- NLNOG - mailman3.nlnog.net

Reminder: NLNOG New Years Drinks
by Nathalie Trenaman 09 Jan '20

09 Jan '20

Hi NLNOG people! We’re just one week and one day away from our legendary New Years Drinks! So far, 135 colleagues have signed up and extra bitterballen have been ordered ;) But there is still space for more of you. If you haven’t done so yet, please sign up here: https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2020-85230323191 <https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2020-85230323191> But if you registered, and you already know you can’t join us, please cancel your ticket in Eventbrite or let us know. Last year, the most ordered drink was…..coffee :D So we made sure there will be enough coffee :-) (and other drinks of course) You’re welcome from 19:00 at http://www.mammoni.nl/ <http://www.mammoni.nl/> Mariaplaats 14. We won’t serve dinner, so you might want to grab some food before you come. There is no restaurant in our venue. Looking forward to see you all next week! The NLNOG Crew Melchior, Niels, Job, Thomas and Nathalie

1 0

Spoofer Report for NLNOG for Dec 2019
by CAIDA Spoofer Project 08 Jan '20

08 Jan '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Dec 2019: ASN Name Fixed-By 6830 LGI-UPC 2019-12-30 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-12-19 8587 Infracom 2019-10-28 2019-12-24 39647 REDHOSTING 2019-12-02 2019-12-03 209299 VITOX-TELECOM 2019-12-15 2019-12-15 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [nog-org] Fwd: [routing-wg] De-bogonising 2a10::/12
by Chriztoffer Hansen 08 Jan '20

08 Jan '20

Now forwarded. > https://www.ripe.net/participate/mail/forum/routing-wg/PDM2OTU0RkJFLUU0OEUt… ---------- Forwarded message --------- From: Nikolas Pediaditis <npediaditi(a)ripe.net> Date: Wed, 8 Jan 2020 at 14:28 Subject: [nog-org] Fwd: [routing-wg] De-bogonising 2a10::/12 To: <nog-org(a)ripe.net> Dear colleagues, Earlier today we sent the bellow announcement to several mailing lists. Could you please pass it on to your respective NOG’s mailing lists as well? Thank you in advance! Best regards, Nikolas Pediaditis RIPE NCC Begin forwarded message: From: Nikolas Pediaditis <npediaditi(a)ripe.net> Subject: [routing-wg] De-bogonising 2a10::/12 Date: 8 January 2020 at 12:17:43 CET To: routing-wg(a)ripe.net, Menog(a)menog.net, afnog(a)afnog.org, nanog(a)nanog.org, lacnog(a)lacnic.net, discuss(a)enog.org, sanog-request(a)sanog.org Dear colleagues, A few months ago the RIPE NCC became the first RIR to receive an additional /12 IPv6 allocation (2a10::/12) from IANA. We will soon begin to delegate space from this IPv6 block to LIRs. Prior to this, in order to improve routability and minimise the risk of filtering, the RIPE NCC will perform several de-bogonising activities in the next few weeks. We plan to start announcing the full /12, as well as a few /32 or longer blocks out of 2a10::/12 from AS12654 (RIPE Routing Information System (RIS)), within the next few days. We will analyse data from RIS and RIPE Atlas and we plan to write up an analysis around this effort. We want to remind everybody to update their bogon filters and allow routes originating from 2a10::/12 in their network. Kind regards, Nikolas Pediaditis Registration Services and Policy Development Manager RIPE NCC _______________________________________________ nog-org mailing list nog-org(a)ripe.net https://lists.ripe.net/mailman/listinfo/nog-org

1 0

Re: [NLNOG] Fwd: [arin-ppml] DoD to sell 13 x /8 of its IPv4 Blocks over the next 10 years
by michael＠masterwayz.nl 20 Dec '19

