- NANOG - lists.nanog.org

RIPE NCC now allocating IPv4 address space from the last /8 netblock
by Eugen Leitl 14 Sep '12

14 Sep '12

http://arstechnica.com/information-technology/2012/09/europe-officially-run… Europe officially runs out of IPv4 addresses RIPE NCC now allocating IPv4 address space from the last /8 netblock by Iljitsch van Beijnum - Sep 14, 2012 3:20 pm UTC Earlier today, the RIPE NCC (Réseaux IP Européens Network Coordination Centre) announced it is down to its last "/8" worth of IPv4 addresses. This means that it is no longer possible to obtain new IPv4 addresses in Europe, the former USSR, or the Middle East, with one small exception: every network operator that is a "RIPE member" or "local Internet registry" (LIR) can obtain one final block of 1024 IPv4 addresses. To fulfill these requests, the RIPE NCC is keeping that last /8, which contains 16.8 million addresses, in reserve. RIPE NCC None of this comes as a surprise given that the global pool of free IPv4 addresses was emptied in February 2011. APNIC, which distributes IP addresses in the Asia-Pacific region, ran out of IPv4 addresses in May 2011; it has been working under the "final /8" regime ever since. The remaining three Regional Internet Registries are AfriNIC (Africa), LACNIC (Latin America and the Caribbean), and ARIN (North America), which all have enough IPv4 addresses to last at least two more years. Since the depletion of IPv4 address space in the APNIC region, little information has surfaced about how network operators in the region have managed the situation. However, the lack of IPv4 addresses only impacts organizations and consumers who need additional addresses, or who need addresses for the first time. Existing IPv4 users remain unaffected, and so the immediate impact is limited. Also, large network operators get large address blocks from the RIRs and they typically have a pool of unused addresses of their own, so few will be experiencing immediate problems. However, every year for the past five years, some 200 million new IPv4 addresses have been put into use. Without a steady supply of fresh addresses, many Internet-related activities are going to become problematic in the years to come. Fortunately, 20 years ago the Internet Engineering Task Force (IETF) foresaw that the 3.7 billion addresses afforded by the 32-bit IPv4 address space would become a problem, and started working on a replacement: IPv6. But the IPv4 depletion didn't happen as fast as the IETF originally predicted, and IPv6 adoption has languished. But recently, IPv6 adoption got a big push in the form of World IPv6 Launch. Eventually, IPv6 will replace IPv4, but the transition won't be pretty. Reader comments 19 Iljitsch van Beijnum / Iljitsch is a contributing writer at Ars Technica, where he contributes articles about network protocols as well as Apple topics. He is currently finishing his Ph.D work at the telematics department at Universidad Carlos III de Madrid (UC3M) in Spain. @iljitsch

1 0

RIPE in final /8 of IPv4
by Martin Millnert 14 Sep '12

14 Sep '12

Hi list, in the interest of really running down also the final /8 of RIPE, which was entered today, let me point out that the cost to setup a new LIR is a meager application + application fee (2000 EUR) + ~1500 EUR or so for the first year. You can obviously transfer the resource as long as the requirement for the minimum allocation remains the same (which is a couple of web servers or so :) ), and then discontinue the LIR if you feel so inclined. This stands in contrast with the cost of fixing your documentation to justify 80% used space of the current allocations. Also, each LIR can just get 1 /22 from the final /8 pool. So if you're getting space for customers, the new-LIR approach with option to transfer back in is pretty reasonable. Happy Friday! Best, Martin (IPv6, where are you?) - http://www.ripe.net/ripe/mail/archives/ncc-announce/2012-September/000615.h… - https://www.ripe.net/internet-coordination/news/ripe-ncc-begins-to-allocate…

1 0

Re: anyone from spamhaus hanging around?
by Brad Barnett 14 Sep '12

14 Sep '12

On Thu, 13 Sep 2012 11:17:44 -0400 Brad Barnett <brad(a)gamingsolutions.ca> wrote: > > We've been running a clean operation for years, but recently, one of our > clients spammed then entire universe (using external mail servers, but > linking to some internal URLs). > > We've since terminated them, and such things are against our terms of > use. However, we seem to have massive issues getting any response from > Spamhaus. We're worried that perhaps we're just blackholed, or someone > is on vacation, or something to that effect. > > Right now, we're essentially crippled -- and at the same time, we > resolved the direct complaint a week ago. > > Does anyone have any idea as to how to contact someone at Spamhaus via > IM, phone, etc? IRC channel? > > Church? ;) > > NOTE: we're not perfect, but again -- we don't allow spamming. We force > unsubscribe footers on all outgoing mail clients send, we don't allow > SPAM as per terms of use, and we insist that clients use a list of > known-contacts if they do mailings. > > EG: people they've have contact with in the past. > >

3 2

HXXP browser protocol
by Matthew Black 13 Sep '12

13 Sep '12

Checking if anyone else has heard of this protocol. It seems to be a method of bypassing security filtering software. The reason I ask is that we received a security alert with a link hxxp://pastebin.com/###. Seems very suspicious and want to know if anyone can shed light. Is this a new phishing/malware methodology? matthew black california state university, long beach

