted by CF is now a > conspiracy? Cogent is a backbone network that is international in scope. When China tells a network to block the BBC that block happens only in China. If the USA wants to be

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Jared Mauch
So risk avoidance on the part of the 100k other sites hosted by CF is now a conspiracy? I'm surprised it took this many years for something like this to happen. Wonder which LE in which country... Either way seems nothing too suspicious is going on here. Jared Mauch > On Feb 13, 2017, at 5

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Niels Bakker
* nanog@nanog.org (Patrick Boyle via NANOG) [Tue 14 Feb 2017, 14:16 CET]: Even more concerning, on the surface it looks like there could be some cooperation by Cloudflare. If you look at the list of domains that contain an A record for that IP, it's almost all torrent sites and mirrors. Could t

Re: backbones filtering unsanctioned sites

2017-02-14 Thread Patrick Boyle via NANOG
this? http://bgp.he.net/ip/104.31.18.30#_dns Original Message Subject: Re: backbones filtering unsanctioned sites Local Time: February 13, 2017 2:53 PM UTC Time: February 13, 2017 9:53 PM From: jfmezei_na...@vaxination.ca To: nanog@nanog.org Cogent seems to have been very

Re: backbones filtering unsanctioned sites

2017-02-13 Thread Christopher Morrow
On Mon, Feb 13, 2017 at 4:53 PM, Jean-Francois Mezei < jfmezei_na...@vaxination.ca> wrote: > > > Cogent seems to have been very very silent on the issue. > > why would they say anything at all? it's blatantly clear what's happened, right? "lea order to block access" no explanation necessary. >

Re: backbones filtering unsanctioned sites

2017-02-13 Thread Jean-Francois Mezei
Cogent seems to have been very very silent on the issue. Could this be because they got some police/NSA/FBI letter requiring confindentiality and requiring Cogent to snoop on all traffic to 104.31.19.30 , and along with agreeing to comply, blocked all the requested traffic which means that their

Re: backbones filtering unsanctioned sites

2017-02-11 Thread William Waites
> Looks like mostly proxy/torrent sites on that IP address. That may be so. Maybe it isn’t particularly objectionable for Cogent to not to carry traffic to some particular destination that they don’t like. As you point out they already only offer a partial view of the Internet. What is very pro

Re: backbones filtering unsanctioned sites

2017-02-11 Thread Jason Canady
10.255.255.255 (metric 10177050) from 154.54.66.21 (154.54.66.21) >>>>> Origin IGP, metric 0, localpref 150, valid, internal, best >>>>> Community: 174:990 174:20912 174:21001 >>>>> Originator: 66.28.1.228, Cluster list: 154.54.66.21, 66.2

Re: backbones filtering unsanctioned sites

2017-02-11 Thread Marco Teixeira
Community: 174:990 174:20912 174:21001 > >>> Originator: 66.28.1.228, Cluster list: 154.54.66.21, 66.28.1.9 > >>> > >>> > >>> Call it a "hunch" but I doubt 10.255.255.255 is a valid next-hop > router. > >>> > >

Re: backbones filtering unsanctioned sites

2017-02-11 Thread Alistair Mackenzie
;> >>> On Fri, Feb 10, 2017 at 1:39 PM, Mike Hammett wrote: >>> >>> Have we determined that this is intentional vs. some screw up? >>>> >>>> >>>> >>>> >>>> - >>>> Mike Hammett >>>>

Re: backbones filtering unsanctioned sites

2017-02-11 Thread Bryan Holloway
cs-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Brielle Bruns" To: nanog@nanog.org Sent: Friday, February 10, 2017 12:28:53 PM Subject: Re: backbones filtering unsanctioned sites On 2/9/17 9:18 PM, Ken Chase wrote: https://torrentfreak.com/inte

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Jean-Francois Mezei
Since 104.31.19.30 is an anycast IP, is it possible that this isn't related to PirateBay but more related to Cogent having a dispute with Cloudfare ? It is counter intuitive for a transit provider to refuse business/traffic, but then again, Cogent has been involved in counter intuituve disputes i

