May 2019 - NLNOG - mailman3.nlnog.net

weet iemand wie deze amateurs zijn?
by Sabri Berisha 01 Feb '21

01 Feb '21

Hi, Elke 30 seconden proberen ze het opnieuw: Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: filter: RCPT from unknown[185.103.159.70]: <vsaveliev(a)openprovider.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: reject: RCPT from unknown[185.103.159.70]: 554 5.7.1 <null(a)null.nl>: from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> root@mail:/var/log# host 185.103.159.70 70.159.103.185.in-addr.arpa domain name pointer hosted.by.pcextreme. <--- lekker profi PTR. role: PCextreme - Global NOC address: PCextreme B.V. address: Gyroscoopweg 134 En was dat hele openprovider.nl niet van Beefje? Thanks, Sabri Jr Network Amateur

2 2

FW: [ncc-announce] [GM] RIPE NCC General Meeting: One Week to Register
by Erik Bais 22 May '19

22 May '19

Dear NLNOG community, ( Ik heb de complete email in the Engels gedaan, zodat ook de non-Dutchies op de lijst kunnen meelezen. ) As you might know, this week there is a RIPE meeting in Iceland and some of you may or may not know that as a member of RIPE, you are invited to vote on the General Meeting. You can register for remote voting if you are not present at the RIPE78 in person. And as with the EU voting, it is important that we as a Dutch community vote. Axel Pawlik (the CEO of RIPE NCC) send out the email below to the ncc-announce list. But you may not be on the mailing list... hence this reminder. There are a couple important topics where we like you to vote for.. ( https://www.ripe.net/participate/meetings/gm/meetings/may-2019/supporting-d… ) 1) voting schema .. 2) new Executive Board members 1) On the voting schema, the current Executive Board have provided a couple variations on the current ( 1 member, 1 fee ) model .. for 1400 euro p/year. For simplicity reasons, this is the easiest for the RIPE NCC, it removes all the difficult invoice creation (which might give additional operational cost.) as all LIR's / Members get charged the same amount. The other options are looking more into charging per resource objects.. like 50 euro per allocation (v4 and v6 ) & AS number(s) but not only for PI space, but also for PA space. So for LIR's that hold more than a single allocation, things will quickly be cheaper with the current (easier) charging schema.. ( Option A) Keeping things as they are : Vote for Option A. 2) There are 2 new seats available to vote for on the Executive Board of the RIPE NCC. Remco van Mook (CEO of Asteroid IXP) is re-running for the seat on the executive board.. And as a Dutch NLNOG, I think it is good to support him, for his great work already done in the past, specifically on the stability on the financial side of the RIPE NCC. And there are a number of other candidates that you can vote for. On the list is the co-Chair for the Database Working Group and Chair for the Accountability Task Force, William Sylvester. From all the candidates, I personally like to ask you to support Remco and William for the seats at the Exec. Board. I've known both for years and worked with them in the community and hope to do so in the future to help us all moving forward. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/candidate-bi… On how the voting system ... BigPulse system is used for voting .. and in order to give your top 2 candidates the best chance of winning, it is important to pick the other candidates as well. Because once the first candidate is selected, the system is going to look who is the next running, without the votes on the first round.. So in order to give your candidate the most voting chance .. make sure you select all 7 names. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/confirmed-ca… Currently only 69 LIR's have registered to vote for the GM at RIPE this week, we can do a lot better and your vote counts. Sorry for the long read ... And looking forward to your support on the GM voting. You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Regards, Erik Bais On 15/05/2019, 16:17, "ncc-announce on behalf of Axel Pawlik" <ncc-announce-bounces(a)ripe.net on behalf of agm(a)ripe.net> wrote: Dear RIPE NCC members, There is one week left to register for the RIPE NCC General Meeting (GM), which takes place from Wednesday, 22 May 2019 at 18:00 UTC. *Online registration for the GM closes at 16:00 UTC on Wednesday, 22 May 2019.* You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Over 1,400 members have registered to vote, and we hope to see this number increase before the GM opens. Members who register for the GM will receive links to participate and vote remotely on 22 May. At this GM, you can vote on five resolutions: - The General Meeting adopts the RIPE NCC Financial Report 2018. - The General Meeting discharges the Executive Board with regard to its actions as they appear from the Annual Report 2018 and Financial Report 2018. - The General Meeting approves the adoption of the RIPE NCC Charging Scheme 2020 option that received the absolute majority of the votes cast. - The General Meeting approves the amendments to the RIPE NCC Articles of Association. - The General Meeting approves the amendments to the RIPE NCC Standard Service Agreement. You can also vote in the Executive Board election to fill two seats. There are seven confirmed candidates in the running, and their biographies and motivation statements are available at: https://www.ripe.net/gm/may-2019/candidate-biographies All information on the GM, including links to the supporting documents, can be found on the GM homepage: https://www.ripe.net/gm/may-2019 We look forward to your participation in this important meeting for the RIPE NCC and its members. Kind regards, Axel Pawlik Managing Director RIPE NCC

3 2

Fwd: [ncc-announce] [GM] LIR Portal Issue Resolved
by Erik Bais 22 May '19

22 May '19

Mocht je een melding hebben gekregen dat je je niet meer kon registreren via de LIR Portal voor de GM .. De registratie is weer open .. Mvg, Erik Bais Verstuurd vanaf mijn iPhone Begin doorgestuurd bericht: Van: Axel Pawlik <agm(a)ripe.net<mailto:agm@ripe.net>> Datum: 22 mei 2019 om 16:38:41 GMT Aan: <ncc-announce(a)ripe.net<mailto:ncc-announce@ripe.net>> Onderwerp: [ncc-announce] [GM] LIR Portal Issue Resolved Antwoord aan: <agm(a)ripe.net<mailto:agm@ripe.net>> Dear members, The issue with the LIR Portal has now been fixed. You can register for the GM (as normal) here: https://www.ripe.net/s/gm-registration-may-2019 As stated in our previous email, registration will remain open until 18:00 (UTC). If you experience any issues, you can still register by emailing <agm(a)ripe.net<mailto:agm@ripe.net>> with your full contact name and RegID. We apologise for the inconvenience. Regards Axel Pawlik Managing Director RIPE NCC

