- NLNOG - mailman3.nlnog.net

Spoofer Report for NLNOG for Apr 2023
by CAIDA Spoofer Project 08 May '23

08 May '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Apr 2023: ASN Name Fixed-By 14576 HOSTING-SOLUTIONS 2023-04-03 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2023: ASN Name First-Spoofed Last-Spoofed 20847 PREVIDER 2018-04-17 2023-04-26 1136 KPN 2019-09-04 2023-04-09 207176 OPENFIBER 2020-06-12 2023-04-28 213268 2020-12-07 2023-04-27 212411 2023-03-15 2023-04-26 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Nieuws van het NLNOG bestuur / News from the NLNOG Board
by Teun Vink 26 Apr '23

26 Apr '23

Hallo allemaal, hi everyone! (English text can be found below) Tijd voor een nieuws-update vanuit het NLNOG Bestuur, want we hebben je best wat dingen te melden: BYOC OP RIPE86 Eind mei wordt RIPE86 georganiseerd in Rotterdam, en natuurlijk kunnen wij zo’n evenement in ons eigen land niet ongemerkt voorbij laten gaan. Vier jaar geleden organiseerden we een “Cheese BoF”, en omdat dit zo’n enorm succes was willen dat dit jaar weer doen. En iedereen die RIPE86 bezoekt is van harte welkom om mee te doen. Het concept is simpel: BYOC, oftewel “Bring Your Own Cheese”. We hopen dat veel bezoekers wat kaas uit hun land/regio meenemen, om zo tot een heuse kaasproeverij te komen. Maar natuurlijk ben je ook welkom om wat andere snacks mee te brengen, en wijn, port of andere drank kan ook handig zijn. De details: Wanneer: dinsdag 23 mei, 17.30 - 18.30 uur Waar: de lunchruimte Aanmelden: niet nodig, maar je hebt wel een ticket voor RIPE86 nodig We hopen je daar te zien, en we hopen natuurlijk dat je een stukje heel bijzondere kaas meebrengt (maar ook zonder ben je welkom natuurlijk)! Deel deze uitnodiging vooral met collega’s en anderen die naar RIPE86 komen. SAVE THE DATE: NLNOG SUMMER EVENT Voordat de zomervakanties losbarsten gaan we natuurlijk nog een NLNOG zomer event organiseren. We zijn op dit moment nog druk bezig hier invulling aan te gaan geven, maar een datum en lokatie kunnen we al wel verklappen: vrijdag 30 juni zal het plaats gaan vinden in BIT-MeetMe in Ede. Dit event zal zowel leerzaam als smakelijk en gezellig gaan worden, dus blokkeer de middag (en avond) alvast in je agenda! NIEUW BESTUURSLID: CAS Zoals jullie ongetwijfeld op de laatste NLNOG Day gehoord hebben, is Thomas de Looff na vele jaren actief geweest te zijn binnen NLNOG als penningmeester, afgetreden. Gelukkig was Niels Bakker bereid om deze taak op zich te nemen, maar nog steeds hadden we één bestuurslid minder, en met al de plannen die we hebben was versterking dus meer dan welkom. Gelukkig hebben we die gevonden, en wel in de persoon van Cas de Reuver. We zijn blij dat hij vanaf nu deel is van ons bestuur, dus welkom Cas! Bedankt voor de jullie aandacht! We hopen jullie op RIPE86 of het zomer event te zien! Het NLNOG Bestuur Nathalie, Niels R, Niels B, Melchior, Cas en Teun (English text) Here’s an update from the NLNOG Board. As you can see, we have quite a few things to tell you: BYOC AT RIPE86 In May RIPE86 will be held in Rotterdam. And of course, NLNOG will be present there! Four years ago we organised a “Cheese BoF” and because that was so much fun we decided to do that again. So everyone visiting RIPE86 is welcome to participate. The concept is simple: BYOC, or “Bring Your Own Cheese”. We invite everyone visiting RIPE86 to bring some cheese from their home country/region, so we can do a proper cheese tasting! Of course, you can bring some other snacks, and bringing some wine, port or other drinks can be smart. The details: When: Tuesday, May 23rd, 17.30 - 18.30h Where: Lunchroom Registration: not needed, but you need a ticket to RIPE86 to participate We hope to see you there, hopefully with a special piece of a cheese (but you’re more than welcome without any as well)! Please share this invitation with coworkers and other people visiting RIPE86. SAVE THE DATE: NLNOG SUMMER EVENT Before summer holidays start we will organise another NLNOG summer event. The details on what we’ll be doing aren’t exactly clear yet at this point, but our plan is to make it an event at which you can both learn things and have fun! We do know the date and location: Friday, June 30th in BIT-MeetMe in Ede. Make sure to block this afternoon (and evening) in your calendar and we hope to see you there! NEW BOARD MEMBER: CAS As you may have heard at the last NLNOG Day, Thomas de Looff left the NLNOG board after being the treasurer for many years. Luckily, Niels Bakker was willing to take up this task, but since we had one board member less (and so many things we want to do), it was time to find a new board member. We’re happy to announce that Cas de Reuver is joining the NLNOG board, so please welcome Cas! Thank you for your attention. We hope to see you at RIPE86 or at our summer event! The NLNOG Board Nathalie, Niels R, Niels B, Melchior, Cas and Teun

