- NLNOG - mailman3.nlnog.net

Spoofer Report for NLNOG for Jul 2019
by CAIDA Spoofer Project 08 Aug '19

08 Aug '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Jul 2019: none inferred Source Address Validation issues inferred during Jul 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-07-17 47886 EQUINIX-NL-ASN 2018-08-09 2019-07-09 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

[Misc] Research project on blacklists
by Anushah Hossain 17 Jul '19

17 Jul '19

Hi everyone, I'm a researcher at UC Berkeley and the International Computer Science Institute. My colleagues and I are working on evaluating and improving the accuracy of blacklists. As part of this work, we'd like to hear from you about the blacklists you currently use, what you perceive as their strengths and weaknesses, and any thoughts you have on how they might be improved. We've prepared an anonymous survey where you can share your views: https://berkeley.qualtrics.com/jfe/form/SV_200mg5hnQiAOgUl If you have five to ten minutes free today to fill it out, I would greatly appreciate your help! Thank you, and please don't hesitate to respond to me with comments or questions. (Apologies if you receive this message twice - trying to minimize cross-posting while still reaching a broad audience) Best, Anushah -- Anushah Hossain, PhD Student Energy and Resources Group, UC Berkeley

1 0

Invitation: NLNOGday 2019 6 September 2019
by Nathalie Trenaman 16 Jul '19

16 Jul '19

Hi all, Friday September 6, 2019 the annual NLNOGday will take place! The one and only technical event for network operators, engineers and sysadmins. It will be a day full of inspiring, provocative, fun and educational lectures and discussion. To get an idea of the program see here what we did last year: https://nlnog.net/nlnog-day-2018/ <https://nlnog.net/nlnog-day-2018/> We will close the day traditionally with the "NLNOG Quiz", with crazy cool prizes, including (YES! AGAIN!) an IPv4 /24!!! The day starts at 09:00 in Amsterdam - coffee/thee, lunch, dinner, wifi and drinks are all part of the deal. There is limited space so make sure you get your ticket in time! Register via https://nlnog-day-2019.eventbrite.nl <https://nlnog-day-2019.eventbrite.nl/> (we're using the pay what you want model!). More information, like the location and the agenda will be published on https://nlnog.net/nlnog-day-2019/ <https://nlnog.net/nlnog-day-2019/> The day will be streamed and recorded again thanks to our friends at Triple. Call for speakers ----------------- Are you working on interesting projects? Did you save the world enabling RPKI? Are you handling crazy security incidents? Did you change roles/careers? Are you ready to expose the next big thing? Please take this opportunity to share your knowledge with friends. Presentations (including some Q&A) take between 15 and 30 minutes. The slides & presentation should be in English. Submit your proposal to events(a)nlnog.net <mailto:events@nlnog.net>. The organisation will assess every proposal on its merit and x-factor. Kind regards, Job, Nathalie, Niels, Melchior, Thomas NLNOG Foundation

1 0

Call for Presentations RIPE 79
by Jelte Jansen 15 Jul '19

15 Jul '19

Dear colleagues, Please find the CFP for RIPE 79 below or at: https://ripe79.ripe.net/submit-topic/cfp/. The deadline for submissions is *16 August 2019*. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. However, on an individual basis, participants can apply for a RIPE Fellowship or RACI, see the "Speakers" paragraph in CFP for more information. Kind regards, Jelte Jansen RIPE PC Member https://ripe79.ripe.net/ripe-pc/ ----------------------------------------------------------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. *RIPE 79 will take place from 14-18 October in Rotterdam, The Netherlands* The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 79. See the full descriptions of the different presentation formats: https://ripe79.ripe.net/submit-topic/presentation-formats/ Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than *16 August 2019*. Proposals submitted after this date will be considered depending on the slots still available in the programme. The PC is looking for presentations covering the topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange - Connected Things (aka. Internet of Things - IoT) ---- Speakers ---- Presenters, RIPE Working Group Chairs and the RIPE Programme Committee are required to cover their own costs to attend a RIPE Meeting (meeting ticket, travel and accommodation). We have various ticket options available depending on your needs. Please note that participants can apply for a RIPE Fellowship or RACI, on an individual basis, to develop their professional or academic career. For more information, please visit: https://www.ripe.net/participate/ripe/ripe-fellowship https://www.ripe.net/participate/ripe/raci In extraordinary circumstances, the RIPE Chair can waive the meeting fee for presenters. These requests are dealt with on a case-by-case basis via pc(a)ripe.net. ---- Submissions ---- Presenters should be clear on whether they wish to submit a presentation for a plenary or working group (WG) session. At present, most working groups will solicit policy proposals, discussion points or other content directly via their mailing lists. If you’re not sure what kind of session you should be presenting at, please visit: https://ripe79.ripe.net/plenary-or-wg/ RIPE Meeting attendees are quite sensitive to keeping presentations non- commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and should not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour (during evening sessions) - Lightning talks: 10 minutes in total for both the presentation and any discussion The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe79.ripe.net/submit-topic/ - Lightning talks should also be submitted using the meeting submission system (https://ripe79.ripe.net/submit-topic/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice, in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. ---- Diversity and Inclusion - On-Site Childcare and the RIPE Meeting Code of Conduct ---- Did you know that RIPE Meetings now have on-site childcare? You can reserve a spot for your child (age 6 months - 10 years) during the registration process for the meeting. Childcare places are limited, so please be quick to reserve a spot for your child while registering for the meeting. More information at: https://ripe79.ripe.net/on-site/on-site-childcare/ Ensuring that RIPE Meeting values are upheld and that attendees experience a professional, respectful and safe meeting is a priority. Please do read the RIPE Meeting Code of Conduct: https://www.ripe.net/participate/meetings/ripe-meetings/ripe-meeting-code-o… ---- If you have any questions or requests concerning content submissions, please email pc(a)ripe.net.

