July 2025 - NANOG - lists.nanog.org

Important Deadline for MANRS Participants
by Steven Wallace 11 Jul '25

11 Jul '25

Important deadline for MANRS Participants! If your organization is a MANRS Participant, please cast your vote, yea or nay, for proposed changes to the MANRS Charter. For the changes to be adopted, at least 10% of MANRS Participants must vote, and 2/3rd of the votes must be in favor of the changes. I participated in the changes. They are essential for MANRS moving forward. Please cast your vote! https://manrs.org/2025/06/next-steps-in-the-manrs-charter-review-process/ Steven Wallace Director - Routing Integrity Internet2 ssw(a)internet2.edu

1 0

Captchas on Cloudflare-Proxied Sites
by Johannes Müller Aguilar 09 Jul '25

09 Jul '25

Hello, We operate as a cloud service provider, and much of our traffic is indeed—per Cloudflare’s terminology—“bot traffic.” For about a month, users behind IP addresses we announce have been prompted to solve captchas when accessing Cloudflare-proxied sites. When we contacted Cloudflare support, they referred us to their customers (e.g., Stack Overflow, OpenAI), but support from those sites directed us back to Cloudflare. I reviewed Cloudflare Radar but found it limited in actionable insights. We also announce prefixes to Cloudflare where the originating AS primarily serves end-users—and where Radar shows over 80% human traffic—yet users still encounter captchas, suggesting the issue may be related to our announcing AS. Has anyone experienced this or found effective ways to resolve it? Any advice or pointers would be greatly appreciated. Best regards, Johannes

17 36

Reminder to Submit Presentations for NANOG 95
by NANOG Program 09 Jul '25

09 Jul '25

NANOG Community at large, The NANOG Program Committee (PC) would like to remind you that we are now accepting proposals for in-person or live remote presentations at all sessions of NANOG 95, taking place in Arlington, TX on 27-29 October 2025. Below is a summary of key details and dates from the Call For Presentations on the NANOG website, which can be found at https://www.nanog.org/program/call-presentations/. Requested Topics: We are aiming to spotlight presentations throughout NANOG 95 focusing on Enterprise Networks and Wireless Technology. Topics can range from LAN operations, to using cellular networks for emergency connectivity, to LoRaWAN, to campus Wifi and mobile networks, to new and innovative methods of connecting devices across a wider physical area. In addition to the spotlight topic, we are always accepting talks on other topics relevant to our audience. Based on feedback from our recent surveys, we have seen numerous requests for the following topics: - Network Automation - designing networks for AI traffic, different approaches for different objectives - Future of Networking - forecast for changes in technology, design, applications, protocols - Research & Education - what research is happening now in network operations - Security - various protocols and developments, AI implications - Optical Networking - technology, practices, deployment options, troubleshooting - Tutorials - at all skill levels, IPv6, BGP, Segment Routing, DNS, MPLS, VxLAN - See the NANOG Call for Presentations <https://nanog.org/program/call-presentations/> for an extensive listing of requested topics We are looking to schedule 1,600 minutes of content between General Session and Breakout Rooms for NANOG 95, and have confirmed 285 minutes to date - so don’t wait! Presentation abstracts are welcomed now and draft slides should be submitted no later than Monday, 08 September 2025 to be considered for NANOG 95. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional or discuss proprietary solutions. The primary speaker, moderator, or author should submit a presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the form Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in the Program Committee Tool prior to the deadline for slide submission. - PC performs initial review and assigns a “shepherd” to help develop the submission — typically within 2 weeks. - Submitter develops draft slides of talk, if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. NANOG Staff is available to assist with slide templates upon request from the submitter. - Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. - PC reviews the slides and continues to work with Submitter as needed to develop the topic and content. - FINAL SUBMISSION DEADLINE Draft presentation slides should be submitted prior to the published deadline for slides (08 September 2025). - PC evaluates submissions to determine presentations for the agenda (posted on 22 September 2025). - Submitters notified. - Agenda assembled and posted. - Final presentation slides must be submitted prior to the published deadline for slides (20 October 2025 for in person + live remote presentations). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC ( nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, tutorial, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! NANOG 95 Calendar of Events Date Event/Deadline June 23, 2025 CFP Reminder Announcement July 21, 2025 Call for Proposals Reminder #2 September 08, 2025 DRAFT Presentation Slides Due September 08, 2025 Topics List Published September 22, 2025 Meeting Agenda Published October 20, 2025 FINAL Slides Due October 26, 2025 On-Site Lightning Talk Submissions Open Final slides for accepted presentations must be submitted by Monday, 20 October 2025. Materials received after that date, and prior to 24 October may be accepted based on Shepherd availability, but is not guaranteed. Materials received after 24 October will not be accepted. We look forward to seeing you in October! Sincerely, Adair Thaxton Program Committee Chair Sent on behalf of the NANOG PC