1 0

Call for Presentations EPF 2023
by Petra Wensing 20 Apr '23

20 Apr '23

Dear all, This is a call for Presentations for the European Peering Forum 2023. AMS-IX, DE-CIX, LINX, NETNOD and guest IXP NIX.CZ, are happy to host the European Peering Forum (EPF) 2023 from Sunday the 10th to Wednesday 13th September 2023 in Prague, Czech Republic. The event will welcome peering managers and coordinators from networks connected to the host and guest Internet exchanges. Besides some interesting topical agenda, the three-day event accommodates room for attendees to meet on a one-to-one basis to discuss peering business opportunities. The programme committee will be looking for presentations related to peering and technical topics of interconnection. Your presentation could/should address: * Interconnection Automation * Regional Peering * Interconnection / Peering Internet Governance and Regulatory Topics * Economic and Product Trends * Peering / Interconnection strategies * Interesting findings about Peering / Interconnection * 400GE and beyond * Any other hot topic related to Interconnection / Peering Submissions =========== Presentations must be of a non-commercial nature. Product or marketing heavy talks are strongly discouraged. Submissions of presentations should be made to the programme committee <epf-pc(a)peering-forum.eu<mailto:epf-pc@peering-forum.eu>>. Please include: * Author's name and e-mail address * Presentation title * Abstract * Slides (if available) * Time requested (max. 30 minutes incl. Q&A) Deadlines ========= Please send in your presentation asap. We decide on a first come first serve basis. The latest date for submission is July 30th. More information about the event and other activities around EPF16 may be found at * https://peering-forum.eu/2023/ * https://www.facebook.com/groups/1486607564933665/ On behalf of EPF, Best regards, AMS-IX, DE-CIX, LINX and NETNOD

1 0

Spoofer Report for NLNOG for Mar 2023
by CAIDA Spoofer Project 08 Apr '23

08 Apr '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Mar 2023: ASN Name Fixed-By 14576 HOSTING-SOLUTIONS 2023-03-30 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Mar 2023: ASN Name First-Spoofed Last-Spoofed 20847 PREVIDER 2018-04-17 2023-03-29 1136 KPN 2019-09-04 2023-03-20 207176 OPENFIBER 2020-06-12 2023-03-31 213268 2020-12-07 2023-03-29 42093 INTERRACKS 2023-02-08 2023-03-15 203623 zerospace 2023-03-06 2023-03-21 212411 2023-03-15 2023-03-29 35224 PLINQ 2023-03-17 2023-03-17 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Spoofer Report for NLNOG for Feb 2023
by CAIDA Spoofer Project 08 Mar '23

