February 2020 - NLNOG - mailman3.nlnog.net

weet iemand wie deze amateurs zijn?
by Sabri Berisha 01 Feb '21

01 Feb '21

Hi, Elke 30 seconden proberen ze het opnieuw: Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: filter: RCPT from unknown[185.103.159.70]: <vsaveliev(a)openprovider.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: reject: RCPT from unknown[185.103.159.70]: 554 5.7.1 <null(a)null.nl>: from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> root@mail:/var/log# host 185.103.159.70 70.159.103.185.in-addr.arpa domain name pointer hosted.by.pcextreme. <--- lekker profi PTR. role: PCextreme - Global NOC address: PCextreme B.V. address: Gyroscoopweg 134 En was dat hele openprovider.nl niet van Beefje? Thanks, Sabri Jr Network Amateur

2 2

AS 2914 RPKI deployment
by Job Snijders 26 Mar '20

26 Mar '20

Hallo NLNOG, Nou, wij hebben eindelijk ook een datum! :-) Op 25 Maart gaat de RPKI boel aan bij NTT en zal AS 2914 invalids rejecten op alle EBGP sessies (customers, peers, de hele mikmak). Meer informatie is beschikbaar hier: https://www.us.ntt.net/support/policy/rr.cfm#RPKI Met vriendelijke groeten, Job

2 2

Open Source project announcement
by Renato Almeida de Oliveira 28 Feb '20

28 Feb '20

Hello folks, I would like to announce an Open Source project I’m working on it. It is an Ansible collection focused on network management and peering relations, in this release it is possible to gather your devices configuration and sync then with a repository manager like Gogs, and collect PeeringDB information’s like IRR-ASPATH, max IPv4/IPv6 prefixes, and with IRR-ASPATH use BGPq3/BGPq4 to generate the announced prefixes that with some Jinja templates it’s possible to automatically generate a multi-brand routing policies and configurations. In the next version of the Collection the configuration templates will be available for some vendors like MikroTik, Cisco, Juniper and others. The project ains to aid ISP and network operators to administrate their network, in the next release I'm going to bring concepts like model based configuration where the network, using YANG based models, writen in YAML, will describe their network and the built-in Ansible Roles will parse and deploy the configuration. Finnaly if there are any comments, suggestions or feature request please tell me The Collection use cases documentation link: https://netero.renatooliveira.eng.br/en/latest/examples.html Proof of concept: https://www.youtube.com/watch?v=41vViNm1yu4 Regards, -- Renato Almeida de Oliveira Engenheiro de Telecomunicações

1 0

Spoofer Report for NLNOG for Jan 2020
by CAIDA Spoofer Project 08 Feb '20

08 Feb '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Jan 2020: none inferred Source Address Validation issues inferred during Jan 2020: ASN Name First-Spoofed Last-Spoofed 8220 COLT 2016-11-10 2020-01-24 28685 ASN-ROUTIT 2017-03-26 2020-01-29 62240 Clouvider 2017-10-20 2020-01-30 1136 KPN 2019-09-04 2020-01-29 8587 Infracom 2019-10-28 2020-01-30 209299 VITOX-TELECOM 2019-12-15 2020-01-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0