- Test - lists.nanog.org

Responsible blocklist usage
by Claus v. Wolfhausen 08 May '09

08 May '09

Seriously if you want to stop most of the spam with only a very minimal risk of false positives you will have to use a combination of list, because there is really *NO BLOCKLIST* which always does 0 False Positives if measured against an mixed but real mailflow: See: http://stats.uceprotect.net What you see there is the the real mailflow of those UCEPROTECT-customers that have freely chosen to select "Transmit Statistics and nominate Spammers in their Appliances. Actually 45 Systems are running the upcoming Release V4.1 in Betatest and what you see there is their real traffic. What you can't see yet is the traffic from all other customers that are still running the latest official Release V4.07 This is how we are counting Spamtrap hits and also False positives: All Lists are queried at every connection after RCPT TO: Spamtrap hits (Displayed in green): Every mail send to a spamtrap is counted as hit for those blocklists that reports the IP / domain as listed. False positives (Displayed in red): Every mail send to an existing recipient is counted as false positive for those blocklists that report the IP / domain as listed and the sender is in the recipients automatic or manual whitelist. Counters for the nonexisting (virtual) zone: uceprotect.combined are counted ONE only according to the description above if any of the 4 real existing dnsbl-*.uceprotect.net zones would report listed. As you can see the most accurate and effective single blocklist in our comparison is cbl.abuseat.org but even it would have rejected 14 of 8475031 HAM's last week while catching 73.3% spam. That is excellent for a single blocklist, but you can get a better result if you are using following combination of lists: Delay any incoming connection which is listed at dnsbl-0.uceprotect.net aka UCEPROTECT Level 0 with a tempfail (450) after RCPT TO. This is important because Level 0 is a delaylist, not a blocklist. Listings there will expire as soon as an Operator has moved them to UCEPROTECT Level 1 otherwise latest after 3 hours. Block if at least 2 of the following 8 lists are indicating "listed": bl.spamcop.net, cbl.abuseat.org, dnsbl-1.uceprotect.net, dnsbl-2.uceprotect.net, dnsbl-3.uceprotect.net, dnsbl.sorbs.net, ix.dnsbl.manitu.net and psbl.surriel.com. If you follow my instruction, you will end up with a system that has as good as no false positives and will block most of all spams. As always YMMV. -- Claus von Wolfhausen Technical Director UCEPROTECT-Network http://www.uceprotect.net

1 0

UCEProtect Level 3
by Raleigh Apple 08 May '09

08 May '09

Is anyone else out there aware that the UCEProtect Level 3 email blacklist blocks entire AS? r

12 11

Re: UCEProtect Level 3
by Claus v. Wolfhausen 08 May '09

08 May '09

Why do you believe people which are using Level 3 are not aware what it is doing? We have given a very detailed description how it works and also recommendations how to use it. See: http://www.uceprotect.net/en/index.php?m=3&s=5 Additionaly we are writing BIG FAT warnings also into the downloadable zonefile See: http://wget-mirrors.uceprotect.net/rbldnsd-all/dnsbl-3.uceprotect.net gz As you can see we don't make a secret out of what it is: A boycottlist. Therefore we have to assume that those which are using it for blocking do exactly know what they are doing. It clearly depends on where you are and where you expect mail from, if you can or cannot use it for blocking.According to Al Iverson's stats (which didn't get updated since summer 2008) it looks like it is not doing so much false positives if used in North America.See: http://stats.dnsbl.com/uce3 html If used in Germany, Austria or Switzerland it even looks better: See our stats: http://stats.uceprotect.net/week.html Of course it will almost always be necessary to use a whitelist in combination with ASN-Blocking. YMMV Claus von Wolfhausen UCEPROTECT-Network -----Original Message----- From: Raleigh Apple [mailto:rapple at rapidlink.com] Sent: Thursday, May 07, 2009 1:34 PM To: nanog at nanog.org Subject: UCEProtect Level 3 Is anyone else out there aware that the UCEProtect Level 3 email blacklist blocks entire AS? r

4 3

Network performance monitoring tools
by 정치영 08 May '09

08 May '09

Hi, Could anyone recommend a free performance monitoring tool ? I am already using smokeping the best tool provides delay, packet loss and graphical delay variation and so on. But, additionally I would like to periodically measure the jitter of multi destinations. Best regards Chiyoung ============================================= Chi-Young Joung SAMSUNG NETWORKS Inc. Email: lionair(a)samsung.com Tel +82 70 7015 0623, Mobile +82 17 520 9193 Fax +82 70 7016 0031 =============================================