1 0

Spoofer Report for NANOG for Jun 2025
by CAIDA Spoofer Project 08 Jul '25

08 Jul '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jun 2025: ASN Name Fixed-By 19230 NANOG 2025-06-10 27364 ACS-INTERNET 2025-06-12 40676 AS40676 2025-06-29 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jun 2025: ASN Name First-Spoofed Last-Spoofed 40676 AS40676 2016-08-29 2025-06-24 63296 AWBROADBAND 2017-09-01 2025-06-26 22883 CONDENAST 2019-05-29 2025-06-30 21804 ACCESS-SK 2019-06-09 2025-06-24 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-06-26 400282 2023-04-27 2025-06-25 393577 SCCNET 2023-05-03 2025-06-26 61461 Airtek Solutions C.A. 2023-05-13 2025-06-26 20119 ARROW 2023-10-19 2025-06-27 394684 WISPERNET 2024-01-17 2025-06-27 393530 TLU 2024-05-22 2025-06-28 19935 CRRS 2024-05-29 2025-06-26 30475 WEHOSTWEBSITES-COM 2024-09-30 2025-06-09 54334 ROYA 2025-03-13 2025-06-25 16739 MIDCO-NET-INV 2025-03-19 2025-06-04 138915 KAOPU-HK 2025-03-30 2025-06-06 273843 2025-04-02 2025-06-30 400175 2025-06-08 2025-06-09 213953 2025-06-09 2025-06-09 42337 RESPINA 2025-06-09 2025-06-09 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

is it just me or...
by Michael Thomas 07 Jul '25

07 Jul '25

I'm using Thunderbird to read mail and lately the only thing I've seen in the mail.from address is |North American Network Operators Group | and not the author's address which makes it really hard to tell who is talking to whom. I is just me, or has there been a list config change that is causing this? Mike

28 81

Re: SPF/DKIM/DMARC et.al.: REALLY LONG [was: is it just me or...]
by bzs＠theworld.com 07 Jul '25

07 Jul '25

On July 6, 2025 at 17:30 johnl(a)taugh.com (John Levine) wrote: > > On 06-07-2025 17:05, bzs(a)theworld.com wrote: > > > The B2B spam I get from throwaway accounts at large mail > > > providers is probably only 1000 or less at a time since that's all you can > > > send that way. I do not think there is one master criminal with a million > > > throwaway Gmail accounts. > > > > You've moved from spam to ham, no? > > It's spam, bulk mail sent to people who didn't ask for it. Some offer > SEO, some offer financing for my non-existent business, it's all clearly > purchased lists sending mail in bulk to strangers. I probably have a broader definition of "spam" than most which amounts to: if I'm not being paid to deliver it by the sender then it's spam. > > > Do you have to show ID to drop a stamped envelope in a postal box? > > Wait a minute. Stamps? Where did the stamps come from? Who issues > them? Who decides if they're real? Perhaps you should reread my white > paper more carefully. You brought up IDs I was just reacting... >Beyond the fact that the underlying assumption is wrong, that's extremely >unlikely to work unless you envision a world where you have to show ID and >get a license to send mail. > R's, > John > > > > At this point I get a whole lot of mail from Salesforce and Sendgrid. I > > > would love to block them but unfortunately they also send a lot of mail my > > > users want, so I have to do hacks that try to recognize the customer and > > > let through the less bad ones. It is painfully clear that they have made > > > business decisions not to spend enough money on abuse management to clean > > > this up. The mail gets through, why should they? > > > > Again this is what is generally called "ham" unless you want > > to apply it to anything you're not personally interested in. > > Again, bulk mail sent to strangers. It's the normal definition of spam. > I'm not talking about companies that send you ads after you order > something, this is spam sent to complete strangers. I don't disagree, I just think the tide of "ham" is rising rapidly and this reasonable-sounding definition of spam is becoming unworkable. And, I'll add, it was pretty much inevitable, tragedy of the commons and all that. -- -Barry Shein Software Tool & Die | bzs(a)TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD The World: Since 1989 | A Public Information Utility | *oo*

1 0

Re: SPF/DKIM/DMARC et.al.: REALLY LONG [was: is it just me or...]
by John R. Levine 07 Jul '25

07 Jul '25

On 06-07-2025 17:05, bzs(a)theworld.com wrote: > > The B2B spam I get from throwaway accounts at large mail > > providers is probably only 1000 or less at a time since that's all you can > > send that way. I do not think there is one master criminal with a million > > throwaway Gmail accounts. > > You've moved from spam to ham, no? It's spam, bulk mail sent to people who didn't ask for it. Some offer SEO, some offer financing for my non-existent business, it's all clearly purchased lists sending mail in bulk to strangers. > Do you have to show ID to drop a stamped envelope in a postal box? Wait a minute. Stamps? Where did the stamps come from? Who issues them? Who decides if they're real? Perhaps you should reread my white paper more carefully. R's, John > > At this point I get a whole lot of mail from Salesforce and Sendgrid. I > > would love to block them but unfortunately they also send a lot of mail my > > users want, so I have to do hacks that try to recognize the customer and > > let through the less bad ones. It is painfully clear that they have made > > business decisions not to spend enough money on abuse management to clean > > this up. The mail gets through, why should they? > > Again this is what is generally called "ham" unless you want > to apply it to anything you're not personally interested in. No, bulk mail sent to strangers. It's the normal definition of spam. I'm not talking about companies that send you ads after you order something, this is spam sent by people I've never heard of and never contacted.

2 2

Google routes from IX vs PNI
by Nathanael Cariaga 06 Jul '25

06 Jul '25

Hi, I was wondering if anyone from the Google Networking team could contact me off the list. I was hoping to clarify if there was any difference on obtained Google routes from an IX vs from a PNI.

2 1

Cloudflare Cyber Team - Need a contact
by Anthony Leto 05 Jul '25

05 Jul '25

Is the Cloudflare Cyber Team or someone on here that has there details. I am dealing with a Cyber issue that requires the user not to be notified. My details are below… The form online is way to open about seing stuff on to their user that has malicious behavior. Sincerely, Anthony Leto Head of CyberSecurity +1.206.310.3552 privateer.com

1 0

Sorry to have bothered you
by Lou Katz 05 Jul '25

05 Jul '25

about loss of reverse DNS. Pilot erro on my part. -- -=[L]=- No boosts, no masks, no service I never have to think.

1 0