June 2020 - NLNOG - mailman3.nlnog.net

weet iemand wie deze amateurs zijn?
by Sabri Berisha 01 Feb '21

01 Feb '21

Hi, Elke 30 seconden proberen ze het opnieuw: Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: filter: RCPT from unknown[185.103.159.70]: <vsaveliev(a)openprovider.ru>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10024; from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> Jan 1 07:50:14 mail postfix/smtpd[1243]: NOQUEUE: reject: RCPT from unknown[185.103.159.70]: 554 5.7.1 <null(a)null.nl>: from=<vsaveliev(a)openprovider.ru> to=<null(a)null.nl> proto=ESMTP helo=<mail-dev101-01.openprovider.nl> root@mail:/var/log# host 185.103.159.70 70.159.103.185.in-addr.arpa domain name pointer hosted.by.pcextreme. <--- lekker profi PTR. role: PCextreme - Global NOC address: PCextreme B.V. address: Gyroscoopweg 134 En was dat hele openprovider.nl niet van Beefje? Thanks, Sabri Jr Network Amateur

2 2

outdated transit-free AS list
by Van Steen, Steven 16 Jun '20

16 Jun '20

Hi, Was just looking at https://www.seattleix.net/rs-drops which is nice work but then saw that reference to http://bgpfilterguide.nlnog.net/guides/no_transit_leaks/ ... Any chance you could update the known transit-free networks; as that's more than just a little outdated. I mean you've got like 209, 702, 3549, 3561 and 4134 still in there and are actually missing 3491, 6830 and 12956. Thanks, Steven Van Steen Director Data Interconnect Operation & Integration T + 31 20 778 8537 Liberty Global B.V. Boeing Avenue 53 1119 PE Schiphol-Rijk The Netherlands

3 3

Re: [NLNOG] outdated transit-free AS list
by Erik Bais 16 Jun '20

16 Jun '20

Hi Steven, The BGPFilterguide has a Github setup for the site : https://github.com/nlnog/bgpfilterguide If you feel there is something that should be added, feel free to add the required information. Regards, Erik Bais From: NLNOG <nlnog-bounces(a)nlnog.net> on behalf of "nlnog(a)nlnog.net" <nlnog(a)nlnog.net> Reply-To: "Van Steen, Steven" <svansteen(a)libertyglobal.com> Date: Tuesday 16 June 2020 at 14:08 To: "info(a)seattleix.net" <info(a)seattleix.net>, "nlnog(a)nlnog.net" <nlnog(a)nlnog.net> Subject: [NLNOG] outdated transit-free AS list Hi, Was just looking at https://www.seattleix.net/rs-drops which is nice work but then saw that reference to http://bgpfilterguide.nlnog.net/guides/no_transit_leaks/ … Any chance you could update the known transit-free networks; as that’s more than just a little outdated. I mean you’ve got like 209, 702, 3549, 3561 and 4134 still in there and are actually missing 3491, 6830 and 12956. Thanks, Steven Van Steen Director Data Interconnect Operation & Integration T + 31 20 778 8537 Liberty Global B.V. Boeing Avenue 53 1119 PE Schiphol-Rijk The Netherlands

1 0

3x Dell M520 over
by Sander Steffann 15 Jun '20

15 Jun '20

Hi! Ik heb nog drie Dell M520 servers liggen: - Dual Xeon E5-2430L 2.0Ghz - Geen RAM (12 sloten) - iDRAC7 Enterprise met 8GB vFlash - Dual SD card reader met twee 2GB cards Service tags: HB36KY1, D546KY1, H936KY1 Ze zijn niet heel veel meer waard, maar als iemand een bod wil doen dan doneer ik de opbrengst aan de Global NOG Alliance (nogalliance.org) waar ik één van de oprichters van ben. Ik heb ook nog een M1000E/VRTX Blank blade filler liggen, gratis af te halen ;) Cheers! Sander

3 2

Spoofer Report for NLNOG for May 2020
by CAIDA Spoofer Project 08 Jun '20

08 Jun '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during May 2020: ASN Name Fixed-By 6830 LGI-UPC 2020-05-27 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2020: ASN Name First-Spoofed Last-Spoofed 44684 MYTHIC 2018-02-25 2020-05-15 8587 Infracom 2019-10-28 2020-05-27 209299 VITOX-TELECOM 2019-12-15 2020-05-16 208046 HostSlick-Germany 2020-05-13 2020-05-13 41436 CloudWebManage-EU 2020-05-22 2020-05-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0