4 3

BGP Update Report
by cidr-report＠potaroo.net 08 May '09

08 May '09

BGP Update Report Interval: 06-Apr-09 -to- 07-May-09 (32 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6389 392748 4.1% 90.1 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 2 - AS3130 137093 1.4% 531.4 -- RGNET-3130 RGnet/PSGnet 3 - AS2386 116477 1.2% 89.6 -- INS-AS - AT&T Data Communications Services 4 - AS8452 112790 1.2% 81.0 -- TEDATA TEDATA 5 - AS6478 86719 0.9% 61.4 -- ATT-INTERNET3 - AT&T WorldNet Services 6 - AS17488 80855 0.8% 51.0 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 7 - AS11492 75669 0.8% 61.4 -- CABLEONE - CABLE ONE, INC. 8 - AS7018 66390 0.7% 43.7 -- ATT-INTERNET4 - AT&T WorldNet Services 9 - AS4323 63847 0.7% 14.8 -- TWTC - tw telecom holdings, inc. 10 - AS19262 59691 0.6% 60.1 -- VZGNI-TRANSIT - Verizon Internet Services Inc. 11 - AS29049 57957 0.6% 179.4 -- DELTA-TELECOM-AS Delta Telecom LTD. 12 - AS9829 55044 0.6% 84.4 -- BSNL-NIB National Internet Backbone 13 - AS35805 54897 0.6% 162.4 -- UTG-AS United Telecom AS 14 - AS21491 54046 0.6% 1743.4 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 15 - AS20115 53058 0.6% 31.2 -- CHARTER-NET-HKY-NC - Charter Communications 16 - AS10796 52523 0.5% 101.6 -- SCRR-10796 - Road Runner HoldCo LLC 17 - AS4755 48911 0.5% 39.0 -- TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 18 - AS8151 45529 0.5% 31.2 -- Uninet S.A. de C.V. 19 - AS12978 37903 0.4% 210.6 -- DOGAN-ONLINE Dogan Iletisim Elektronik Servis Hizmetleri AS 20 - AS33776 36400 0.4% 311.1 -- STARCOMMS-ASN TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS15045 28705 0.3% 9568.3 -- KITTELSON - KITTELSON AND ASSOCIATES, INC. 2 - AS40967 4229 0.0% 4229.0 -- CSF-AS CSF Computersoftware fuer Fachanwendungen GmbH 3 - AS46653 12377 0.1% 4125.7 -- FREDRIKSON---BYRON - Fredrikson & Byron, P.A. 4 - AS32398 20650 0.2% 3441.7 -- REALNET-ASN-1 5 - AS13153 2544 0.0% 2544.0 -- ONEWORLD OneWorld S.A. 6 - AS29229 2444 0.0% 2444.0 -- ASDA-AS Assotiation for the Development of West Athens 7 - AS13325 18957 0.2% 2369.6 -- STOMI - State of Michigan, DMB-CNOC 8 - AS8499 2171 0.0% 2171.0 -- Space Hellas Network Operation Center (NOC) 9 - AS30423 4073 0.0% 2036.5 -- AMEDI-3-ASN1 - Amedisys, Inc. 10 - AS28256 1952 0.0% 1952.0 -- 11 - AS47640 5811 0.1% 1937.0 -- TRICOMPAS Tricomp Sp. z. o. o. 12 - AS5050 25297 0.3% 1806.9 -- PSC-EXT - Pittsburgh Supercomputing Center 13 - AS21491 54046 0.6% 1743.4 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 14 - AS46328 15393 0.2% 1710.3 -- PTCNEBRASKA - PIERCE TELEPHONE COMPANY, INCORPORATED 15 - AS28953 2325 0.0% 1162.5 -- PIRAEUSBANK Greek banking institution 16 - AS14223 2323 0.0% 1161.5 -- NYSDOH - New York State Department of Health 17 - AS48881 1082 0.0% 1082.0 -- DATA-NODE-AS SC Data Node SRL 18 - AS47299 1080 0.0% 1080.0 -- DRSA-AS Dlugie Rozmowy S.A. 19 - AS34321 2081 0.0% 1040.5 -- LDK-AS Institute of strategic marks, Kiev, Ukraine 20 - AS19398 2040 0.0% 1020.0 -- INDENET - Indenet.net TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 72.23.246.0/24 24848 0.2% AS5050 -- PSC-EXT - Pittsburgh Supercomputing Center 2 - 41.204.2.0/24 20294 0.2% AS32398 -- REALNET-ASN-1 3 - 199.45.13.0/24 12357 0.1% AS46653 -- FREDRIKSON---BYRON - Fredrikson & Byron, P.A. 4 - 192.12.120.0/24 10388 0.1% AS5691 -- MITRE-AS-5 - The MITRE Corporation 5 - 63.103.104.0/22 9975 0.1% AS15045 -- KITTELSON - KITTELSON AND ASSOCIATES, INC. 6 - 63.103.108.0/23 9975 0.1% AS15045 -- KITTELSON - KITTELSON AND ASSOCIATES, INC. 7 - 63.103.110.0/24 8755 0.1% AS15045 -- KITTELSON - KITTELSON AND ASSOCIATES, INC. 8 - 123.49.152.0/24 7059 0.1% AS18118 -- CITICNET-AP CITIC Networks Management Co.,Ltd. 9 - 195.96.69.0/24 6592 0.1% AS8225 -- ASTELIT-MSK-AS Astelit Autonomous System 11 - 123.49.144.0/21 6305 0.1% AS18118 -- CITICNET-AP CITIC Networks Management Co.,Ltd. 12 - 94.124.16.0/21 5723 0.1% AS47640 -- TRICOMPAS Tricomp Sp. z. o. o. 13 - 193.201.184.0/21 5630 0.1% AS25546 -- BROOKLANDCOMP-AS Brookland Computer Services 14 - 81.199.18.0/24 5588 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 15 - 81.199.16.0/22 5269 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 16 - 81.199.23.0/24 5262 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 17 - 81.199.22.0/24 5207 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 18 - 196.0.0.0/16 5182 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 19 - 81.199.28.0/22 5144 0.1% AS21491 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 20 - 192.35.129.0/24 5116 0.1% AS6629 -- NOAA-AS - NOAA Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 May '09

