November 2018 - NLNOG - mailman3.nlnog.net

weet iemand wie deze amateurs zijn?
by Sabri Berisha 01 Feb '21

01 Feb '21

Hi, Elke 30 seconden proberen ze het opnieuw: Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: filter: RCPT from unknown[185.103.159.70]: <vsaveliev(a)openprovider.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: reject: RCPT from unknown[185.103.159.70]: 554 5.7.1 <null(a)null.nl>: from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> root@mail:/var/log# host 185.103.159.70 70.159.103.185.in-addr.arpa domain name pointer hosted.by.pcextreme. <--- lekker profi PTR. role: PCextreme - Global NOC address: PCextreme B.V. address: Gyroscoopweg 134 En was dat hele openprovider.nl niet van Beefje? Thanks, Sabri Jr Network Amateur

2 2

Fwd: RIPE NCC's RPKI Planned Downtime
by Nathalie Trenaman 22 Nov '18

22 Nov '18

Hi all, Considering the high number of RPKI implementations in NL, this might be FYI: > Begin doorgestuurd bericht: > > Van: Thiago da Cruz <tdacruz(a)ripe.net> > Onderwerp: [Sidrops] RIPE NCC's RPKI Planned Downtime > Datum: 22 november 2018 om 10:34:32 CET > Aan: sidrops(a)ietf.org > > Hi all, > > We’ll be running an upgrade on our infrastructure on Monday 26 November from 08:00 UTC. > The RSYNC and RRDP repositories will be accessible, but the up down protocol, the RPKI user interface on my.ripe.net <http://my.ripe.net/>, and REST API will be unavailable during the upgrade. > > We expect the upgrade to take no longer than a few hours. Apologies for any inconvenience this may cause. > > https://www.ripe.net/support/service-announcements/rpki-planned-downtime <https://www.ripe.net/support/service-announcements/rpki-planned-downtime> > > Kind regards, > Thiago da Cruz - RIPE NCC > _______________________________________________ > Sidrops mailing list > Sidrops(a)ietf.org > https://www.ietf.org/mailman/listinfo/sidrops

1 0

Save the dates! NLNOG events in 2019
by Job Snijders 13 Nov '18

13 Nov '18

Dear all, The NLNOG Foundation has put together a fantastic set of events for 2019! Mark the following dates in your agendas: 18 Jan 2019 - NLNOG New Years Drink, Utrecht 21 Jun 2019 - NLNOG Expert Sessions & BBQ, Location TBD 6 Sep 2019 - NLNOG Day 2019, Amsterdam Kind regards, Job

1 0

Spoofer Report for NLNOG for Oct 2018
by CAIDA Spoofer Project 08 Nov '18

08 Nov '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Oct 2018: none inferred Source Address Validation issues inferred during Oct 2018: ASN Name First-Spoofed Last-Spoofed 44858 PROXSYS 2018-03-26 2018-10-23 28878 SIGNET 2018-06-27 2018-10-12 57494 ADMAN 2018-10-07 2018-10-07 201290 BlackGATE 2018-10-16 2018-10-16 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

The NL portion of RPKI unreachable IP space (2018-11-03)
by nusenu 03 Nov '18

03 Nov '18

As previously requested [1] I'm sending you the list of ASNs that announce RPKI unreachable IP space. ASN prefixes /24s -------------------------------------------------------------------------- 1 AS49981 WORLDSTREAM - WorldStream B.V. 3 4 2 AS60781 LeaseWeb Netherlands B.V. 3 3 3 AS49453 GLOBALLAYER - Global Layer B.V. 2 2 4 AS136175 SERVERHOSH-AS-AP Serverhosh 2 2 5 AS206376 INTELLECTICAINDIA 1 1 6 AS39855 MOD-EU - Mod Mission Critical LLC 1 1 7 AS43350 NFORCE - NForce Entertainment B.V. 1 1 8 AS60144 THREE-W-INFRA-AS - 3W Infra B.V. 1 1 9 AS64484 ASDMZHOST - JUPITER 25 LIMITED 1 1 You can get an interactive (and regularly updated) version of this list via the RPKI Observatory where you also get the complete list of affected prefixes for each ASN (so there should be no need to send it to this list anymore). https://nusenu.github.io/RPKI-Observatory/unreachable_nl-v4.html kind regards, nusenu [1] http://mailman.nlnog.net/pipermail/nlnog/2018-September/002783.html -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0