08 Mar '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Feb 2023: ASN Name Fixed-By 213268 2023-02-03 42093 INTERRACKS 2023-02-06 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Feb 2023: ASN Name First-Spoofed Last-Spoofed 14576 HOSTING-SOLUTIONS 2016-11-20 2023-02-28 20847 PREVIDER 2018-04-17 2023-02-22 8587 Infracom 2019-10-28 2023-02-24 213268 2020-12-07 2023-02-22 207083 HostSlim-Global-Network 2023-02-03 2023-02-05 42093 INTERRACKS 2023-02-08 2023-02-22 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

DNS Hackathon in Rotterdam
by Moritz Muller 07 Mar '23

07 Mar '23

Hi all, I wanted to let you know that DNS-OARC, Netnod and RIPE NCC are organising a DNS Hackathon in Rotterdam, 20 - 21 May 2023 the weekend before RIPE 86. Participation is free of charge, and you can find more information here: https://www.netnod.se/join-the-dns-hackathon-2023 Cheers, Moritz

1 0

Google IPv6 stats for NL - sudden drop since March 2022 ?
by Boudewijn Visser (nlnog) 01 Feb '23

01 Feb '23

(In English for a possibly wider audience) Hi all, There is a remarkable drop in IPv6 usage from The Netherlands in the Google IPv6 statistics page . It currently lists a mere 11% adoption, down from nearly 40% . Looking at other IPv6 statistic pages (Facebook, Akamai, Apnic) shows the expected 30-40%. A page which seems to reflect the historical data from the Google statistics shows that this drop occurred via suddenly on March 25/26 2022 . In that day several other European countries showed glitches in the Google IPv6 stats, but recovered, and sometimes increased . An extremely small test ( one KPN and one Ziggo connection ) showed that those connections (still) accessed youtube over IPv6 . Does anyone have some information what changed ? Is the statistic out of order, perhaps not correctly mapping prefix or links to a country ? Or is there one or more significant NL ISPs that are no longer using IPv6 to access Google ? Given that other stats show the 'normal' V6 adoption in NL it does not appear that access ISPs totally disabled IPv6 . Links : https://www.google.com/intl/en/ipv6/statistics.html#tab=per-country-ipv6-ad… https://www.akamai.com/internet-station/cyber-attacks/state-of-the-internet… https://www.facebook.com/ipv6/?tab=ipv6_country (also a sharp drop (42 -> 34%) near 27/28 march 2022, but not as deep as google) Apnic : https://stats.labs.apnic.net/ipv6/NL Historical Google stats : https://www.aelius.com/njh/google-ipv6/nl.html https://www.aelius.com/njh/google-ipv6/fr.html https://www.aelius.com/njh/google-ipv6/be.html https://www.aelius.com/njh/google-ipv6/gb.html Boudewijn

