- NLNOG - NLNOG

bgp filter guide bogon prefixes 192.88.99.0/24
by Lannert, Julian 25 Jun '19

25 Jun '19

Hi All, First I wanted to thank you for the great bgp filter guide you provide. It is awesome to see crucial information collected and published openly for everyone. I am in the process of implementing more and better filters and while looking over the bogon prefixes v4 I stumbled upon the prefix 192.88.99.0/24 . You cite rfc7562 as a reference for adding this prefix to the bogon list and therefore not accepting this prefix but as far as I can see this the rfc clearly states "Networks SHOULD NOT filter out packets whose source address is 192.88.99.1" . If I do not accept a route to 192.88.99.0/24 I effectively blackhole that network to my customers and block returning packets to 192.88.99.1 from my and my customers networks. I checked other bogon lists that I could find, like team-cymru or kees (https://github.com/coloclue/kees/blob/e353ca9a06bca19147dcc6f607290cfd59303…) who do not include 192.88.99.0/24 in their bogon prefix list. Can you tell me the reasoning behind the decision to include this prefix in your bogon list? Best Regards Julian Julian Lannert Network Engineer e-shelter services GmbH Eschborner Landstraße 100 60489 Frankfurt am Main T: +49 69 7801-2422 F: +49 69 7801-2139 julian.lannert(a)e-shelter.com www.e-shelter.com Geschäftsführer: Ingmar Dilßner Volker Ludwig Rupprecht Rittweger Florian Winkler Sitz der Gesellschaft: Hattersheim am Main Amtsgericht Frankfurt am Main HRB 77478 Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

3 3

NLNOG Expert session & BBQ SOLD OUT!
by Nathalie Trenaman 18 Jun '19

18 Jun '19

Hi all, The weather forecast looks bright & sunny, the experts are booked and the BBQ reached max capacity with 50 people! We’re all looking forward to see you, but in the case you already know you can’t make it, please let us know or cancel your ticket. This way, we can allow people who are late to sign up still to join :) Thanks, Nathalie Trenaman NLNOG Crew

1 0

Reminder: NLNOG Expertsessions & BBQ
by Nathalie Trenaman 15 Jun '19

15 Jun '19

Hoi all, In minder dan een week (!) is het zover: De NLNOG Expertsessions & BBQ! Je hebt nog een paar dagen om je in te schrijven voor de Expertsessions en/of de BBQ: https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606… <https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606…> Nog even: Wil je een sessie boeken met een expert (https://nlnog.net/experts-2019/ <https://nlnog.net/experts-2019/>) boeken, doe dat dan vandaag nog. Er zijn nog maar een paar plekjes over! Je kan een sessie van 50 minuten aanvragen, maar dat is *uitsluitend* bedoeld voor de expertise van de expert om jou verder te helpen, beschrijf dus goed hoe je die 50 minuten wil benutten. Sales pitches, bijpraat sessies en kennismaken kan bij de BBQ (behalve die sales pitches! Verboden!) Of course, English is fine as well!. This event will be mixed Dutch/English We will start the BBQ at 17:30/18:00 and the weather looks promising. In case you have any dietary restrictions, don’t forget to let us know. See you on Friday! Groetjes, The NLNOG Crew

1 0

Spoofer Report for NLNOG for May 2019
by CAIDA Spoofer Project 08 Jun '19

08 Jun '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during May 2019: ASN Name Fixed-By 58329 RACKPLACE 2019-05-07 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2019: ASN Name First-Spoofed Last-Spoofed 12222 AKAMAI 2018-02-14 2019-05-23 28878 SIGNET 2018-06-27 2019-05-27 47886 EQUINIX-NL-ASN 2018-08-09 2019-05-24 16243 VIRTU 2018-08-09 2019-05-24 8737 PT 2019-01-16 2019-05-05 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

FW: [ncc-announce] [GM] RIPE NCC General Meeting: One Week to Register
by Erik Bais 22 May '19

