- NANOG - lists.nanog.org

Re: RIPE NCC Executive Board election
by Terrence Koeman 13 May '20

13 May '20

If you thought IPv4+ was entertaining, check out his "solution" to packet spoofing: https://www.ripe.net/ripe/mail/archives/members-discuss/2020-April/003902.h… And SPAM: https://www.ripe.net/ripe/mail/archives/members-discuss/2020-April/003778.h… These should be submitted as RFCs, but on April 1st next year :) This could only be funnier if he wasn't dead serious and attempting to gain power in RIPE right at this moment. Never in my life have I encountered such an obvious and clear example of the Dunning-Kruger effect[1]. He's entrenched right at the peak of "Mount Stupid"[2] (he appears committed to building a tower there). Ref: [1] https://en.m.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect [2] https://upload.wikimedia.org/wikipedia/commons/4/46/Dunning%E2%80%93Kruger_… -- Regards, Terrence Koeman, PhD/MTh/BPsy Darkness Reigns (Holding) B.V. Please quote relevant replies. Spelling errors courtesy of my 'smart'phone. ________________________________ From: David Hubbard <dhubbard(a)dino.hostasaurus.com> Sent: Wednesday, 13 May 2020 19:19 To: nanog(a)nanog.org Subject: [SPAM-MS] Re: RIPE NCC Executive Board election > LOL the IPv4+ thing was a pretty entertaining read. You clearly don’t have even a basic understanding of the v4 packet structure, or that the octet display concept is simply for human benefit. IPv6 can be implemented with ‘software updates’ too… > > From: NANOG <nanog-bounces(a)nanog.org> on behalf of Elad Cohen <elad(a)netstyle.io> > Date: Wednesday, May 13, 2020 at 9:47 AM > To: "Ronald F. Guilmette" <rfg(a)tristatelogic.com>, "nanog(a)nanog.org" <nanog(a)nanog.org> > Subject: Re: RIPE NCC Executive Board election > > Hello Everyone, > > My apology for not providing an official response to the first "The Ronald Show" that took place here many months ago, I was out of hospital after full anesthesia and it took me months to get back to myself. > > What was done towards me and what being done to me by Ronald is an intentional personal attack against me and I will explain. > > I didn't agree to provide private business documents to the illegal anonymous organization "The Spamhaus Project" that they tried to extort from me - then I found out who are the real people behind the illegal anonymous organization "The Spamhaus Project" - and then they started to attack me (including here on Nanog, with false information, when I was out of hospital and wasn't in the condition to respond to them). > > "The Spamhaus Project" is an illegal anonymous organization according to their own words in their own following presentation: > > https://www.scribd.com/document/445894312/Spamhaus-Illegal-Private-Data-Vio… > > They wrote in it that they receive on a regular basis - massive amount of illegaly-obtained privacy data from their contacts in many internet companies and internet organizations - and then they share it in illegal way (without any warrant) with Law Enforcement Agencies - this is the reason that Law Enforcement Agencies are doing nothing regarding the illegal anonymous organization "The Spamhaus Project". > > Ronald Guilmette is the front person of the illegal anonymous organization "The Spamhaus Project". > > > ---- > and that said legal counsel has then > proceeded to threaten various officials of the City of Cape Town, > South Africa with possible legal action if they do not relinquish > to him their rights in and title to the 165.25.0.0/16 block > ---- > This is a complete lie, in order to shame CoCT I will not share their internal correspondences. Anyone interested to know more information can email me directly. > > > ---- > "I am assured that at no time did the City of Cape Town ever sell, trade, or barter away their rights to this valuable IPv4 block" > ---- > Ronald is "assured" exactly as he is "assured" that all Dutch people are criminals and all Colombian network oeprators are criminals and all Chicago citizens are criminals according to his statements in the following links: > https://imgur.com/AcmgwEX > https://imgur.com/WUZvdNJ > https://imgur.com/a/Rzrbxkz > > Ronald was called an antisemitic and a racist person here on Nanog in the following two links, by people which are not related to me: > https://imgur.com/AQCmZlk > https://imgur.com/a/Rzrbxkz > > > In the first "The Ronald Show" many months ago - Ronald called me in two antisemitic names that are being used to relate to Jews in Shakespeare literature (just like Ronald is relating to Shakespeare in https://imgur.com/AcmgwEX ) - as part of his defamation campaign towards me - none of you raised a voice and not only that but some Nanog subscribers enjoyed his racism and antisemitism (without a single proof against me) as was written here by them (with a popcorn). > > The "source" in "The Spamhaus Project" that supported and pumped Ronald Imagination