Re: Connectivity status for Egypt

97.193.32.0/19 | 36992 197.194.128.0/17 | 36992 197.195.0.0/17 | 36992 212.103.160.0/24 | 8452 212.103.169.0/24 | 8452 213.131.64.0/24 | 24863 213.181.236.0/24 | 33789 213.247.0.0/20 | 28045 213.247.16.0/20 | 28045 217.29.128.0/20 | 15834 Thanks, Rob. -- Rob Thomas Te

Re: [Nanog-futures] Admission for Committee Members

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, team. > i do not support getting paid for community service. a primrose path. Bravo and agreed! Thanks, Rob. - -- Rob Thomas Team Cymru https://www.team-cymru.org/ "Say little and do much." M Avot 1:15 -BEGIN PGP SIGNATURE

Re: RIP dmr

hanged > all our worlds. Dennis always answered my email queries. I asked him all sorts of silly programming and Unix questions early in my career, and he patiently answered them all. I wouldn't have my career without both his contributions and his guidance. His memory is for blessing. -

Re: Historical records of IP allocations

ives, but only found AS35540 OVH-TELECOM OVH Telecom as the origin. Other folks on this list may have data that goes further back. Thanks, Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ "Say little and do much." M Avot 1:15

AS23724 oops? was Re: China prefix hijack

.. ] So I'm leaning towards "big oops." I'll see if we can find someone at AS23724 to ask, and perhaps assist if needed. Thanks, Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ "Say little and do much." M Avot 1:15

Re: Checking bogon status of new address space

reason we removed the static bogon lists from our Secure [BIND|IOS|BGP] Templates. My thanks to Randy Bush (and a few other folks) for the suggestion. We still have the bogon list and the dynamic bogon route-servers. <https://www.team-cymru.org/Services/Bogons/> Thanks, Rob. -- Rob

Re: New service - the Team Cymru Malware Hash Registry!

f folks, and are happy to work with even more. Introductions or suggestions are always welcome! Got a name or email address handy? Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: Current routing issues?

ormal; well, normal for noise. :) <http://www.cymru.com/Reach/garbage.html> Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ cmn_err(do_panic, "Out of coffee!");

Re: DNS issues?

Hi, NANOGers. This might help a bit when debugging root and TLD name server connectivity concerns: <http://www.cymru.com/monitoring/dnssumm/index.html> Thanks, Rob. -- Rob Thomas Team Cymru http://www.cymru.com/ cmn_err(do_panic, "Out of coffee!");

Re: Q: What do ISPs really think about security issues?

Sean) took us under their wing and mentored us on the processes and setups that best help ISPs. That alone would make a great *NOG presentation. -- Rob Thomas Team Cymru Research NFP http://www.cymru.com/ cmn_err(do_panic, "Out of coffee!");

Re: [NANOG] Limiting ICMP

nitoring tools to ensure they were not unnecessarily dropping valid packets. Your mileage may vary of course, as it apparently does? John -- Rob Thomas Team Cymru The WHO and WHY team http://www.team-cymru.org/

Re: Bogon Filter Update Request

ter, the authorataive list > is maintained at http://www.iana.org/assignments/ipv4-address-space. > > Thanks for your attention and I hope to see some of you at an upcoming NANOG > meeting. > > Stan Barber > [EMAIL PROTECTED] (called "the other SOB on the Internet" b

Re: Is it time to abandon bogon prefix filters?

This makes sense especially for static filters. Automated feeds, such as the bogon route-server or DNS zones, leaves folks with options. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: Is it time to abandon bogon prefix filters?

ere's interest. Stay tuned, I should have some answers in a few hours. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: Is it time to abandon bogon prefix filters?

onopoly on imagination, we also have some friends at commercial pen-testers hit us regularly, just to be sure. :) Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: IPv6 bogons/unallocated space list?

cymru.com/Bogons/ipv6.txt> It is maintained by Team 6Bogon <6bogon at inetcore.com>. We and they would LOVE to have your feedback! -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: Is it time to abandon bogon prefix filters?

06: 0.130534559% 2008-07: 0.002327683% 2008-08: 0.001258054% (thus far) That's not a lot of bogon activity in the Darknets, though Darknets are only one measure of malevolent traffic. Your mileage may vary, etc. [1] <http://www.team-cymru.org/Services/darknets.html> Thank

Re: Is it time to abandon bogon prefix filters?

I guess I parsed that differently than you did. When he said "fully 60% of the naughty packets were obvious bogons", I read that as meaning 60% of all bad packets (bogon-sourced or otherwise) were from bogon space. That's correct. -- Rob Thomas Team Cymru http://www.team-cym

Re: Is it time to abandon bogon prefix filters?

keep the online criminal toolkit as sparse as I can. :) and can you separate reserved (127, ...) and unallocated? I can indeed, though it'll take me a bit to do so. Again, stay tuned. Thanks, Rob. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: Is it time to abandon bogon prefix filters?