1 0

NLNOG Looking Glass BGP sessions down
by Teun Vink 24 Jan '23

24 Jan '23

Hi all, I’ve written a few mails on this already but since we still have a lot of BGP sessions down on the NLNOG Looking Glass. This may have been caused by the IP renumbering of the NLNOG Looking Glass. As a reminder, the CORRECT addresses for the NLNOG looking glass are 212.114.120.72 and 2001:7b8:62b:1:0:d4ff:fe72:7848. We’re planning on removing all BGP sessions that have been down for longer than two months after 2023-02-01, but of course we’d prefer to fix the sessions so we can receive more BGP feeds. Here’s a list of BGP peers that have been down for over two months and which will be removed soon. If you see your ASN on the list, please check your configuration and fix it if possible, or reach out on #ring on IRCNet or ring-admins(a)nlnog.net and we can help you out to get it fixed. Neighbor AS MsgRcvd MsgSent OutQ Up/Down State/PrfRcvd AFILIAS_IAD1-v4 393246 0 54 0 Never Connect AFILIAS_IAD1-v6 393246 0 44 0 Never Active AFILIAS_MIA2-v4 33280 0 61 0 Never Connect AFILIAS_MIA2-v6 33280 0 60 0 Never Active AFILIAS_TKY1-v4 13901 0 51 0 Never Active AFILIAS_TKY1-v6 13901 0 52 0 Never Active AFILIAS_TKY2-v4 13901 0 42 0 Never Active AFILIAS_TKY2-v6 13901 0 58 0 Never Active AS207960NET1-v4 207960 0 41 0 Never Active AS207960NET1-v6 207960 0 38 0 Never Active BAKKERIT01-v4 44103 0 43744 0 Never Active BAKKERIT01-v6 44103 0 44270 0 Never Active CDW1-v4 3599 0 38 0 Never Connect CDW1-v6 3599 0 27 0 Never Active CHRONOS1-v4 202365 0 44083 0 Never Active CHRONOS1-v6 202365 0 44146 0 Never Active CUSTODIAN-v4 50300 0 27 0 Never Connect CUSTODIAN-v6 50300 0 30 0 Never Idle CYBERCOM1-v4 51164 0 31 0 Never Connect CYBERCOM1-v6 51164 0 31 0 Never Active CYBERCOM2-v4 51164 0 22 0 Never Connect CYBERCOM2-v6 51164 0 32 0 Never Connect DHIRAAGU01-v4 7642 0 25 0 Never Active DHIRAAGU01-v6 7642 0 32 0 Never Active DNA1-v4 16086 0 25 0 Never Idle DNA1-v6 16086 0 26 0 Never Connect EDSITECH-v4 202194 0 37 0 Never Connect EDSITECH-v6 202194 0 25 0 Never Idle ERICNET2-v6 206628 0 36 0 Never Active FORK1-v4 25682 0 15 0 Never Active FORK1-v6 25682 0 34 0 Never Active FREETRANSIT_WIN-v4 41051 0 44720 0 Never Active FREETRANSIT_WIN-v6 41051 0 44185 0 Never Active FREIFUNKFFM1-v4 64475 0 46369 0 Never Active FREIFUNKFFM1-v6 64475 0 46386 0 Never Active GO6LAB1-v4 198644 0 22 0 Never Active GO6LAB1-v6 198644 0 19 0 Never Connect HASTADKLEV1-v4 47753 0 34 0 Never Active HASTADKLEV1-v6 47753 0 35 0 Never Active HOSTWAY1-v4 14280 0 48005 0 Never Active HOSTWAY1-v6 14280 0 17 0 Never Active HOSTWAYDE1-v4 24679 0 36 0 Never Active HOSTWAYDE1-v6 24679 0 33 0 Never Active ICCN1-v4 40387 3030 3030 0 Never Idle ICCN1-v6 40387 2987 3596 0 Never Idle IFOG1-v4 34927 0 44305 0 Never Active IFOG1-v6 34927 0 44375 0 Never OpenSent IPB1-v4 20647 6060 6060 0 Never Idle IPB1-v6 20647 6060 6060 0 Never Idle IPFAIL_BUR-v4 62538 3011 6022 0 Never Idle IPFAIL_BUR-v6 62538 0 21 0 Never Active IPFAIL_SJC-v4 62538 0 21 0 Never Connect IPFAIL_SJC-v6 62538 0 11 0 Never Idle IPMAX2-v4 25091 0 15 0 Never Active IPMAX2-v6 25091 0 11 0 Never Active KALPAK1-v6 213326 0 19 0 Never Connect KANREN1-v4 2495 0 13 0 Never Active KANREN1-v6 2495 0 14 0 Never Connect LAYERBRIDGE01-v4 3280 0 44163 0 Never Active LAYERBRIDGE01-v6 3280 0 2753 0 Never Idle LEVEL66NETWORK1-v4 56381 0 12 0 Never Active LEVEL66NETWORK1-v6 56381 0 9 0 Never Active