is the criminal of the anonymous twitter account: https://twitter.com/underthebreach , that person according to his own words in his own criminal anonymous twitter account - is a master of cyber influence operations (meaning to influence people without a single proof) - that person is also an employee of the Israeli-based company GeoEdge and they are a direct competitor of a company that used the netblocks that Ronald attacked - not only that but Ronald also attacked another Israeli-based company called Divineworks (here in Nanog) and they are also a direct competitor of the Israeli-based company GeoEdge. What was done here is a cyber influence operation without a single proof because of a business competition. > > That criminal https://twitter.com/underthebreach which is a member of "The Spamhaus Project" and pumped Ronald Imagination - is not the only person which is abusing the power of "The Spamhaus Project" for commericial goals, that are many many more people and companies behind the illegal anonymous organization "The Spamhaus Project" which are making profit from it, for example: > > - Vincent Schonau from Open-Xchange (AKA "Vincenet Hanna" of "The Spamhaus Project") that "The Spamhaus Project" is attacking the competitors of Open-Xchange. > - Laura Atkins from WordToTheWise which is selling a Spamhaus listing removal service (https://wordtothewise.com) > > Real identities behind "The Spamhaus Project": > > "Mike Anderson" - Michael O'Reirdan (Chairman Emeritus of W3AAWG) and Professor Ross Anderson from Cambridge university (both known as "Mike Anderson" of "The Spamhaus Project") > "Rob Shultz" - Rob McEwen (https://www.invaluement.com/) > "Thomas Morrison" - Daniel R. Thomas (https://personal.cis.strath.ac.uk/d.thomas/) > "Pete Dawes" - Ildiko Pete (https://www.cl.cam.ac.uk/~ip358/) > "Vincent Hanna" - Vincent Schonau of Open-Xchange (https://www.linkedin.com/in/vincentschonau/) > "Milly Fawcett" - Kelly Molloy of FarSight Security (https://www.linkedin.com/in/kelly-molloy-b886442/) > Among others. > > Companies behind the illegal anonymous organization "The Spamhaus Project": > ThreatSTOP > FarSight Security > Fastly > Dyn > Cymru > Abusix > Among others. > > > Regarding the article that Ronald shared, in it there is clearly written: > > "It must be noted that Cohen is not being accused of any illegal activity in this report." > > But it doesn't change the fact that the article was clearly written only for Ronald to be able to post it and to proceed with the illegal "cyber influence operation" to attack me without a single proof. The article was written by the instruction of the "The Spamhaus Project" mob and then Ronald made this post according to the instruction from "The Spamhaus Project" mob. A coordinated illegal "cyber influence operation" without a single proof. > > > Many subscribers of the Nanog list are members of the illegal anonymous organization "The Spamhaus Project" - Ronald Guilmette is just their front clown - expect many of them to jump now and to defame me here without a single proof (because this is how the illegal anonynous organization "The Spamhaus Project" works) - and you can ask them a simple single question - "show us a single proof" - and - "if you cannot show us a single proof then please stop spamming the mailing list". > > Ronald at the end of his post keep spreading lies and writing: > "less than honorable intent reach for power" > "to persons with an interest only in what is best for them personally, to the exclusion of all else" > "Democracy dies in darkness." > > When in reality I invented three new pantets for the best of the whole Internet community and I will work to implement them if I will be elected: > > IPv4+ that will mitigate the "IPv4 Exhaustion" problem and will add more 4,294,967,296 IPv4 addresses: (can be implemented with software updates and not all internet hosts in the world will have to be updated - home routers and home modems which are the vast majority of routing equipment in the world - will not need to be updated and will support more 4,294,967,296 IPv4 addresses with IPv4+ ) > https://www.ripe.net/ripe/mail/archives/members-discuss/2020-April/003676.h… > > Completely mitigating the global email spam problem in a clean and automatic way: (and also mitigating the illegal anonymous organization "The Spamhaus Project") > https://www.ripe.net/ripe/mail/archives/members-discuss/2020-April/003778.h… > > Completely mitigating spoofed ip amplification DDoS attacks and spoofed ip traffic with is a source for criminality: > https://www.ripe.net/ripe/mail/archives/members-discuss/2020-April/003902.h… > > They ("The Spamhaus Project" mob) wants to keep controlling RIPE and any other internet organizations - I want to liberate RIPE - I want to make sure that that illegal anonymous organization that violates any thing which is sacred in the Interent (freedom, free speech and