1 0

Spoofer Report for NLNOG for Jun 2019
by CAIDA Spoofer Project 08 Jul '19

08 Jul '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Jun 2019: none inferred Source Address Validation issues inferred during Jun 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-06-25 16243 VIRTU 2018-08-09 2019-06-19 47886 EQUINIX-NL-ASN 2018-08-09 2019-06-27 8737 PT 2019-01-16 2019-06-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

bgp filter guide bogon prefixes 192.88.99.0/24
by Lannert, Julian 25 Jun '19

25 Jun '19

Hi All, First I wanted to thank you for the great bgp filter guide you provide. It is awesome to see crucial information collected and published openly for everyone. I am in the process of implementing more and better filters and while looking over the bogon prefixes v4 I stumbled upon the prefix 192.88.99.0/24 . You cite rfc7562 as a reference for adding this prefix to the bogon list and therefore not accepting this prefix but as far as I can see this the rfc clearly states "Networks SHOULD NOT filter out packets whose source address is 192.88.99.1" . If I do not accept a route to 192.88.99.0/24 I effectively blackhole that network to my customers and block returning packets to 192.88.99.1 from my and my customers networks. I checked other bogon lists that I could find, like team-cymru or kees (https://github.com/coloclue/kees/blob/e353ca9a06bca19147dcc6f607290cfd59303…) who do not include 192.88.99.0/24 in their bogon prefix list. Can you tell me the reasoning behind the decision to include this prefix in your bogon list? Best Regards Julian Julian Lannert Network Engineer e-shelter services GmbH Eschborner Landstraße 100 60489 Frankfurt am Main T: +49 69 7801-2422 F: +49 69 7801-2139 julian.lannert(a)e-shelter.com www.e-shelter.com Geschäftsführer: Ingmar Dilßner Volker Ludwig Rupprecht Rittweger Florian Winkler Sitz der Gesellschaft: Hattersheim am Main Amtsgericht Frankfurt am Main HRB 77478 Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

3 3

NLNOG Expert session & BBQ SOLD OUT!
by Nathalie Trenaman 18 Jun '19

18 Jun '19

Hi all, The weather forecast looks bright & sunny, the experts are booked and the BBQ reached max capacity with 50 people! We’re all looking forward to see you, but in the case you already know you can’t make it, please let us know or cancel your ticket. This way, we can allow people who are late to sign up still to join :) Thanks, Nathalie Trenaman NLNOG Crew

1 0

Reminder: NLNOG Expertsessions & BBQ
by Nathalie Trenaman 15 Jun '19

15 Jun '19

Hoi all, In minder dan een week (!) is het zover: De NLNOG Expertsessions & BBQ! Je hebt nog een paar dagen om je in te schrijven voor de Expertsessions en/of de BBQ: https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606… <https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606…> Nog even: Wil je een sessie boeken met een expert (https://nlnog.net/experts-2019/ <https://nlnog.net/experts-2019/>) boeken, doe dat dan vandaag nog. Er zijn nog maar een paar plekjes over! Je kan een sessie van 50 minuten aanvragen, maar dat is *uitsluitend* bedoeld voor de expertise van de expert om jou verder te helpen, beschrijf dus goed hoe je die 50 minuten wil benutten. Sales pitches, bijpraat sessies en kennismaken kan bij de BBQ (behalve die sales pitches! Verboden!) Of course, English is fine as well!. This event will be mixed Dutch/English We will start the BBQ at 17:30/18:00 and the weather looks promising. In case you have any dietary restrictions, don’t forget to let us know. See you on Friday! Groetjes, The NLNOG Crew