20 Dec '19

Hi, Mijn eerste post hier in the mailing list, dus als ik iets verkeerd doe dan hoor ik het graag. Zelf denk ik niet dat DoD uit hun zelf 13 /8s gaan verkopen, anders hadden ze dat uit hun zelf al wel gedaan. Nu vraag ik mij wel af wat hun met zo veel /8s moeten. Volgens mij worden sommige /8s niet eens gebruikt, zonde van de addressen eigenlijk. Wel bedankt voor het laten weten! Michael -----Original Message----- From: NLNOG <nlnog-bounces(a)nlnog.net> On Behalf Of Sabri Berisha Sent: Thursday, 19 December 2019 23:07 To: Job Snijders <job(a)ntt.net> Cc: nlnog <nlnog(a)nlnog.net> Subject: Re: [NLNOG] Fwd: [arin-ppml] DoD to sell 13 x /8 of its IPv4 Blocks over the next 10 years Hi, Dat niet in de wet staat dat het moet zegt niet dat de DoD het niet mag doen. Zie 32CFR 273.7: https://www.law.cornell.edu/cfr/text/32/273.7 De vraag is of ze het willen zonder dat ze gedwongen worden. Ik denk dat het logisch is; met de huidige druk om ipv6 uit te rollen denk ik dat de prijs voor v4 heel hard richting de top gaat, en vervolgens vanaf een cliff rolt en niks meer waard gaat zijn. Thanks, Sabri ----- On Dec 19, 2019, at 6:17 AM, Job Snijders job(a)ntt.net wrote: > Oh, het is weer van de baan.. > > ---------------------------------------------------------------------- > ---------- > > Date: Thu, 19 Dec 2019 15:05:34 +0100 > From: Bill Woodcock <woody(a)pch.net> > To: hostmaster(a)uneedus.com > Cc: "arin-ppml(a)arin.net" <arin-ppml(a)arin.net> > Subject: Re: [arin-ppml] DoD to sell 13 x /8 of its IPv4 Blocks over the next > 10 years and need for ARIN-2019-19 > > Apparently it was in the House Bill, but was removed in the Senate > version, and didn’t make it through conference. > > -Bill > _______________________________________________ > NLNOG mailing list > NLNOG(a)nlnog.net > http://mailman.nlnog.net/listinfo/nlnog _______________________________________________ NLNOG mailing list NLNOG(a)nlnog.net http://mailman.nlnog.net/listinfo/nlnog

3 2

Fwd: [arin-ppml] DoD to sell 13 x /8 of its IPv4 Blocks over the next 10 years
by Job Snijders 19 Dec '19

19 Dec '19

FYI ---------- Forwarded message --------- From: Fernando Frediani <fhfrediani(a)gmail.com> Date: Thu, Dec 19, 2019 at 12:32 Subject: [arin-ppml] DoD to sell 13 x /8 of its IPv4 Blocks over the next 10 years To: arin-ppml(a)arin.net <arin-ppml(a)arin.net> I believe these are relevant news to this list https://www.congress.gov/bill/116th-congress/senate-bill/1790/text#toc-H373… "IPv6 strategy made it into NDAA 2020, requiring DOD to sell 13 x /8s (1) IN GENERAL.—Not later than 10 years after the date of the enactment of this Act, the Secretary of Defense shall sell all of the IPv4 addresses described in subsection (b) at fair market value." Finally is happening. I imagined that one day they would return something, but decided to sell. However, looking at the good side, this makes all this wasted space to become utilized. A few questions that arise are: how will this selling process happen, if directly, through brokers, if there will be any mechanism to distribute this selling among each one of all 5 RIRs or if it will be opened in the model "first come, first served" And before something says, I don't believe this will make any big difference to IPv6 implementation to advance or delay it significantly. Even talking about more than 200 million IPv4 addresses, I don't think this will change much this scenario if they are put directly at end users disposition. Finally, an important detail to highlight in the report is: "(D) *The plan of the Secretary to transition all Department addresses to IPv6.*" Let's see who will be the big buyers and how will this affect the IPv4 value for the next years. Regards Fernando Frediani _______________________________________________ ARIN-PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML(a)arin.net) Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-ppml Please contact info(a)arin.net if you experience any issues.

5 5

Update: NLNOG New Years Drink
by Nathalie Trenaman 15 Dec '19

15 Dec '19

Hi all, We’re very pleased to let you know we’ve found a new place for our borrel on Friday the 17th of January. We’ll gather at Mammoni, Mariaplaats 14 in Utrecht. (It’s 2 doors next to Stairways where we had our drinks for a few years). Unfortunately, this venue is not wheelchair friendly. The borrel location actually is, but the toilets are a small stairs of 6 steps down. So far, already 90 (!) NLNOGers signed up, but we have space for more of you, so sign up and bring your colleagues! Just so you know, Eventbrite updated their policies so we can’t show on the page who signed up any more :( If you have a good idea how we can still do that, let us know. For now, enjoy your network freeze and holiday time or good luck with your 24/7 stand-by duties and we’ll see you on the 17th of January. The NLNOG Crew, Job, Melchior, Niels, Thomas and Nathalie

1 0

[projectsfund@ripe.net: [ncc-announce] [news] RIPE NCC Community Projects Fund 2019 Recipients Announced]
by Job Snijders 10 Dec '19