connectivity) - will have no footprint in RIPE. > > My full agenda can be read here: > https://www.ripe.net/participate/meetings/gm/meetings/may-2020/candidate-bi… > > Ronald is afraid from me being elected because he knows that if I will be elected I will put an end to the illgal anonymous organization "The Spamhaus Project" which is intimidating and harassing many organizations and many businesses worldwide. > > Kind Regards, > Elad > ________________________________ > From: NANOG <nanog-bounces(a)nanog.org> on behalf of Ronald F. Guilmette <rfg(a)tristatelogic.com> > Sent: Wednesday, May 13, 2020 12:50 PM > To: nanog(a)nanog.org <nanog(a)nanog.org> > Subject: RIPE NCC Executive Board election > > Many of you here may be dues-paying members of both ARIN and RIPE. > > Those of you who are may wish to be aware of the fact that there will > be an election held on (I believe) May 14th, just a day or two from > now, for three open RIPE NCC Executive Board seats. > > I have it on good authority that one of the candidates running for > the open RIPE NCC board seats in this election has hired legal > counsel in South Africa, and that said legal counsel has then > proceeded to threaten various officials of the City of Cape Town, > South Africa with possible legal action if they do not relinquish > to him their rights in and title to the 165.25.0.0/16 block, a > block that all historical records, including even ARIN "WhoWas" > historical records show, clearly and unambiguously, has been > legally registered to the City of Cape Town for over twenty years. > (I am assured that at no time did the City of Cape Town ever sell, > trade, or barter away their rights to this valuable IPv4 block, > and that they are defending themselves, as best as they can, against > this attempt to extort them out of their rightful prooperty.) > > Where I come from, this kind of thing is called barratry, but you > be the judge. > > In any case, prior to the RIPE election, I wanted to let you all > know these facts about the candidate in question, as well as a > number of additional startling facts relating to the people who > nominated this candidate for a RIPE NCC Executive board seat, as > documented by my friend, South African journalist Jan Vermeulen: > > https://mybroadband.co.za/news/internet/350973-man-connected-to-african-ip-… > > I could go into more detail about many of the nominators mentioned > in the above article, but I don't want to make this email too long, > so I'll await some explict request for that additional info. For now > it should suffice to make at least some of the basic facts more widely > available, a task which is accomplished just by sharing the above link, > IMHO. > > > Regards, > rfg > > > P.S. I have been specifically and explicitly enjoined and constrained > from posting here anything at all that might smack of being either > partisan or of an even vaguely "political" nature, and thus, I will > refrain from doing so. I would be remiss hoever if I did not at least > note in passing that history records that in times such as these, when > people of good character and good intent are, as they rightly should be, > focused on the health and safety of themselves, their loved ones, and > their professional collegues, and when the gaze of the world is elsewhere, > persons of less than honorable intent reach for power and, with unfortunate > regularity, obtain it. > > I cannot and do not ask that those of you who have been saddled with > personal or local crises during this sad time turn away from those > responsibilities to give attention to matters of Internet governance, > however urgent those may appear at the moment. For all of us, our first- > order duty lies nearby, with family, friends, and collegues. But for > those of you who still have a few cycles to spare, I do ask that you > consider carefully the newfound and critical importance of this tool, > this Internet, in the lives of so many millions, all around the world, > and the self-evident risks of its governance being handed over, by default > or otherwise, to persons with an interest only in what is best for them > personally, to the exclusion of all else. > > P.P.S. I would be posting this info and the above link also to the > very relevant RIPE members-discuss mailing list, but as I am not a > due-paying member of RIPE, I have no ability to do so. Separately, > due in no small part to the candidate's own recent and manifest on-list > transgressions on that very list, that list has recently been switched > to a heavy-handed moderation, under which, it seems, even discussion of > the pros and cons of candidates in the upcoming RIPE NCC Executive Board > election are now categorized as "too controversial" and thus, themselves, > are now entirely off-limits. > > I cannot help but be reminded of a catch-phrase that I saw somewhere, > not too long ago: > > "Democracy dies in darkness." > -- anon