08 May '09

This report has been generated at Fri May 8 21:15:47 2009 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-05-09 293917 183484 02-05-09 294085 181319 03-05-09 293622 180638 04-05-09 292601 181458 05-05-09 293746 181941 06-05-09 293836 182155 07-05-09 293603 182383 08-05-09 294143 182320 AS Summary 31275 Number of ASes in routing system 13311 Number of ASes announcing only one prefix 4307 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 89676544 Largest address span announced by an AS (/32s) AS27064: DDN-ASNBLK1 - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08May09 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 294012 182446 111566 37.9% All ASes AS6389 4307 356 3951 91.7% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4267 1747 2520 59.1% TWTC - tw telecom holdings, inc. AS209 2564 1147 1417 55.3% ASN-QWEST - Qwest Communications Corporation AS4766 1808 525 1283 71.0% KIXS-AS-KR Korea Telecom AS17488 1573 297 1276 81.1% HATHWAY-NET-AP Hathway IP Over Cable Internet AS4755 1241 146 1095 88.2% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS22773 1056 67 989 93.7% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS8452 1231 251 980 79.6% TEDATA TEDATA AS1785 1755 802 953 54.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS8151 1449 556 893 61.6% Uninet S.A. de C.V. AS19262 991 239 752 75.9% VZGNI-TRANSIT - Verizon Internet Services Inc. AS18566 1062 421 641 60.4% COVAD - Covad Communications Co. AS6478 1398 806 592 42.3% ATT-INTERNET3 - AT&T WorldNet Services AS18101 756 167 589 77.9% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS11492 1102 535 567 51.5% CABLEONE - CABLE ONE, INC. AS22047 616 99 517 83.9% VTR BANDA ANCHA S.A. AS855 621 110 511 82.3% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS4804 574 66 508 88.5% MPX-AS Microplex PTY LTD AS2706 534 42 492 92.1% HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited AS17676 565 81 484 85.7% GIGAINFRA BB TECHNOLOGY Corp. AS17908 616 142 474 76.9% TCISL Tata Communications AS10620 924 451 473 51.2% TV Cable S.A. AS4808 627 166 461 73.5% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS24560 684 234 450 65.8% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS7018 1463 1015 448 30.6% ATT-INTERNET4 - AT&T WorldNet Services AS7545 806 366 440 54.6% TPG-INTERNET-AP TPG Internet Pty Ltd AS9443 527 98 429 81.4% INTERNETPRIMUS-AS-AP Primus Telecommunications AS6517 660 241 419 63.5% RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc AS7011 960 552 408 42.5% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS4668 688 282 406 59.0% LGNET-AS-KR LG CNS Total 37425 12007 25418 67.9% Top 30 total Possible Bogus Routes 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE, INC. 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 41.223.112.0/22 AS5713 SAIX-NET 41.223.176.0/22 AS36981 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS26452 BRING-AS - BringCom, Inc. 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 64.31.32.0/19 AS11955 SCRR-11955 - Road Runner HoldCo LLC 64.31.59.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.31.60.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 64.147.64.0/19 AS40156 THEOPT-HOU - The Optimal Link Corporation 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.128.38.0/24 AS15246 Telecomunicaciones Satelitales TelesatS.A. 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 100.100.100.0/30 AS38676 AS33005-AS-KR wizsolution co.,Ltd 109.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 109.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 109.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 110.76.156.0/24 AS45062 CNNIC-FKT-AP FEIKE TECH LIMITED 110.76.157.0/24 AS45062 CNNIC-FKT-AP FEIKE TECH LIMITED 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 122.128.120.