May 2020 - NLNOG - mailman3.nlnog.net

weet iemand wie deze amateurs zijn?
by Sabri Berisha 01 Feb '21

01 Feb '21

Hi, Elke 30 seconden proberen ze het opnieuw: Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: filter: RCPT from unknown[185.103.159.70]: <vsaveliev(a)openprovider.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: reject: RCPT from unknown[185.103.159.70]: 554 5.7.1 <null(a)null.nl>: from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> root@mail:/var/log# host 185.103.159.70 70.159.103.185.in-addr.arpa domain name pointer hosted.by.pcextreme. <--- lekker profi PTR. role: PCextreme - Global NOC address: PCextreme B.V. address: Gyroscoopweg 134 En was dat hele openprovider.nl niet van Beefje? Thanks, Sabri Jr Network Amateur

2 2

Spoofer Report for NLNOG for Apr 2020
by CAIDA Spoofer Project 08 May '20

08 May '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Apr 2020: ASN Name Fixed-By 6830 LGI-UPC 2020-04-21 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2020: ASN Name First-Spoofed Last-Spoofed 9009 M247 2017-01-10 2020-04-02 48693 NTSERVICE 2020-04-05 2020-04-06 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Daily NLNOG Coffee Break 11am
by Melchior Aelmans 04 May '20

04 May '20

Dear all, Now that most of us are working from home, events are cancelled or postponed and so we have less social interaction as a community, we are organising a daily virtual Coffee Break. During the break we can have our daily moment at the coffee machine. When: daily @ 11am Where: https://nlnog-net.zoom.us/j/97671084794?pwd=cG11aTUxbkFmTmlYUUZ5cFFGaUxMUT09 More detail: https://nlnog.net/nlnog-coffee-break/ Looking forward to seeing you there. Cheers, Melchior

1 1