DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
Hi Folks, While in the US soon all Firefox users will *NOT* use your DNS Recursives configured using DHCP anymore (NXDOMAIN use-application-dns.net to avoid that[1]). Next to that, it seems some of the root operators are now creating instances in the same networks that offer these kind of servic

Re: Cogent & FDCServers: Knowingly aiding and abetting fraud and theft?

2019-09-18 Thread Ronald F. Guilmette
In message <152f0dbc-f7af-2a78-c5a7-f2062effe...@necom830.hpcl.titech.ac.jp>, Masataka Ohta wrote: > From whois information: > >remarks:reg-date:1993-03-22 > >notify: tmiy...@gaijin.co.jp I already talked to the guy who has o

Re: Cogent & FDCServers: Knowingly aiding and abetting fraud and theft?

2019-09-18 Thread Masataka Ohta
Ronald F. Guilmette wrote: To me: notify: tmiy...@gaijin.co.jp merely suggest miyoko has some relationships with gaijin (foreigners), which is partly why I guess: www.ffei.co.uk is the owner. Masataka Ohta

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Brian J. Murrell
On Wed, 2019-09-18 at 09:15 +0200, Jeroen Massar wrote: > Hi Folks, Hi. > While in the US soon all Firefox users will *NOT* use your DNS > Recursives configured using DHCP anymore > (NXDOMAIN use-application-dns.net to avoid that[1]). What am I misunderstanding? Isn't use-application-dns.net su

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
On 2019-09-18 12:24, Brian J. Murrell wrote: > On Wed, 2019-09-18 at 09:15 +0200, Jeroen Massar wrote: >> Hi Folks, > > Hi. > >> While in the US soon all Firefox users will *NOT* use your DNS >> Recursives configured using DHCP anymore >> (NXDOMAIN use-application-dns.net to avoid that[1]). > >

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Mike Hammett
Why on Earth would anyone want that (Firefox deciding to do it's own DNS) as default behavior? - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Jeroen Massar" To: "NANOG" Sent: Wednesday, September

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Matt Corallo
Because getting each ISP in the world to comply with NSA monitoring requests was too hard, instead they get to centralize the full list of every website the everyone in the world visits on a single fleet of servers in Cloudflare's datacenters. This means we only need to compromise one person to

RE: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Keith Medcalf
For efficiency of censorship. If you want to stop some domain name from resolving you have to get everyone on the planet to block that DNS resolution in their recursive resolver. However, if everyone uses the same single DNS server operated by a single entity, then you only have to coerce th

Re: Cogent sales reps who actually respond

2019-09-18 Thread Elad Cohen
Hello Martin, unfortunately RPKI is not yet technically possible for a legacy range in Afrinic. From: Martijn Schmidt Sent: Tuesday, September 17, 2019 11:44 PM To: Elad Cohen ; Ronald F. Guilmette ; nanog@nanog.org ; Martijn Schmidt Subject: Re: Cogent sales r

Re: Cogent sales reps who actually respond

2019-09-18 Thread Elad Cohen
Please see the following link: https://afrinic.net/resource-certification As you can see, a MyAFRINIC account is required. Yes, route objects for legacy AFRINIC resources in their RIR operated IRRDB as a fallback for RPKI can be created and they were created by us.

Contact at OLM LLC or Windstream Communications

2019-09-18 Thread Brice Lopez via NANOG
Hello, Anyone would have a contact at OLM LLC (AS19916)? They are still announcing a /24, part of a /22 we bought a few months ago. I guess it's a misconfiguration on their side, but I'm unable to reach them. I'm now trying to reach their transit, Windstream Communications (AS7029), because they

Re: Cogent sales reps who actually respond

2019-09-18 Thread Christopher Morrow
On Wed, Sep 18, 2019 at 11:54 AM Elad Cohen wrote: > > Please see the following link: > > https://afrinic.net/resource-certification > > As you can see, a MyAFRINIC account is required. > seems like you should do this step, then do the rpki step. > Yes, route objects for legacy AFRINIC resources

Registration fraud (was Re: RPKI)

2019-09-18 Thread Masataka Ohta
Martijn Schmidt via NANOG wrote: Given that there is (or should be) an unbroken chain of contracts and payments from IANA to RIR (to NIR) to LIR and beyond for all non-legacy resources, I'd say they are in a pretty good position to take care of the due diligence work to validate an organisation'

Elad Cohen (was: Re: Cogent sales reps who actually respond)

2019-09-18 Thread Ronald F. Guilmette
In message , Elad Cohen wrote: >Please see the following link: > >https://afrinic.net/resource-certification > >As you can see, a MyAFRINIC account is required. > >Yes, route objects for legacy AFRINIC resources in their RIR operated IRRDB > as a fallback for RPKI can be created and they were cre

Re: Elad Cohen (was: Re: Cogent sales reps who actually respond)

2019-09-18 Thread Job Snijders
It would be good to see some receipts, offered by the selling party.