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 137.0.0.0/13 AS27064 DDN-ASNBLK1 - DoD Network Information Center 150.0.2.0/24 AS9730 BHARTITELESONIC-AS-IN-AP Bharti Telesonic Ltd 150.0.3.0/24 AS9730 BHARTITELESONIC-AS-IN-AP Bharti Telesonic Ltd 150.0.11.0/24 AS9730 BHARTITELESONIC-AS-IN-AP Bharti Telesonic Ltd 158.222.5.0/24 AS21580 DIRCON - Direct Connect 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 168.253.0.0/16 AS13649 ASN-VINS - ViaWest 168.253.0.0/21 AS13649 ASN-VINS - ViaWest 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 178.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.132.58.0/24 AS20141 QUALITYTECH-SUW-300 - Quality Technology Services, LLC. 192.133.6.0/24 AS10282 ORANGE-BUSINESS-SERVICES-CEEUR Orange Business Services (formerly Equant) AS for CEEUR 192.153.144.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 193.33.148.0/23 AS30890 EVOLVA Evolva Telecom 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.73.210.0/24 AS21570 ACI-1 - Accelerated Connections Inc. 198.97.72.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.96.0/19 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.240.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.135.236.0/24 AS4358 XNET - XNet Information Systems, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.161.92.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.5.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 199.10.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.19.0.0/24 AS3848 WORLDLINX-2 - WorldLinx Telecommunications, Inc. 199.114.0.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.128.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.0.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.16.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.80.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.6.176.0/20 AS24316 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS2764 AAPT AAPT Limited 202.122.120.0/21 AS17494 BTTB-AS-AP Telecom Operator & Internet Service Provider as well 202.124.195.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.140.160.0/24 AS4841 202.140.161.0/24 AS4841 202.140.162.0/24 AS4841 202.140.163.0/24 AS4841 202.140.164.0/24 AS4841 202.140.165.0/24 AS4841 202.140.166.0/24 AS4841 202.140.167.0/24 AS4841 202.140.168.0/24 AS4841 202.140.169.0/24 AS4841 202.140.170.0/24 AS4841 202.140.171.0/24 AS4841 202.140.172.0/24 AS4841 202.140.173.0/24 AS4841 202.140.174.0/24 AS4841 202.140.175.0/24 AS4841 202.140.180.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.181.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.182.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecommunications Ltd 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.154.0/23 AS9583 SIFY-AS-IN Sify Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.13.140.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.141.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.142.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.143.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.184.0/23 AS35967 204.13.186.0/23 AS35967 204.13.186.0/24 AS35967 204.13.187.0/24 AS35967 204.19.14.0/23 AS577 BACOM - Bell Canada 204.89.214.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.138.167.0/24 AS18990 AIRBAND-DALLAS - Airband Communications, Inc 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 207.174.0.0/16 AS13790 INTERNAP-BLK3 - Internap Network Services Corporation 207.174.131.0/24 AS30715 NETRACK - Netrack, Inc. 207.174.132.0/23 AS30715 NETRACK - Netrack, Inc. 207.174.151.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.152.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.158.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.177.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.178.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.182.0/24 AS29831 FONENET - FONE NET, LLC 207.174.188.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.192.0/24 AS29831 FONENET - FONE NET, LLC 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.177.93.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.222.5.0/24 AS26699 PSI-CT - Printing For Systems Inc 209.222.6.0/24 AS26699 PSI-CT - Printing For Systems Inc 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.99.20.0/24 AS3356 LEVEL3 Level 3 Communications 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