10 Dec '19

Hoera! TL;DR Stichting NLNOG heeft een toezegging voor funding gekregen om IRRExplorer (http://irrexplorer.nlnog.net) verder te ontwikkelen! Het doel van IRR Explorer is om inzichtelijker te maken voor mensen welke IRR/RPKI registraties voor een gegeven Number Resource bestaan, en advies te bieden ala "wat in IRR staat conflicteert met wat we in BGP zien", of "wist je dat er legacy route objects bestaan in andere IRRs dan je misschien zou verwachten?". Toendertijd koos er voor ik de service beschikbaar te maken onder het NLNOG 'merk', zodat niet alleen NTT, maar ook concurrenten van NTT zich vrij zouden voelen de referenties naar de tool te integreren in hun support process. Ik zag niet voor me dat concurrenten naar NTT URLs zouden willen linken. :-) Ik heb de eerste versie van IRR Explorer zelf geschreven, het was af 5 minuten voor mn presentatie bij RIPE 70 af - en 5 minuten na het noemen van de URL in RIPE 70 presentatie ook meteen down vanwege een mini-slashddot effect op de web server. ;-) Sinsdien hebben meerdere mensen een poging gedaan mijn rommelige code naar een hoger niveau te brengen, maar dat is geen makkelijke taak... Deze funding staat ons toe om een goede programmeur in te huren de code voor eens en altijd recht te zetten, en de user interface een stuk makkelijker in gebruik te maken. Ik ben hier erg blij mee! Stay tuned..... voor irrexplorer v2! Met vriendelijke groeten, Job ----- Forwarded message from Alastair Strachan <projectsfund(a)ripe.net> ----- Date: Tue, 10 Dec 2019 16:13:13 +0100 From: Alastair Strachan <projectsfund(a)ripe.net> To: ncc-announce(a)ripe.net Subject: [ncc-announce] [news] RIPE NCC Community Projects Fund 2019 Recipients Announced Dear colleagues, The RIPE NCC Community Projects Fund opened its call for applications in July 2019. The application period was open for 8 weeks and we received more than 45 applications from 23 different countries. We’d like to thank all the applicants - the number and diversity of topics show that there are many great ideas that need support. The RIPE NCC Community Projects Fund Selection Committee has reviewed the applications and is happy to announce that the following seven projects have been selected as the 2019 recipients of the RIPE NCC Community Projects Fund. Congratulations to the selected projects! - Antikraak: Protecting non-routed and transferred address space against spear-hijacking, SimulaMet - ASNR: ASN Ranking system - A path to detect fake ASNs, Alireza Vaziri - Cryptofuzz, Guido Vranken - Improving the Tor network’s IPv6 support, The Tor Project - IRRexplorer v2, NLNOG Foundation - RPKI Ecosystem Health Monitoring, NLNet Labs - Verification and monitoring of BGP prefix hijacking incidents using RIPE Atlas probes in the ARTEMIS open source detection tool, Institute of Computer Science (ICS), Foundation for Research and Technology - Hellas (FORTH) You can read more about how these projects will contribute to the ‘Good of the Internet’at: https://www.ripe.net/support/cpf/funding-recipients-2019 Kind regards, Alastair Strachan RIPE NCC Community Projects Fund Coordinator ----- End forwarded message -----

1 0

Spoofer Report for NLNOG for Nov 2019
by CAIDA Spoofer Project 08 Dec '19

08 Dec '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Nov 2019: none inferred Source Address Validation issues inferred during Nov 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-11-25 1136 KPN 2019-09-04 2019-11-15 8587 Infracom 2019-10-28 2019-11-27 12731 IPHH 2019-11-10 2019-11-12 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NLNOG New Years Drink 2020
by Nathalie Trenaman 06 Dec '19

06 Dec '19

Hi NLNOG! No better time to announce drinks than on a grey Friday afternoon! :-) As every year, we are organising the traditional NLNOG New Years Drink in Utrecht. A great way to start the new year with friends, colleagues and competitors. When? Friday 17 January 19:00 - 23:30 Where? We don’t know yet, we’re finalising the details but we will keep you posted! It will be in down town Utrecht for sure. What? Drinks, bitterballen and a toast. No presentations! It’s free, it’s fun and all we ask from you is to register here: https://nlnognewyear2020.eventbrite.nl <https://nlnognewyear2020.eventbrite.nl/> We wish you a wonderful and festive holiday season and look forward to see you on the 17th of January! The NLNOG Crew, Thomas, Niels, Job, Melchior and Nathalie

1 0

Spoofer Report for NLNOG for Oct 2019
by CAIDA Spoofer Project 08 Nov '19

08 Nov '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Oct 2019: ASN Name Fixed-By 174 COGENT-174 2019-10-07 209280 SmartHosten 2019-10-12 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2019: ASN Name First-Spoofed Last-Spoofed 6830 LGI-UPC 2016-04-01 2019-10-21 28685 ASN-ROUTIT 2017-03-26 2019-10-17 28878 SIGNET 2018-06-27 2019-10-30 1136 KPN 2019-09-04 2019-10-03 50673 Serverius-as 2019-10-09 2019-10-20 202120 COMSAVE 2019-10-14 2019-10-14 8587 Infracom 2019-10-28 2019-10-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0