Re: Elad Cohen

2019-09-18 Thread Masataka Ohta
Ronald F. Guilmette wrote: Come now Mr. Cohen, please do tell us who you paid for rights to the 168.198.0.0/16 block, which belongs to the Australian government, If you think the Australian government haven't transfer its IP address to Mr. Cohen, all you should do is let the Australian governm

Question about mismatch of origin ASN in parent and more specific route object

2019-09-18 Thread Anurag Bhatia
Hello everyone Trying to understand the case from operators here who generate IRR based filters. Say if a given example: AS X originating 2001:DB8::/32 with IRR route object having AS X in the origin AS X originating 2001:DB8::/48 with IRR route object having AS Y in the origin Now for folk

Re: Question about mismatch of origin ASN in parent and more specific route object

2019-09-18 Thread Jared Mauch
> On Sep 18, 2019, at 6:34 PM, Anurag Bhatia wrote: > > Hello everyone > > > Trying to understand the case from operators here who generate IRR based > filters. > > > > Say if a given example: > > AS X originating 2001:DB8::/32 with IRR route object having AS X in the origin > AS X ori

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread John Levine
In article <8580e3e4-98b8-2828-e43f-6115c92fa...@massar.ch> you write: >Currently though: > >use-application-dns.net. 172800IN NS >ns-cloud-b1.googledomains.com. >use-application-dns.net. 172800IN NS >ns-cloud-b2.googledomains.com. >use-application-dns.net. 172

Re: Elad Cohen

2019-09-18 Thread Ronald F. Guilmette
In message <15744848-5638-ad01-2c9c-a89825f9d...@necom830.hpcl.titech.ac.jp>, Masataka Ohta wrote: >Ronald F. Guilmette wrote: > >> Come now Mr. Cohen, please do tell us who you paid for rights to the >> 168.198.0.0/16 block, which belongs to the Australian government, > >If you think the Austral

Elad Cohen, show us!

2019-09-18 Thread Richard
Mr. Guilmette, my curiosity has now been increased as I notice Cogent is no longer supplying routing for the /16's you have spoken of. It certainly would be nice to see Mr. Cohen demonstrate proof of legitimate ownership. I have never seen Cogent behave in this manner unless there really is some ne

Re: Elad Cohen

2019-09-18 Thread Masataka Ohta
Ronald F. Guilmette wrote: It is a well known fundamental tenet of logical reasoning and argument that it is not possible for -anyone- to prove a negative, which is what you've just asked me to do. So, Australian government does not think it is a victim of a crime. Right? I certainly cannot

Op-Ed : Multi-cloud is a fad ?

2019-09-18 Thread Sami Joseph
This article assumes Multi-cloud is a fad because it doesnt offer much value and its like sd-wan, a mere marchitecture. What if these products turn into controllers, working with Equinix and/or carriers to provide cloud-coloco, orchestrated by the cloud. https://medium.com/@kenhuiny/multi-cloud

Re: Elad Cohen

2019-09-18 Thread Ronald F. Guilmette
In message , Masataka Ohta wrote: >Ronald F. Guilmette wrote: > >> It is a well known fundamental tenet of logical reasoning and argument >> that it is not possible for -anyone- to prove a negative, which is what >> you've just asked me to do. > >So, Australian government does not think it is a v

Re: Elad Cohen (was: Re: Cogent sales reps who actually respond)

2019-09-18 Thread Christopher Morrow
I tried to ask this earlier, I think, but... "who cares about the sale?" I ask this because I think getting wrapped around that axle is the wrong place to spend resources. If the outcome of 'someone' controlling IP space is that there is abusive activity coming from that space and either no actio

Re: Elad Cohen (was: Re: Cogent sales reps who actually respond)

2019-09-18 Thread Ben Cannon
With the difficulty of getting IPs off SPAM RBLs being what they are, I’m not sure I like the bone-chilling idea of accepting null-routing entire ranges as standard practice. Same reasons, no central repository, no easy/quick/objective/cheap way to remove an illegitimate entry - and then the re

Re: Elad Cohen (was: Re: Cogent sales reps who actually respond)

2019-09-18 Thread Christopher Morrow
On Wed, Sep 18, 2019 at 11:19 PM Ben Cannon wrote: > With the difficulty of getting IPs off SPAM RBLs being what they are, I’m > not sure I like the bone-chilling idea of accepting null-routing entire > ranges as standard practice. > I didn't say spam-rbl. > > Same reasons, no central reposito

Re: Elad Cohen

2019-09-18 Thread Masataka Ohta
Ronald F. Guilmette wrote: > So, if you are looking for a Crime here, i.e. one defined under law, > there isn't one. You don't know how broadly crime of fraud is defined by the current code. Just injecting false route information may not be a crime. However, doing so for financial gain maybe a

Any Australian? (was Re: Elad Cohen)

2019-09-18 Thread Masataka Ohta
Ronald F. Guilmette wrote: With respect to the Australian government's knowledge or lack thereof, I really have no idea. If you want to know what they know, or do not know, I encourage you to ask them yourself. It appears that this will be rather easier for you to do, than for me to do, since

Colombia Network Operators Group

2019-09-18 Thread Mehmet Akcin
Hello there Few people who is doing a lot of work in Colombia, we decided to start Colombia network operators group and arrange local meetups, provide people support who want to have infrastructure here. Feel free to join www.nog.com.co and our first face to face meeting will be in december, date