[149473] in North American Network Operators' Group
Re: Hijacked Network Ranges
daemon@ATHENA.MIT.EDU (Mark Tinka)
Sun Feb 5 23:50:45 2012
From: Mark Tinka <mtinka@globaltransit.net>
To: nanog@nanog.org
Date: Mon, 6 Feb 2012 12:49:49 +0800
In-Reply-To: <596B74B410EE6B4CA8A30C3AF1A155EA09C9DDF8@RWC-MBX1.corp.seven.com>
Cc: John Schneider <str8steelerfan@gmail.com>
Reply-To: mtinka@globaltransit.net
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart2167265.OQFBOJEtlE
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Wednesday, February 01, 2012 12:10:32 PM George Bonser=20
wrote:
> Customer relationship with Kelvin's firm terminated and
> they contracted for service elsewhere but are apparently
> attempting to maintain the use of the address
> allocation(s) they received from Kelvin's firm. They
> apparently did this by misrepresenting the fact that
> they were entitled to use that address space.
We've been in such situations without customers requesting=20
us either to:
a) Block certain addresses across their transit
links in order to mitigate DoS attacks.
b) Announce address space which does not necessarily
belong to them, even though they aren't being
nefarious.
In either case, a quick check of the RIR WHOIS database to=20
qualify consistency in information does not hurt. Yes, WHOIS=20
records aren't always the most up-to-date, but it's a fairly=20
good representation of the truth most of the time,=20
especially since 'inetnum' objects tend to be managed by the=20
RIR's themselves, last time I checked.
This is quickly making the case for RPKI.
Mark.
--nextPart2167265.OQFBOJEtlE
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
iQIcBAABAgAGBQJPL1vwAAoJEGcZuYTeKm+GEZIP/0HiP/kCdOMlJnOv6y8Z81gR
U3R1qODXbbasnU6NX0Yi1Dzfuyn8bkgTvd1rHeFWAwitJ+IhwUQdhrh6csAoYvt5
y6IsZYk5xOv3wHLx9Y3P1EMsY6zyljQOKI2M0sxIo9LpLG+pCdqsLG1KuXQnBDOE
LVit6wa3Vq0/W8tb7Eof++WWFd1aAaQ0tUBIHVTOsA5KK7Ct+6LZLL7WeALwyWy8
KMdEbCbuYxduMWGJ0xOVVZqMtfs2UDBr5MWNNrxR5Ia3e3GkcNIFA84k3qhAobAO
yZWOFTzdv4zz787/yOwOiQZLl7/Yv26lapvT8lqsWD3Ze+Yph1bgKsY+hFHcwJYH
UL99scHj4dglV5me4Bd8LnXK/R/1zfZovZx26myMI8Y6qLFoM3XjVogkpWroTej7
rdRjPHcj1nu0SprjTH1omPHzdPBKLt2LbY7lVfjdMAD6SlSlr5oYirNhdY/WTePr
d7OvBj6fZGx6pxpOnjnoo8t4xMFuzyW+TL8LEPCbm6RCikagG5d3b2VftgDHuT3n
x7Nt1E/e3tCojhFoCt8JZutp0ZxpV5Z39blN2cY0J6PdIoqtgeEthuwfspW9bV7B
3owN30fx4k+DUMQrLHY2JXxDpGtF7JHfCOo+qo995LDVLROIDlPDuD2zeWSCEMEB
YeADZ2Iwl5z21Kze1GYM
=AKCb
-----END PGP SIGNATURE-----
--nextPart2167265.OQFBOJEtlE--