1 0

Re: [NLNOG] AS3265 (XS4ALL) dropping invalid prefixes
by Tim Reinders 22 May '19

22 May '19

Hello Stavros, Yes, we use RTR as described in the Juniper documentation. No, we might want to publish a list of dropped prefixes, where clueful customers can check if the unreachability is a result of dropping that invalid prefix. Regards, Tim Reinders XS4ALL > On 21 May 2019, at 16:55, Stavros Konstantaras <stavros.konstantaras(a)ams-ix.net> wrote: > > Hi Tim, > > Well done for the good work and nice to see you using routinator for this job. I have two questions though: > > - Shall I assume that you use the RTR protocol between your MX routers and routinator? > - (Speaking as an XS4All customer) will you notify your customers for the invalid/dropped prefixes > when you apply the policy to customer connections? > > > Best regards, > > Stavros Konstantaras | NOC Engineer | AMS-IX > M +31 (0) 620 89 51 04 | T +31 20 305 8999 > ams-ix.net > > >> On 21 May 2019, at 13:08, Tim Reinders <timr(a)xs4all.net> wrote: >> >> Hello all, >> >> AS3265 is now dropping all RPKI invalid prefixes received from (transit) peers. >> >> We run two geographically spread instances of Routinator. >> Our peering-edge consists of two MX960 routers running "JUNOS 17.4R2-S3.2” >> >> As of yet no real (customer) impact, this is reflected in the volume of traffic in >> netflow data containing RPKI invalid prefixes (pre/post reject) >> >> Remaining work is rejecting invalids on customer BGP sessions (handful) and writing >> meaningful alerts for our monitoring-stack (prometheus/alertmanager) >> >> Regards, >> Tim Reinders >> XS4ALL >> timr on #nlnog >> _______________________________________________ >> NLNOG mailing list >> NLNOG(a)nlnog.net >> http://mailman.nlnog.net/listinfo/nlnog >

1 0

AS3265 (XS4ALL) dropping invalid prefixes
by Tim Reinders 22 May '19

22 May '19

Hello all, AS3265 is now dropping all RPKI invalid prefixes received from (transit) peers. We run two geographically spread instances of Routinator. Our peering-edge consists of two MX960 routers running "JUNOS 17.4R2-S3.2” As of yet no real (customer) impact, this is reflected in the volume of traffic in netflow data containing RPKI invalid prefixes (pre/post reject) Remaining work is rejecting invalids on customer BGP sessions (handful) and writing meaningful alerts for our monitoring-stack (prometheus/alertmanager) Regards, Tim Reinders XS4ALL timr on #nlnog

3 3

Invitation: NLNOG Expert Sessions & BBQ on Friday the 21st of June 2019
by Nathalie Trenaman 16 May '19

16 May '19

Dear all, We are proud to present the NLNOG Expert Sessions & BBQ on Friday the 21st of June 2019! Is your organisation struggling with automation? Are you debugging a funky DNS problem? Need help with your BGP config? Completely lost in telemetry? NLNOG brings you the experts! All you have to do is give us an abstract of the problem you want to solve and we will try to match you with an expert. You will get 50 minutes of consultation, for free! Each expert will only do 5 consultations, so please be as prepared and descriptive as possible when you sign up! Our experts are: -Erik Bais - IPv4 market and RIPE policies/procedures -Ariën Vijn - Optical systems, Physics, Connectors, Fiber -Paolo Lucente - Telemetry -Arjen Zonneveld - Systen Automation/Puppet -Peter van Dijk - DNS/DNSSEC -Arjan Koopen - WiFi, Portable networks -Job Snijders - BGP At 18:00 we fire up the BBQ and have drinks in the garden of Juniper Networks. You can sign up here: https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606… <https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606…> (For the Expert Sessions and/or the BBQ) We follow a "pay what you want"-model. Your line manager doesn't trust free events or you simply want to support NLNOG? No problem! just get one of the donation tickets. :) ATTENTION: we have a limited amount of space, be sure to reserve your seat in time! :) Also: We will not provide entertainment apart from the expert sessions in the afternoon. If your session is scheduled at 13:00, and you want to stay for the BBQ, please feel free to bring your laptop to do some work, or hang out at the coffee bar. Public Transport: Take bus 180, 181 or 287 from Schiphol Airport/Plaza and take off at Schiphol - Rijk, Boeing Avenue Buses run approximately every 10 minutes Parking: Free Parking is available on site Shout out to the NLNOG sponsors: Juniper Networks - RIPE NCC - PowerDNS - PCextreme - KPN BV - Asteroid - Alturna - Cybersprint - NTT Communications - Solid Optics - AMS-IX - Duocast - NL-IX - Triple - i3D.net - Netflix - Prefix Broker - LONAP - Arista - SpeedIX We can’t wait to see you on Friday the 21st of June! Niels, Melchior, Job, Thomas, Nathalie

4 4

Spoofer Report for NLNOG for Apr 2019
by CAIDA Spoofer Project 08 May '19

08 May '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Apr 2019: none inferred Source Address Validation issues inferred during Apr 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-04-12 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0