1 0

Re: RIPE NCC Executive Board election
by Terrence Koeman 13 May '20

13 May '20

Thanks Ronald. I have forwarded your message to the members-discuss(a)ripe.net list, as I believe it's on-topic. Let's see if the moderators agree :) -- Regards, Terrence Koeman, PhD/MTh/BPsy Darkness Reigns (Holding) B.V. Please quote relevant replies. Spelling errors courtesy of my 'smart'phone. ________________________________ From: "Ronald F. Guilmette" <rfg(a)tristatelogic.com> Sent: Wednesday, 13 May 2020 11:51 To: nanog(a)nanog.org Subject: RIPE NCC Executive Board election > Many of you here may be dues-paying members of both ARIN and RIPE. > > Those of you who are may wish to be aware of the fact that there will > be an election held on (I believe) May 14th, just a day or two from > now, for three open RIPE NCC Executive Board seats. > > I have it on good authority that one of the candidates running for > the open RIPE NCC board seats in this election has hired legal > counsel in South Africa, and that said legal counsel has then > proceeded to threaten various officials of the City of Cape Town, > South Africa with possible legal action if they do not relinquish > to him their rights in and title to the 165.25.0.0/16 block, a > block that all historical records, including even ARIN "WhoWas" > historical records show, clearly and unambiguously, has been > legally registered to the City of Cape Town for over twenty years. > (I am assured that at no time did the City of Cape Town ever sell, > trade, or barter away their rights to this valuable IPv4 block, > and that they are defending themselves, as best as they can, against > this attempt to extort them out of their rightful prooperty.) > > Where I come from, this kind of thing is called barratry, but you > be the judge. > > In any case, prior to the RIPE election, I wanted to let you all > know these facts about the candidate in question, as well as a > number of additional startling facts relating to the people who > nominated this candidate for a RIPE NCC Executive board seat, as > documented by my friend, South African journalist Jan Vermeulen: > > https://mybroadband.co.za/news/internet/350973-man-connected-to-african-ip-… > > I could go into more detail about many of the nominators mentioned > in the above article, but I don't want to make this email too long, > so I'll await some explict request for that additional info. For now > it should suffice to make at least some of the basic facts more widely > available, a task which is accomplished just by sharing the above link, > IMHO. > > > Regards, > rfg > > > P.S. I have been specifically and explicitly enjoined and constrained > from posting here anything at all that might smack of being either > partisan or of an even vaguely "political" nature, and thus, I will > refrain from doing so. I would be remiss hoever if I did not at least > note in passing that history records that in times such as these, when > people of good character and good intent are, as they rightly should be, > focused on the health and safety of themselves, their loved ones, and > their professional collegues, and when the gaze of the world is elsewhere, > persons of less than honorable intent reach for power and, with unfortunate > regularity, obtain it. > > I cannot and do not ask that those of you who have been saddled with > personal or local crises during this sad time turn away from those > responsibilities to give attention to matters of Internet governance, > however urgent those may appear at the moment. For all of us, our first- > order duty lies nearby, with family, friends, and collegues. But for > those of you who still have a few cycles to spare, I do ask that you > consider carefully the newfound and critical importance of this tool, > this Internet, in the lives of so many millions, all around the world, > and the self-evident risks of its governance being handed over, by default > or otherwise, to persons with an interest only in what is best for them > personally, to the exclusion of all else. > > P.P.S. I would be posting this info and the above link also to the > very relevant RIPE members-discuss mailing list, but as I am not a > due-paying member of RIPE, I have no ability to do so. Separately, > due in no small part to the candidate's own recent and manifest on-list > transgressions on that very list, that list has recently been switched > to a heavy-handed moderation, under which, it seems, even discussion of > the pros and cons of candidates in the upcoming RIPE NCC Executive Board > election are now categorized as "too controversial" and thus, themselves, > are now entirely off-limits. > > I cannot help but be reminded of a catch-phrase that I saw somewhere, > not too long ago: > > "Democracy dies in darkness." > -- anon

1 0

Looking for a neteng contact at AS60725 O3B (SES)
by Eric Kuhnke 13 May '20

13 May '20

I'm looking to get in touch with somebody in network engineering at AS60725. Please contact me off-list.

