<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>It's a pain to have to put effort into new netblocks (we got some of the original space that had this problem several years ago), but the reality is that I doubt there's a lot APNIC can do.</div><div><br></div><div>If a provider/end user/corporate isn't actually actively managing it's routing and filtering then APNIC probably can't get them to care about something that "might affect them". Easier, from their brain space, to manage via exception.</div><div><br></div><div>What I think IS worth coordinating and documenting are the people who seem to have problems with actively managing their filtering and the contacts for fixing the issues. </div><div><br></div><div>A central list for this means that you have a list of people who need "education" and a way of solving the problems quickly.</div><div><br></div><div>Make it available via APNIC's myapnic website or something.</div><div><br></div><div>MMC</div><div><br><div><div>On 18/09/2009, at 8:59 AM, Darren Moss wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Hi Elly,<br><br>This is a real pain for us, and we've tried working with APNIC previously, so I am going to vent.<br><br>I think this is more than just allocating and "managing" lists for ranges.<br>The real issue (for us anyway) is many of the ranges allocated by APNIC contain obsolete, incorrect or fake contact information for the block owner.<br><br>This leads to us filtering pretty much entire blocks for naughty people on the internet, which I believe leads to the issue occuring right now (yes I know this does not cover spoofing attempts, but it could help).<br><br>The amount of attacks on infrastructure was increased significantly, with many localised attacks coming from Asia-Pacific countries, which should be easily blocked either via contact with the provider or by a third party list.<br><br>I am surprised that in this day and age we don't have.....<br><br>A) APNIC checking block owner details and suspending where information is not correct (ie: automatic email checking or automatic phone dialer with response keys required)<br><br>B) APNIC co-ordinating with other parties (ie: RIPE) for their known bad lists, which the Asia-Pacific communities can utilise for routing, filtering, etc.<br><br>There's not much point allocating blocks if we can't monitor and manage when things go wrong.<br><br>We are just letting everyone do anything they want on our networks.<br><br>My 2c worth.<br><br>Regards, <br><br><br>Darren Moss<br>General Manager, Director<br>[p] 1300 131 083 [f] 03 9017 2287<br>[e] <a href="mailto:Darren.Moss@em3.com.au">Darren.Moss@em3.com.au</a> [w] <a href="http://www.em3.com.au">www.em3.com.au</a><br><br>em3 People and Technology | Managed Technology Experts<br>postal: PO Box 2333, Moorabbin VIC 3189<br><br>New Zealand Airedale Street, Auckland City<br>postal: PO Box 39573, Howick 2045<br>[p] 09 92 555 26 [f] 09 887 0273 [m] 021 841 541<br><br><br>-----Original Message-----<br>From: <a href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a> [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] On Behalf Of Elly Tawhai<br>Sent: 2009-09-18 9:00 am<br>To: <a href="mailto:Nathan.Brookfield@serversaustralia.com.au">Nathan.Brookfield@serversaustralia.com.au</a><br>Cc: <a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a><br>Subject: Re: [AusNOG] New /21 on Bogan / Delinquent Lists<br><br>Dear Nathan,<br><br>While APNIC tries its best to allocate clean blocks, as the free pool of<br>IPv4 address space reaches exhaustion it is becoming harder to prevent connectivity problems such as what you're currently experiencing from happening.<br><br>We understand that this is an important issue for the community; and as such, we do take action to minimize any problems that may result.<br><br>We are currently investing extra resources to extend our debogon testing inline with the increase in demand, and in communications and education campaigns to better inform the community of this potential problem.<br><br>I will be in touch to see how I can further assist you.<br><br>Regards,<br>Elly<br><br>------------------------------------------------------------------------<br><br>Elly Tawhai email: <a href="mailto:elly@apnic.net">elly@apnic.net</a><br>Senior Internet Resource Analyst/ sip: <a href="mailto:elly@voip.apnic.net">elly@voip.apnic.net</a><br>Liaison Officer(Pacific), APNIC phone: +61 7 3858 3188<br><a href="http://www.apnic.net">http://www.apnic.net</a> fax: +61 7 3858 3199<br><br>------------------------------------------------------------------------<br><br><br>Nathan Brookfield wrote:<br><blockquote type="cite">Hi All,<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">I know this is a bit of an unusual request, not something I see on AUSNOG regularly but we have had the very unfortunate luck of being assigned a /21 from APNIC within the last 2 months which we are now slowly starting to assign to customers.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">When the first customer was put onto this subnet they advised that traffic from our network to ExeTEL appeared to be null routed into a blackhole so after raising a ticket with ExeTEL I quickly found out that the allocation had been blacklisted some years back for malicious activity, over the last weeks we have been escalating issues to Singtel and a long laundry list of other peers who have the prefix blocked.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Today we are dealing with Telstra who have the prefixed denied on all SMTP servers which has been fun but looks like it’s almost at an end. <br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Can I please reach out to all Sys Admins on the group to check your networks and if you are blocking 180.92.192.0/21 if you could please allow traffic from this subnet back into your networks.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">APNIC of course are no help, the fact it appears this subnet is less <br></blockquote><blockquote type="cite">than 90% routable does not help as they just won’t re-issue the <br></blockquote><blockquote type="cite">allocation plus we are too far past that stage now ☹<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Thanks in advance!<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Kindest Regards,<br></blockquote><blockquote type="cite">Nathan Brookfield<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">IT Operations<br></blockquote><blockquote type="cite">The One Provider Group Pty Ltd<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Direct:<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span>(02) 4307 4206<br></blockquote><blockquote type="cite">Fax:<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span> (02) 4307 4201<br></blockquote><blockquote type="cite">Network Ops:<span class="Apple-tab-span" style="white-space:pre"> </span>(02) 9037 4343<br></blockquote><blockquote type="cite">Web: <span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"> </span> <a href="http://www.serversaustralia.com.au">http://www.serversaustralia.com.au</a><br></blockquote><blockquote type="cite">Office Address:<span class="Apple-tab-span" style="white-space:pre"> </span>2/2 Teamster Close, Tuggerah NSW 2259<br></blockquote><blockquote type="cite">Postal Address:<span class="Apple-tab-span" style="white-space:pre"> </span>PO Box 3187, Tuggerah NSW 2259<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">_______________________________________________<br></blockquote><blockquote type="cite">AusNOG mailing list<br></blockquote><blockquote type="cite"><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br></blockquote><blockquote type="cite"><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br></blockquote>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>_______________________________________________<br>AusNOG mailing list<br>AusNOG@lists.ausnog.net<br>http://lists.ausnog.net/mailman/listinfo/ausnog<br><br></div></blockquote></div><br><div apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>-- <br>Matthew Moyle-Croft </div><div>Networks, Internode/Agile<br>Level 5, 162 Grenfell Street, Adelaide, SA 5000 Australia<br>Email: <a href="mailto:mmc@internode.com.au">mmc@internode.com.au</a> Web: <a href="http://www.on.net/">http://www.on.net</a><br>Direct: +61-8-8228-2909<span class="Apple-tab-span" style="white-space: pre; "> </span><span class="Apple-tab-span" style="white-space: pre; "> </span> Mobile: +61-419-900-366<br>Reception: +61-8-8228-2999 Fax: +61-8-8235-6909<br></div></div></span></div></span></div></span> </div><br></div></body></html>