1 0

Spoofer Report for NLNOG for May 2019
by CAIDA Spoofer Project 08 Jun '19

08 Jun '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during May 2019: ASN Name Fixed-By 58329 RACKPLACE 2019-05-07 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2019: ASN Name First-Spoofed Last-Spoofed 12222 AKAMAI 2018-02-14 2019-05-23 28878 SIGNET 2018-06-27 2019-05-27 47886 EQUINIX-NL-ASN 2018-08-09 2019-05-24 16243 VIRTU 2018-08-09 2019-05-24 8737 PT 2019-01-16 2019-05-05 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

FW: [ncc-announce] [GM] RIPE NCC General Meeting: One Week to Register
by Erik Bais 22 May '19

22 May '19

Dear NLNOG community, ( Ik heb de complete email in the Engels gedaan, zodat ook de non-Dutchies op de lijst kunnen meelezen. ) As you might know, this week there is a RIPE meeting in Iceland and some of you may or may not know that as a member of RIPE, you are invited to vote on the General Meeting. You can register for remote voting if you are not present at the RIPE78 in person. And as with the EU voting, it is important that we as a Dutch community vote. Axel Pawlik (the CEO of RIPE NCC) send out the email below to the ncc-announce list. But you may not be on the mailing list... hence this reminder. There are a couple important topics where we like you to vote for.. ( https://www.ripe.net/participate/meetings/gm/meetings/may-2019/supporting-d… ) 1) voting schema .. 2) new Executive Board members 1) On the voting schema, the current Executive Board have provided a couple variations on the current ( 1 member, 1 fee ) model .. for 1400 euro p/year. For simplicity reasons, this is the easiest for the RIPE NCC, it removes all the difficult invoice creation (which might give additional operational cost.) as all LIR's / Members get charged the same amount. The other options are looking more into charging per resource objects.. like 50 euro per allocation (v4 and v6 ) & AS number(s) but not only for PI space, but also for PA space. So for LIR's that hold more than a single allocation, things will quickly be cheaper with the current (easier) charging schema.. ( Option A) Keeping things as they are : Vote for Option A. 2) There are 2 new seats available to vote for on the Executive Board of the RIPE NCC. Remco van Mook (CEO of Asteroid IXP) is re-running for the seat on the executive board.. And as a Dutch NLNOG, I think it is good to support him, for his great work already done in the past, specifically on the stability on the financial side of the RIPE NCC. And there are a number of other candidates that you can vote for. On the list is the co-Chair for the Database Working Group and Chair for the Accountability Task Force, William Sylvester. From all the candidates, I personally like to ask you to support Remco and William for the seats at the Exec. Board. I've known both for years and worked with them in the community and hope to do so in the future to help us all moving forward. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/candidate-bi… On how the voting system ... BigPulse system is used for voting .. and in order to give your top 2 candidates the best chance of winning, it is important to pick the other candidates as well. Because once the first candidate is selected, the system is going to look who is the next running, without the votes on the first round.. So in order to give your candidate the most voting chance .. make sure you select all 7 names. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/confirmed-ca… Currently only 69 LIR's have registered to vote for the GM at RIPE this week, we can do a lot better and your vote counts. Sorry for the long read ... And looking forward to your support on the GM voting. You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Regards, Erik Bais On 15/05/2019, 16:17, "ncc-announce on behalf of Axel Pawlik" <ncc-announce-bounces(a)ripe.net on behalf of agm(a)ripe.net> wrote: Dear RIPE NCC members, There is one week left to register for the RIPE NCC General Meeting (GM), which takes place from Wednesday, 22 May 2019 at 18:00 UTC. *Online registration for the GM closes at 16:00 UTC on Wednesday, 22 May 2019.* You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Over 1,400 members have registered to vote, and we hope to see this number increase before the GM opens. Members who register for the GM will receive links to participate and vote remotely on 22 May. At this GM, you can vote on five resolutions: - The General Meeting adopts the RIPE NCC Financial Report 2018. - The General Meeting discharges the Executive Board with regard to its actions as they appear from the Annual Report 2018 and Financial Report 2018. - The General Meeting approves the adoption of the RIPE NCC Charging Scheme 2020 option that received the absolute majority of the votes cast. - The General Meeting approves the amendments to the RIPE NCC Articles of Association. - The General Meeting approves the amendments to the RIPE NCC Standard Service Agreement. You can also vote in the Executive Board election to fill two seats. There are seven confirmed candidates in the running, and their biographies and motivation statements are available at: https://www.ripe.net/gm/may-2019/candidate-biographies All information on the GM, including links to the supporting documents, can be found on the GM homepage: https://www.ripe.net/gm/may-2019 We look forward to your participation in this important meeting for the RIPE NCC and its members. Kind regards, Axel Pawlik Managing Director RIPE NCC

3 2