LONAP1-v4 8330 0 11 0 Never Active LONAP1-v6 8330 0 12 0 Never Active LONAP2-v4 8330 0 10 0 Never Active LONAP2-v6 8330 0 12 0 Never Active METAPEER1-v4 13331 0 7 0 Never Active MICHELLENET1-v4 208751 0 30 0 Never Active MICHELLENET1-v6 208751 0 6 0 Never Connect MNETWORKS1-v4 198611 0 6 0 Never Connect MNETWORKS1-v6 198611 0 8 0 Never Active MNETWORKS2-v4 198611 0 6 0 Never Connect MNETWORKS2-v6 198611 0 44 0 Never Active NATESALES1-v4 34553 0 44276 0 Never Idle NATESALES1-v6 34553 0 45055 0 Never Active NATOLAB_SEA-v4 46997 0 44055 0 Never Active NATOLAB_SEA-v6 46997 0 44669 0 Never Idle NESSUS1-v4 47692 0 12 0 Never Active NESSUS1-v6 47692 0 36 0 Never Active NETSIGN1-v4 31078 0 22 0 Never Active NETSIGN1-v6 31078 0 27 0 Never Active NONATTACHED1-v4 57821 0 32 0 Never Active NONATTACHED1-v6 57821 0 31 0 Never Active NULLROUTE1-v4 211722 0 43692 0 Never Active NULLROUTE1-v6 211722 0 31451 0 Never Active OPENBSD1-v4 22512 0 7 0 Never Active OPENBSD1-v6 22512 0 22 0 Never Active OPENFACTORY_R3COREIXN-v 58299 0 32 0 Never Active OPENFACTORY_R3COREIXN-v 58299 0 38 0 Never Active OVERTHEWIRE1-v4 9268 0 35 0 Never Active OVERTHEWIRE1-v6 9268 0 4 0 Never Active PBWCOMM01-v4 16409 0 11 0 Never Connect PBWCOMM01-v6 16409 0 7 0 Never Connect QUADRANET3-v4 8100 0 10 0 Never Connect QUADRANET3-v6 8100 6054 6108 0 Never Idle QUADRANET4-v4 8100 0 7 0 Never Idle QUADRANET4-v6 8100 6026 6260 0 Never Idle SERVERION1-v4 213035 0 5 0 Never Active SERVERION1-v6 213035 534 1161 0 Never Idle SERVERION2-v4 213035 0 4 0 Never Active SERVERION2-v6 213035 567 1212 0 Never Idle SKYLONHOST1-v4 202297 0 44152 0 Never Active SKYLONHOST1-v6 202297 0 43432 0 Never Active TIMICO1-v4 8607 0 35 0 Never Active TIMICO1-v6 8607 0 29 0 Never Active VMHAUS1-v4 136620 0 5 0 Never Connect VMHAUS1-v6 136620 0 5 0 Never Active WHITEHAT-v4 51999 0 4 0 Never Connect WHITEHAT-v6 51999 0 27 0 Never Active YOURORG1-v4 19255 0 7 0 Never Active firehose-BGPDOTTOOLS-v 212232 0 48385 0 Never Active firehose-BGPDOTTOOLS-v 212232 0 48390 0 Never Active SECUREBIT_FRE01-v4 58057 0 0 0 Never Active Information on BGP session states can also be found on https://lg.ring.nlnog.net/summary. More details on peering with the NLNOG Looking Glass can be found on https://lg.ring.nlnog.net/about. Of course, we still welcome new peers! Thanks and best regards, Teun

1 0

Happy new year! And a small reminder for the New Years Drinks
by Melchior Aelmans 11 Jan '23

11 Jan '23

Hi NLNOG! First of all, happy new year! We wish you and your family a safe, healthy, and prosperous new year! To celebrate 2023 the NLNOG New Years Drinks will take place again! When: Friday January 20, 2023 starting at 19.00h Where: De Rechtbank, Korte Nieuwstraat 14, 3512 NM Utrecht Registration: https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2023-484326632997 And the best thing: it's for free and you will meet all your favorite NLNOG friends again! We are very much looking forward to seeing you there. Don't forget to register. On behalf of the NLNOG Crew, Melchior

2 1

Spoofer Report for NLNOG for Dec 2022
by CAIDA Spoofer Project 08 Jan '23

08 Jan '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Dec 2022: none inferred Source Address Validation issues inferred during Dec 2022: ASN Name First-Spoofed Last-Spoofed 20847 PREVIDER 2018-04-17 2022-12-27 8587 Infracom 2019-10-28 2022-12-21 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0