1 0

Comcast Late Night Lurkers? (Chicago Problems)
by Nick Garrett 13 May '20

13 May '20

Any Comcast engineers lurking on here? Have noticed a significant issue with endpoint connectivity into our private clouds starting around 19:30 central, continuing on to now. Have also seen some issues with devices accessing via our customers' WAN connections through AT&T, suspecting some sort of transit fun. Tried reporting via SMB Coax and residential--- not even sure why I tried. Normally, this amount of flap is *not *an issue for us but it's causing some abnormal adverse effects which *is *an issue for us. 😊 We're seeing this on customers' networks that we know are on SMB HFC, ENS, Metro-E, pretty good spread. As well as some sprinkling of AT&T/ICN (Illinois Century Network). I am hoping it is a bad peer that can be told to stop or routed-out. Any help or investigating would be appreciated.

1 0

FCC Report on 2019 Nationwide Emergency Alert Test
by Sean Donelan 12 May '20

12 May '20

FCC published its 2019 nationwide EAS test report. The issues haven't changed, and some improved. "With respect to the single largest complication reported from the 2019 nationwide EAS test results – namely, issues with monitoring source failures – FEMA notes that it is actively taking measures to improve PEP performance going forward. In particular, FEMA has begun working with SECCs in several states to conduct state-level tests on a monthly basis and station-level tests on a weekly basis through the PEP stations. FEMA emphasizes that continued testing of the PEP stations will improve EAS performance over time, as this testing will help ensure the PEP stations are relaying messages properly through the EAS and allow stakeholders to make ongoing improvements and adjustments as needed." FCC's Public Safety and Homeland Security Bureau issues a report on the August 7, 2019 nationwide Emergency Alert System test https://www.fcc.gov/document/fcc-report-2019-nationwide-emergency-alert-test

1 0

An appeal for more bandwidth to the Internet Archive
by Jared Brown 12 May '20

12 May '20

Hello all! Last week the Internet Archive upgraded their bandwidth 30% from 47 Gbps to 62 Gbps. It was all gobbled up immediately. There's a lovely solid green graph showing how usage grows vertically as each interface comes online until it too is 100% saturated. Looking at the graph legend you can see that their usage for the past 24 hours averages 49.76G on their 50G of transport. To see the pretty pictures follow the below link: https://blog.archive.org/2020/05/11/thank-you-for-helping-us-increase-our-b… Relevant parts from the blog post: "A year ago, usage was 30Gbits/sec. At the beginning of this year, we were at 40Gbits/sec, and we were handling it. ... Then Covid-19 hit and demand rocketed to 50Gbits/sec and overran our network infrastructure’s ability to handle it. So much so, our network statistics probes had difficulty collecting data (hence the white spots in the graphs). We bought a second router with new line cards, and got it installed and running (and none of this is easy during a pandemic), and increased our capacity from 47Gbits/sec peak to 62Gbits/sec peak. And we are handling it better, but it is still consumed." It is obvious that the Internet Archive needs more bandwidth to power the Wayback machine and to fulfill its mission of being the Internet library and the historic archive of our times. The Internet Archive is present at Digital Realty SFO (200 Paul) and a member of the San Francisco Metropolitan Internet Exchange (SFMIX). I appeal to all list members present or capable of getting to these facilities to peer with and/or donate bandwidth to the Internet Archive. I appeal to all vendors and others with equipment that they can donate to the Internet Archive to contact them so that they can scale their services and sustain their growth. The Internet Archive is currently running 10G equipment. If you can help them gain 100G connectivity, 100G routing, 100G switching and/or 100G DWDM capabilities, please reach out to them. They have the infrastructure and dark fiber to transition to 100G, but lack the equipment. You can find the Internet Archive's contact information below or you can contact Jonah at the Archive Org directly either by email or via the contact information available on his Twitter profile @jonahedwards. You can also donate at https://archive.org/donate/ The Internet Archive is a 501(c)(3) non-profit. Donations are tax-deductible. Contact information: https://archive.org/about/contact.php Volunteering: https://archive.org/about/volunteerpositions.php Disclaimer: I am not affiliated with the Internet Archive. Nobody asked me to write this post. If something angers you about this post, be angry at me. I merely think that the Internet Archive is a good thing and deserves our support. Jared