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 5:30 PM, Ken Chase wrote: > If its not just cogent then we have an even larger issue -- that > theres asymetric application of rulings. So we should just assume > that if we can't get to something via cogent then all backbones > within the same jurisdiction(*) should or wi

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Ken Chase
If its not just cogent then we have an even larger issue -- that theres asymetric application of rulings. So we should just assume that if we can't get to something via cogent then all backbones within the same jurisdiction(*) should or will also have the same sites/ips blocked soon? And that it wa

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 2:08 PM, Ken Chase wrote: > >"Abuse cannot not provide you a list of websites that may be > encountering > >reduced visibility via Cogent" > > They could, if they kept a list of forward lookups they had done to get IPs > i think you mean passive-dns .. which is a thin

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
ntentionally entered a /32 > into > >the config management system :( > > > > > >> > >> > >> > >> - > >> Mike Hammett > >> Intelligent Computing Solutions > >> http://www.ics-il.com > >>

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Ken Chase
config management system :( > > >> >> >> >> - >> Mike Hammett >> Intelligent Computing Solutions >> http://www.ics-il.com >> >> Midwest-IX >> http://www.midwest-ix.com >> >> - Original

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
ett > Intelligent Computing Solutions > http://www.ics-il.com > > Midwest-IX > http://www.midwest-ix.com > > - Original Message - > > From: "Brielle Bruns" > To: nanog@nanog.org > Sent: Friday, February 10, 2017 12:28:53 PM > Subject: Re: backbon

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Alistair Mackenzie
? > > > > > > > > > > - > > Mike Hammett > > Intelligent Computing Solutions > > http://www.ics-il.com > > > > Midwest-IX > > http://www.midwest-ix.com > > > > - Original Message - > > > > From

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Ken Chase
>"Abuse cannot not provide you a list of websites that may be encountering >reduced visibility via Cogent" They could, if they kept a list of forward lookups they had done to get IPs that ended up in their blacklists. But just having the IPs it's impossible to get the whole list of possible ho

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Mike Hammett
anog@nanog.org Sent: Friday, February 10, 2017 12:46:57 PM Subject: Re: backbones filtering unsanctioned sites This looks pretty intentional to me. From http://www.cogentco.com/en/network/looking-glass : BGP routing table entry for 104.31.18.30/32 , version 611495773 Paths: (1 available, be

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Jason Rokeach
> Midwest-IX > http://www.midwest-ix.com > > - Original Message - > > From: "Brielle Bruns" > To: nanog@nanog.org > Sent: Friday, February 10, 2017 12:28:53 PM > Subject: Re: backbones filtering unsanctioned sites > > On 2/9/17 9:18 PM, Ken Chase wrote: >

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Mike Hammett
2017 12:28:53 PM Subject: Re: backbones filtering unsanctioned sites On 2/9/17 9:18 PM, Ken Chase wrote: > https://torrentfreak.com/internet-backbone-provider-cogent-blocks-pirate-bay-and-other-pirate-sites-170209/ > > > /kc > Funny. Someone else got back: "Abuse ca

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Brielle Bruns
On 2/9/17 9:18 PM, Ken Chase wrote: https://torrentfreak.com/internet-backbone-provider-cogent-blocks-pirate-bay-and-other-pirate-sites-170209/ /kc Funny. Someone else got back: "Abuse cannot not provide you a list of websites that may be encountering reduced visibility via Cogent" I alm

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 6:47 AM, Robert McKay wrote: > On 2017-02-10 04:18, Ken Chase wrote: > >> https://torrentfreak.com/internet-backbone-provider-cogent- >> blocks-pirate-bay-and-other-pirate-sites-170209/ >> >> /kc >> > > Strange indeed.. but they forgot to ban it on IPv6 - maybe they're try

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Robert McKay
On 2017-02-10 04:18, Ken Chase wrote: https://torrentfreak.com/internet-backbone-provider-cogent-blocks-pirate-bay-and-other-pirate-sites-170209/ /kc Strange indeed.. but they forgot to ban it on IPv6 - maybe they're trying to push IPv6 adoption! Banning any Cloudflare hosted sites by IP is