June 2025 - NANOG - lists.nanog.org

RIPE Probe Behind IPS
by Mike Hammett 02 Jun '25

02 Jun '25

How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

3 4

Amazon AWS cloudfront WAF block
by paul＠vanilla.capetown 01 Jun '25

01 Jun '25

Hi all Most if not all of our prefixes are on some sort of AWS WAF deny list, that or our ASN is listed. We are an eyeball network, geo-location websites e.g maxmind are correctly displaying the correct location and services for our prefixes. We do not have a support contract with amazon aws to create a support ticket. Various websites are now blocked, e.g Reddit and many more. It is not feasible for us to reach out to each one to adjust their aws waf filters. Upon emailing AWS this is their reply: "The best course of action would be to contact Neustar and or MaxMind who are 3rd party WAF aggregators on this to address any issues with WAF blocking." This is also not fair and frankly a rabbit hole we do not want to go down. These are also paid for services. AWS is almost holding our ASN/Prefixes as hostage to these paid for services with no easy way to check why we are being blocked, and getting off "some" list. Anyone have an idea / contact or what to do?

22 38

Seeking Assistance with Microsoft IP Blocklist removal of large IP space (AS53755 / IOFlood)
by John Boucher 01 Jun '25

01 Jun '25

Hello, I’m reaching out on behalf of IOFlood (AS53755) and we are currently experiencing an issue where Microsoft appears to be blocking our entire IP space from delivering mail to Hotmail, Outlook, and MSN addresses. This has become a significant inconvenience and hassle for all of our customers who rely on email delivery to Microsoft domains. Unfortunately, Microsoft’s standard IP removal form is not a feasible solution given the size of our overall IP allocations. They only allow a /24 per request and while we have been working using this method, it would be near impossible to cover all of our IP space in any reasonable amount of time. We’re looking for anyone who may be able to assist directly, or who can point us to a contact or escalation path within Microsoft. If you have any guidance or contacts to share, I’d greatly appreciate it. Best regards, -- John Boucher Senior Technician - Input Output Flood, LLC *We Love Servers* web: www.ioflood.com email: support(a)ioflood.com twitter: @ioflood

1 0