7 7

Alternative for Google Safe Browsing for Network Administrators?
by David Hubbard 12 May '20

12 May '20

Just received notice that Google is eliminating the Safe Browsing for Network Administrators service…. in favor of a new paid alternative; imagine that. Are there recommended similar services out there that will send netblock owners alerts related to suspected compromised websites, malware distribution, C&C, etc. activity? Thanks

2 1

looking for operator validation for regexes that extract ASNs
by Matthew Luckie 11 May '20

11 May '20

Hi NANOG To support Internet topology analysis efforts, we have been working on an algorithm to detect AS numbers inside hostnames (PTR records) for router interfaces, and automatically build regular expressions (regexes) to extract them. Specifically, we are looking at operators who embed the ASN of their neighbor in the hostname when they provide the IP address to the neighbor for interconnection. For example, suppose we had the following three hostnames in the gtt.net domain suffix, which we believed to be assigned to routers operated by ASes 1215, 1273, and 10835 as1215.xe-7-0-6.ar2.sjc1.us.as4436.gtt.net as1273.hkg11.ip4.gtt.net as10835.cr3-sea2.ip4.gtt.net We might infer the regex ^as(\d+)\..+\.gtt\.net$ extracts these ASNs and reflects GTT practice to name these IP addresses they assigned to neighbors with the ASN that operates the router. We're at the stage where we are asking for broader feedback from operators. The webpage at https://www.caida.org/~mjl/rnc/asn/ shows the inferences our algorithm made for 219 domains. If you operate one of the domains in that list, we would appreciate it if you could comment (private is probably better but public is fine with me) on whether the regex our algorithm inferred represents your naming intent. In the first instance, we are most interested in feedback for the suffix / date combinations for suffixes that are colored green or orange, i.e. appear to be reasonable. Each suffix / date combination links to a page that contains the naming convention and corresponding inferences. The colored part of each hostname is the ASN extracted by the regex. The green hostnames appear to be correct, at least as far as the algorithm determined. Some suffixes have errors due to either stale hostnames or incorrect training data, and those hostnames are colored red. We'd appreciate particular feedback for the red hostnames -- was the hostname stale, or the training data incorrect? Thanks, Matthew

2 2

finishline.com
by Bryan Holloway 11 May '20

11 May '20

If anyone from finishline.com is lurking, could you please reach out to me off-line? Our AS seems to be blocked to your web-site as a whole, which appears to be hosted by Akamai. However, the curious thing is that we see this behavior from other IPs not part of our AS, so it's difficult to tell if it's just us, Akamai, or something more systemic. E-mails to various contacts are going unanswered. Thank you!

1 0

NORAD no-fail mission - Cheyenne Mountain complex re-activated
by Sean Donelan 10 May '20

10 May '20

In 2008, NORAD changed its Cheyenne Mount Complex to a backup command center. NORAD's day-to-day early warning mission was moved to Peterson Air Force Base. The Cheyeene Mount Complex was kept ready as a 'warm backup' and skeleton maintenance and training crews. In late February 2020, NORAD split its operation staff into two watch centers and re-activated the Cheyenne Mountain Complex. Crews do not physically interact with the other watch crews to minimize an infection impacting both command centers. When off-duty, they stay in separate quarters in distant areas on Peterson AFB. https://www.stripes.com/news/air-force/to-protect-no-fail-mission-norad-mil… Of course, not everyone has a mountain lair on standby. I've also heard some electric grid operators made similar staffing changes. The ISO operation staff is split into seperate crews, which physically isolate on and off-duty during their 7 or 14-day watches.

1 0