[29890] in North American Network Operators' Group
Re: No, ORBS is a good tool [WAS: Alright, ORBS sucks - next topic, please ;) [was RE: RBL-type BGPservice for known rogue networks?]]
daemon@ATHENA.MIT.EDU (JP Donnio)
Sun Jul 9 08:08:23 2000
Message-ID: <00d701bfe99e$16b44240$258327d4@tbsinternet.com>
From: "JP Donnio" <ml-nanog@TBS-internet.com>
To: "Peter van Dijk" <petervd@vuurwerk.nl>, <nanog@merit.edu>
Date: Sun, 9 Jul 2000 14:06:15 +0200
MIME-Version: 1.0
Content-Type: multipart/signed;
micalg=SHA1;
protocol="application/x-pkcs7-signature";
boundary="----=_NextPart_000_00D3_01BFE9AE.D8BADF10"
Errors-To: owner-nanog-outgoing@merit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_00D3_01BFE9AE.D8BADF10
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
----- Original Message -----
From: "Peter van Dijk" <petervd@vuurwerk.nl>
To: <nanog@merit.edu>
Sent: Sunday, July 09, 2000 12:08 PM
Subject: Re: No, ORBS is a good tool [WAS: Alright, ORBS sucks - next topic,
please ;) [was RE: RBL-type BGPservice for known rogue networks?]]
> > We currently host the ORBS tester. We've had several incidents where
> > traffic from our network to the NZ-based site (where the database and
> > website run) dropped to a dead stop inside AboveNet space.
So their restrained the transit they sold... without notifying the contract
holder I guess.
> AboveNet has, at one time, blackholed our /24, including our nameservers,
> everywhere they could. This meant 30.000 domains were *unreachable* for
> abovenet customers.
Well we cannot really oppose this, who on this list is providing access to
the entire whole internet? Obviously not abovenet. If they want to deny
traffic from the tester entering their network, why not. You should make
sure that no other traffic (your business) is hurt by this. Why not setup an
AS with a /24 and run the tester from there? Or several of them in diverse
locations.
> > The problem stems in the fact that Vixie and Rand, in their role as
> > AboveNet staff, take it upon themselves to not only demand that ORBS not
> > test their own network, but also that the tests do not pass their
transit
> > routes. Two weeks ago our primary /24 got nullrouted inside AboveNet
space
> > without any prior communication from their side (no abuse-complaints, no
> > mail to our uplinks, nothing), effectively blocking around 30,000
domains
> > from being reachable.
>
> As I stated in another email, indeed, AboveNet does not warn or complain.
> They just blackhole.
>
> > I took up communication with vixie, basically trying to get into some
form
> > of dialogue to get issues settled. The core of his reply is that he does
> > not want to provide any information to ORBS to enable them to comply to
> > his demands of ORBS tests not passing AboveNet transit and he demands
that
> > we take the testers offline. We're still pondering our options here.
Silly
> > as this entire venture is, we may not be able to afford losing
routability
> > for our customer base so we might actually have to give in to his
demands.
>
> Which would be a big bloody shame :(
Sure it would. It should be possible to avoid AboveNet though. Isolate the
tester from your business and let him block the new /24 if he wants. And
make sure that the facts are clearly explained on the web; your previous
email was pretty clear I think.
------=_NextPart_000_00D3_01BFE9AE.D8BADF10
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"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------=_NextPart_000_00D3_01BFE9AE.D8BADF10--