This is scanning of darknets - usually you're interested in what comes back, i.e. can you 0wn it? so src has to be valid. Yep yep. -- Rob Thomas Team Cymru http://www.team-cymru.org/ cmn_err(CEO_PANIC, "Out of coffee!");

Re: CYMRU Bogon Peering

and times, I'll look into those ASAP. I can see if other sessions were dropping at the same time, upstream outages, etc. Feel free to hit up n...@cymru.com with outage reports as they occur as well. Thanks! Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ ASSERT(coffee != empty);

Re: Chuck Norris Botnet and Broadband Routers

hat we've seen. We'll need your ASN(s) or CIDR block(s). Thanks, Rob. -- Rob Thomas Team Cymru https://www.team-cymru.org/ ASSERT(coffee != empty);

Re: "Tactical" /24 announcements

is based on http://www.ris.ripe.net/dumps/riswhoisdump.IPv4.gz > <http://www.ris.ripe.net/dumps/riswhoisdump.IPv4.gz> from > about a month ago. > > That dump lists all the IPv4 prefixes seen in the collective of latest > RIS table dumps, together with origin AS an

Re: De-bogonising 2a10::/12

utomagically updated as allocations are made. https://www.team-cymru.com/bogon-reference-bgp.html Be well, Rabbi Rob. -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: RIP: Bill Manning

ree, which it certainly did. I was honored to be on his >>> Ph.D. committee. I literally created a "trouble ticket" accounting >>> scheme to track change requests for his thesis. >>> >>> Bill was a valued member of the WIDE Project here in Japan. He wo

Re: Don Smith, RIP.

ablished plans for his memorial, they will be > posted here. > -------- > Roland Dobbins > > > -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: update - Re: Facebook post-mortems...

t; > > My bad - might be best to ignore the above post as it is a > unconfirmed/undated post-mortem that may reference a different event. If I'm reading the source correctly, the timestamp inside is for 09 SEP 2021 14:22:49 GMT (Unix time 1631197369). Then again, I may n

Re: Susan Harris

es/annarbor/name/susan-harris-obituary?id=33543415> > > John — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree.” - Leo McKern signature.asc Description: Message signed with OpenPGP

Re: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)

keting material suggests it can be > used for everything. > > > You can't have it both ways. Either you provide a list of prefixes to > be dropped on autonomous system borders *and make that clear* or you > provide a list of prefixes that can be dropped in all systems. > >

Re: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)

. These filters may be more applicable to some devices, such as gear that functions as a border router, than other devices. Be well, Rabbi Rob. — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Recommended DDoS mitigation appliance?

back to the list if there is interest. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/

Re: Recommended DDoS mitigation appliance?

responses are fine, and I'm happy to summarize back to the > list if there is interest. > > Thank you! Rob. > - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." -

Re: Recommended DDoS mitigation appliance?

correct. Be well, Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3SB

Re: Recommended DDoS mitigation appliance?

! Rob, the routing rabbi. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo McKern -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3TQCsACgkQ

Re: Recommended DDoS mitigation appliance?

ilter - https://www.andrisoft.com/software/wanguard - https://www.andrisoft.com/software/wanguard/ddos-mitigation-protecti on . A10 Thunder ADC - https://a10networks.optrics.com/products/application-delivery.aspx . FastNetMon - Free or inexpensive - https://fastnetmon.com/ Thank you! Rob,

Re: historical Bogon lists

's probably worth asking. I have found them to > be very responsive and quite helpful. Thank you for the kind words, Grant! Sadly, we don't keep an archive of prior bogon lists, so we can't help here. Sorry! Be well, Rob. - -- Rabbi Rob Thomas

Re: historical Bogon lists

automation around that info. (Not that I'm > hating on wget / curl ... :) ) We'd be happy to make that happen, if folks are keen. We're fine with Git, as we use it regularly. Be well! Rob. - -- Rabbi Rob Thomas Team Cymru "It is

Re: historical Bogon lists

have that in place after the new year. Will that work for folks, or would a git repository be useful in different ways? My thanks to Paul Hick, CAIDA, and Alessandro Improta for the assistance here! Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru &

Re: BCP38/84 and DDoS ACLs

mats and styles can be found here: <http://www.team-cymru.org/bogon-reference.html> Be well, Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we agree." - Leo M

Providers with RTBH capability?

teral/iosswrel/ps6537/ps6586/ps6642/prod_white_paper0900aecd80313fac.pdf [1] http://tools.ietf.org/html/rfc5635 Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ "Say little and do much." M Avot 1:15 -BEGIN PGP SIGNATURE- iQCVAwUBUVoFKlkX3QA

Brighthouse Networks security contact?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear team, I'm looking for a Brighthouse Networks security contact, please. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Re: Cymru Bogon AS path change

the first in your ASN to add your name to the contributor list. :) Again my apologies for any inconvenience or consternation this mishap has caused. Thanks, Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ "Does this augment or diminish human liberty?" - William F.

Re: Cymru Bogon AS path change

ed project and for your continued support. Sincerely, Team Cymru - --- snip snip --- We're a bit past our change window, and my apologies for that. We're almost at the finish line, however, so I'll beg your indulgences while we wind it up. Thank you as always for your patience

Re: Cymru Bogon AS path change

grated and happy. The change window is now closed. If anyone comes across anything that looks awry, please reach out to us at supp...@cymru.com and we will address it immediately. Thank you! Rob. - -- Rabbi Rob Thomas Team Cymru https://www.team-cymru.org/ "Does this augment or diminish hu

Re: october

Thank you for these remembrances, Randy. > There is a memorial fund for his ISOC Service Award, to which interested > people can contribute: > > https://www.internetsociety.org/grants-and-awards/itojun-service-award/ Thank you for that tip and link, Mel. — Rabb

Network security contact at Internet2?

Dear team, Does anyone have a network security contact at Internet2? If so, I’d appreciate an introduction, please! Thank you! Rabbi Rob. — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we

Re: ru tld down?

a report widespread access issues to [.] ru domains, including of Yandex, Megafon, and Sberbank: Local News Outlet via Forbes Russia. — Rabbi Rob Thomas Team Cymru "It is easy to believe in freedom of speech for those with whom we