22 May '19

Dear NLNOG community, ( Ik heb de complete email in the Engels gedaan, zodat ook de non-Dutchies op de lijst kunnen meelezen. ) As you might know, this week there is a RIPE meeting in Iceland and some of you may or may not know that as a member of RIPE, you are invited to vote on the General Meeting. You can register for remote voting if you are not present at the RIPE78 in person. And as with the EU voting, it is important that we as a Dutch community vote. Axel Pawlik (the CEO of RIPE NCC) send out the email below to the ncc-announce list. But you may not be on the mailing list... hence this reminder. There are a couple important topics where we like you to vote for.. ( https://www.ripe.net/participate/meetings/gm/meetings/may-2019/supporting-d… ) 1) voting schema .. 2) new Executive Board members 1) On the voting schema, the current Executive Board have provided a couple variations on the current ( 1 member, 1 fee ) model .. for 1400 euro p/year. For simplicity reasons, this is the easiest for the RIPE NCC, it removes all the difficult invoice creation (which might give additional operational cost.) as all LIR's / Members get charged the same amount. The other options are looking more into charging per resource objects.. like 50 euro per allocation (v4 and v6 ) & AS number(s) but not only for PI space, but also for PA space. So for LIR's that hold more than a single allocation, things will quickly be cheaper with the current (easier) charging schema.. ( Option A) Keeping things as they are : Vote for Option A. 2) There are 2 new seats available to vote for on the Executive Board of the RIPE NCC. Remco van Mook (CEO of Asteroid IXP) is re-running for the seat on the executive board.. And as a Dutch NLNOG, I think it is good to support him, for his great work already done in the past, specifically on the stability on the financial side of the RIPE NCC. And there are a number of other candidates that you can vote for. On the list is the co-Chair for the Database Working Group and Chair for the Accountability Task Force, William Sylvester. From all the candidates, I personally like to ask you to support Remco and William for the seats at the Exec. Board. I've known both for years and worked with them in the community and hope to do so in the future to help us all moving forward. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/candidate-bi… On how the voting system ... BigPulse system is used for voting .. and in order to give your top 2 candidates the best chance of winning, it is important to pick the other candidates as well. Because once the first candidate is selected, the system is going to look who is the next running, without the votes on the first round.. So in order to give your candidate the most voting chance .. make sure you select all 7 names. https://www.ripe.net/participate/meetings/gm/meetings/may-2019/confirmed-ca… Currently only 69 LIR's have registered to vote for the GM at RIPE this week, we can do a lot better and your vote counts. Sorry for the long read ... And looking forward to your support on the GM voting. You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Regards, Erik Bais On 15/05/2019, 16:17, "ncc-announce on behalf of Axel Pawlik" <ncc-announce-bounces(a)ripe.net on behalf of agm(a)ripe.net> wrote: Dear RIPE NCC members, There is one week left to register for the RIPE NCC General Meeting (GM), which takes place from Wednesday, 22 May 2019 at 18:00 UTC. *Online registration for the GM closes at 16:00 UTC on Wednesday, 22 May 2019.* You can register now at: https://www.ripe.net/s/gm-registration-may-2019 Over 1,400 members have registered to vote, and we hope to see this number increase before the GM opens. Members who register for the GM will receive links to participate and vote remotely on 22 May. At this GM, you can vote on five resolutions: - The General Meeting adopts the RIPE NCC Financial Report 2018. - The General Meeting discharges the Executive Board with regard to its actions as they appear from the Annual Report 2018 and Financial Report 2018. - The General Meeting approves the adoption of the RIPE NCC Charging Scheme 2020 option that received the absolute majority of the votes cast. - The General Meeting approves the amendments to the RIPE NCC Articles of Association. - The General Meeting approves the amendments to the RIPE NCC Standard Service Agreement. You can also vote in the Executive Board election to fill two seats. There are seven confirmed candidates in the running, and their biographies and motivation statements are available at: https://www.ripe.net/gm/may-2019/candidate-biographies All information on the GM, including links to the supporting documents, can be found on the GM homepage: https://www.ripe.net/gm/may-2019 We look forward to your participation in this important meeting for the RIPE NCC and its members. Kind regards, Axel Pawlik Managing Director RIPE NCC

3 2

Fwd: [ncc-announce] [GM] LIR Portal Issue Resolved
by Erik Bais 22 May '19

22 May '19

Mocht je een melding hebben gekregen dat je je niet meer kon registreren via de LIR Portal voor de GM .. De registratie is weer open .. Mvg, Erik Bais Verstuurd vanaf mijn iPhone Begin doorgestuurd bericht: Van: Axel Pawlik <agm(a)ripe.net<mailto:agm@ripe.net>> Datum: 22 mei 2019 om 16:38:41 GMT Aan: <ncc-announce(a)ripe.net<mailto:ncc-announce@ripe.net>> Onderwerp: [ncc-announce] [GM] LIR Portal Issue Resolved Antwoord aan: <agm(a)ripe.net<mailto:agm@ripe.net>> Dear members, The issue with the LIR Portal has now been fixed. You can register for the GM (as normal) here: https://www.ripe.net/s/gm-registration-may-2019 As stated in our previous email, registration will remain open until 18:00 (UTC). If you experience any issues, you can still register by emailing <agm(a)ripe.net<mailto:agm@ripe.net>> with your full contact name and RegID. We apologise for the inconvenience. Regards Axel Pawlik Managing Director RIPE NCC