4 5

APIs galore: All RIPE NCC Developer Docs
by Alex Band 13 Sep '12

13 Sep '12

I wanted to let you know we've created a dedicated page for all developer documentation about our different APIs. Apart from the best known one for the RIPE Database REST API, there is also documentation for the RIPE NCC LIR Portal API, giving you access to access to all your (private) resource information, such as ASNs, IPv4 and IPv6 allocations, Assignment Window history, PI assignments, Legacy space, etc. In addition, there is also an IP Analyser API give you access to all the assignments you've made, what available free space you have in your allocations and an overview of all invalid assignments that require your attention. Lastly, there are APIs for RIPE Stat and RIPE Atlas data, giving you access to a wealth of Internet measurements, data analysis and statistics. Have a look at http://ripe.net/developers Cheers, Alex Band Product Manager RIPE NCC

1 0

Re: APIs for domain registration and management
by Miles Fidelman 13 Sep '12

13 Sep '12

Thanks everyone for your responses. -- In theory, there is no difference between theory and practice. In practice, there is. .... Yogi Berra

1 0

[NANOG-announce] RESCHEDULE NOTIFICATION for NANOG mail list maintenance - Tuesday, September 18th, 2012
by Randy Epstein 13 Sep '12

13 Sep '12

Colleagues: The NANOG mailman list upgrade and transition was not completed this morning. The maintenance has been rescheduled for Tuesday, September 18, 2012 at 6 am Eastern time. Regards, Randy Epstein NANOG CC Chair On behalf of the NANOG Communications Committee _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

ipv6mon v1.0 released! (IPv6 address monitoring daemon)
by Fernando Gont 13 Sep '12

13 Sep '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, We are pleased to announce the release of ipv6mon v1.0! ** Description ** ipv6mon (<http://www.si6networks.com/tools/ipv6mon>) is a tool for monitoring IPv6 address usage on a local network. It is meant to be particularly useful in networks that employ IPv6 Stateless Address Auto-Configuration (as opposed to DHCPv6), where address assignment is decentralized and there is no central server that records which IPv6 addresses have been assigned to which nodes during which period of time. ipv6mon employs active probing to discover IPv6 addresses in use, and determine whether such addresses remain active. ** Latest release ** The latest release of ipv6mon is v1.0, and is available at: <http://www.si6networks.com/tools/ipv6mon/ipv6mon-v1.0.tar.gz> ** Documentation ** PDF versions of the ipv6mon manuals are available on-line at: <http:://www.si6networks.com/tools/ipv6mon> ** GIT repository ** The GIT repository for the ipv6mon is: <https://github.com/fgont/ipv6-toolkit.git> ** IPv6 security trainings ** Development of ipv6mon is partially supported through our IPv6 security trainings. Please consider attending one of our upcoming trainings <http://www.hackingipv6networks.com/upcoming-t> Follow us on twitter: @SI6Networks Best regards, - -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 - -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJQUc+lAAoJEJbuqe/Qdv/xHc0IAJ8rTfjwisnAKxDrlXiQpNjZ 3yJbWE3LPEj5wTkoqHgOkd0p6h+hEkz9yaxlSyoZTJAP/N2IOvmdWdmXpV5umTen cVRxn5HopYRL4kEDRu5rc7DiwWXPXiuAZD8uvyyc/u/TiLHJXePjK1Cicp1W/iIZ cSBAKcjMGpaYX0i/Vj2rN36gytrjW0jRlF8e3+64FHss1+poEG58TBLcZyckZkTZ TqE1G184gkAPAa8DryT8U1k68ZWWO/2gWMsLR/nTxjUmSZHamPrZHN2IHlhdC5vu ABBK/M13MIepNfnFlXfBMCTMy0CQU87kRwo5OF+1M7NAeshovmgjtOp+idAsZec= =a76/ -----END PGP SIGNATURE-----

4 4

APIs for domain registration and management
by Miles Fidelman 13 Sep '12

13 Sep '12

Hi Folks, I expect folks on NANOG would know: Are there any domain registrars who provide APIs for managing domains and/or DNS records? It's kind of a pain managing large numbers of domains via klunky web interfaces. It sure would be nice to tie registry accounts into equipment inventory management systems. Thanks, Miles Fidelman -- In theory, there is no difference between theory and practice. In practice, there is. .... Yogi Berra

9 9

Real ops talking to future ops
by John Kristoff 13 Sep '12

13 Sep '12

Hello friends, I've made this call once before and the response was very positive so I thought I'd do it again. As some of you know, I occasionally teach networking classes at DePaul University in Chicago. What has gone over extremely well in the past is when I've had a real op come talk to the students, even if its just about what they do on a daily basis. If any of you are in or around the Loop in Chicago area on a Tuesday night between September and November of this year and wouldn't mind sharing what you know and/or what you do, I would be forever grateful if you do so with my class. Dinner and drinks before and/or after are on me. I'm not asking for anything polished. If you've presented something recently that you think a computer science undergrad should be able to grasp or even if just have enable, your future ops want you to tell them about it. ...and yes, often times other instructors, and unfortunately the required book, spend an inordinate amount of time talking about classful addressing. So you'll be doing the world a favor and maybe even me, by saying some things I'm not the only one saying to them before they hit the interview circuit. Here's the course home page with links to previous versions of it: <http://condor.depaul.edu/jkristof/tdc375/> Thank you, John

1 0