1 0

Re: [NLNOG] AS3265 (XS4ALL) dropping invalid prefixes
by Tim Reinders 22 May '19

22 May '19

Hello Stavros, Yes, we use RTR as described in the Juniper documentation. No, we might want to publish a list of dropped prefixes, where clueful customers can check if the unreachability is a result of dropping that invalid prefix. Regards, Tim Reinders XS4ALL > On 21 May 2019, at 16:55, Stavros Konstantaras <stavros.konstantaras(a)ams-ix.net> wrote: > > Hi Tim, > > Well done for the good work and nice to see you using routinator for this job. I have two questions though: > > - Shall I assume that you use the RTR protocol between your MX routers and routinator? > - (Speaking as an XS4All customer) will you notify your customers for the invalid/dropped prefixes > when you apply the policy to customer connections? > > > Best regards, > > Stavros Konstantaras | NOC Engineer | AMS-IX > M +31 (0) 620 89 51 04 | T +31 20 305 8999 > ams-ix.net > > >> On 21 May 2019, at 13:08, Tim Reinders <timr(a)xs4all.net> wrote: >> >> Hello all, >> >> AS3265 is now dropping all RPKI invalid prefixes received from (transit) peers. >> >> We run two geographically spread instances of Routinator. >> Our peering-edge consists of two MX960 routers running "JUNOS 17.4R2-S3.2” >> >> As of yet no real (customer) impact, this is reflected in the volume of traffic in >> netflow data containing RPKI invalid prefixes (pre/post reject) >> >> Remaining work is rejecting invalids on customer BGP sessions (handful) and writing >> meaningful alerts for our monitoring-stack (prometheus/alertmanager) >> >> Regards, >> Tim Reinders >> XS4ALL >> timr on #nlnog >> _______________________________________________ >> NLNOG mailing list >> NLNOG(a)nlnog.net >> http://mailman.nlnog.net/listinfo/nlnog >

1 0

AS3265 (XS4ALL) dropping invalid prefixes
by Tim Reinders 22 May '19

22 May '19

Hello all, AS3265 is now dropping all RPKI invalid prefixes received from (transit) peers. We run two geographically spread instances of Routinator. Our peering-edge consists of two MX960 routers running "JUNOS 17.4R2-S3.2” As of yet no real (customer) impact, this is reflected in the volume of traffic in netflow data containing RPKI invalid prefixes (pre/post reject) Remaining work is rejecting invalids on customer BGP sessions (handful) and writing meaningful alerts for our monitoring-stack (prometheus/alertmanager) Regards, Tim Reinders XS4ALL timr on #nlnog

3 3

Invitation: NLNOG Expert Sessions & BBQ on Friday the 21st of June 2019
by Nathalie Trenaman 16 May '19

16 May '19

Dear all, We are proud to present the NLNOG Expert Sessions & BBQ on Friday the 21st of June 2019! Is your organisation struggling with automation? Are you debugging a funky DNS problem? Need help with your BGP config? Completely lost in telemetry? NLNOG brings you the experts! All you have to do is give us an abstract of the problem you want to solve and we will try to match you with an expert. You will get 50 minutes of consultation, for free! Each expert will only do 5 consultations, so please be as prepared and descriptive as possible when you sign up! Our experts are: -Erik Bais - IPv4 market and RIPE policies/procedures -Ariën Vijn - Optical systems, Physics, Connectors, Fiber -Paolo Lucente - Telemetry -Arjen Zonneveld - Systen Automation/Puppet -Peter van Dijk - DNS/DNSSEC -Arjan Koopen - WiFi, Portable networks -Job Snijders - BGP At 18:00 we fire up the BBQ and have drinks in the garden of Juniper Networks. You can sign up here: https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606… <https://www.eventbrite.nl/e/nlnog-expert-sessions-bbq-2019-registration-606…> (For the Expert Sessions and/or the BBQ) We follow a "pay what you want"-model. Your line manager doesn't trust free events or you simply want to support NLNOG? No problem! just get one of the donation tickets. :) ATTENTION: we have a limited amount of space, be sure to reserve your seat in time! :) Also: We will not provide entertainment apart from the expert sessions in the afternoon. If your session is scheduled at 13:00, and you want to stay for the BBQ, please feel free to bring your laptop to do some work, or hang out at the coffee bar. Public Transport: Take bus 180, 181 or 287 from Schiphol Airport/Plaza and take off at Schiphol - Rijk, Boeing Avenue Buses run approximately every 10 minutes Parking: Free Parking is available on site Shout out to the NLNOG sponsors: Juniper Networks - RIPE NCC - PowerDNS - PCextreme - KPN BV - Asteroid - Alturna - Cybersprint - NTT Communications - Solid Optics - AMS-IX - Duocast - NL-IX - Triple - i3D.net - Netflix - Prefix Broker - LONAP - Arista - SpeedIX We can’t wait to see you on Friday the 21st of June! Niels, Melchior, Job, Thomas, Nathalie

4 4

Spoofer Report for NLNOG for Apr 2019
by CAIDA Spoofer Project 08 May '19

08 May '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Apr 2019: none inferred Source Address Validation issues inferred during Apr 2019: ASN Name First-Spoofed Last-Spoofed 28878 SIGNET 2018-06-27 2019-04-12 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0