RE: UCEProtect Level 3
by Skywing 08 May '09

08 May '09

I seem to recall that Mailstreet/MXlogic firewalls off (not rejects at SMTP level) any AS listed in UCEProtect, at least of about a year or so ago. - S -----Original Message----- From: Suresh Ramasubramanian <ops.lists(a)gmail.com> Sent: Thursday, May 07, 2009 22:25 To: Raleigh Apple <rapple(a)rapidlink.com> Cc: nanog(a)nanog.org <nanog(a)nanog.org> Subject: Re: UCEProtect Level 3 On Fri, May 8, 2009 at 12:04 AM, Raleigh Apple <rapple(a)rapidlink.com> wrote: > Is anyone else out there aware that the UCEProtect Level 3 email blacklist > blocks entire AS? > Is there anyone out there aware of any significant (or larger than 'man and his dog on a DSL') mail provider using UCEPROTECT? -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

3 2

None
by Rich Kulawiec 07 May '09

07 May '09

Cc Bcc: Subject: Re: UCEProtect Level 3 Reply-To: In-Reply-To: <20090507161041.f1711126.darcy(a)druid.net> On Thu, May 07, 2009 at 04:10:41PM -0400, D'Arcy J.M. Cain wrote: > It is. I understand what they are trying to do but we were cut off > from some places because someone else in the huge upstream we are with > did something that appeared to be spam. It's too broad of a brush. (a) This discussion should probably be happening someplace other than NANOG (spam-l or mailop, perhaps?), and (b) If you feel that UCEProtect L3 paints with too broad a brush, then you're certainly free not to use it. I happen to agree with you on this particular level of this particular DNSBL for my particular applications, so I don't use it either. However: I'm aware of other folks who are using it quite effectively as *part* of a scoring system. ---Rsk

2 1

Re: Data centre info
by JC Dill 07 May '09

07 May '09

> >> JC Dill <jcdill.lists(a)gmail.com> writes: >> >> >>> Why do you believe that it is proper to deliver the cooling "top >>> down"? Heat rises! The cool air needs to be delivered to the bottom >>> (raised floor) or front (alternate row cooling) so that it flows >>> over/thru the computers on its way to the hot air intakes which should >>> be located above the back of the cabinet (above the "hot row") or top >>> of the room (for raised floors). >>> >> >> This would be true if the computers were all mounted within several >> inches of the floor, but they're not. >> >> Just as heat rises, cold sinks. Discharging cool air up high in a >> data center will cause it to end up where it needs to be for all >> computers in a rack, not just the ones in the bottom. >> In theory, this should work. In theory, there is no difference between theory and practice. In practice, there is. >> Visit any Equinix for an example of this principle in action I disagree, and I've been in several Equinix locations. Computers produce heat / hot air, and this hot air rises. As the hot air rises and moves away from the computers, new air has to circulate in from *somewhere*. There isn't a vacuum of "no air" between the cold air sinking/sitting at the bottom of the room and the hot air rising up to the ceiling. :-) When you have cold air entering the bottom and/or front of a rack, and hot air exiting out the back (and then up) then you don't have cold air mixed with hot air circulating in the room before it gets to the computers. The fans located in the building's hot air intakes, the action of the rising hot air, and the fans blowing the cold air into the data center all create the air flow that pulls the "heavier" cold air up into and across the computers. When you have cold air coming down in the same area with hot air going up, it just mixes up into warm air, and truly cold air never gets to the bottom - you get warm (or hot) air flowing across the bottom computers in the racks. This is not an efficient air flow, and not a good way to keep the hot and cold air separate so you can get cold air (not warm air) flowing over the equipment. It works great for offices full of people (where you want an even temp everywhere in the room) but isn't great for computers (where you want cold air entering the equipment for maximum cooling effect and hot air being removed as quickly as possible.) I've never been happy with the room temps or equipment temps in any data center that used this "blow cold air from the ceiling" approach. But hey, if it works for your equipment, more power to you. I encourage all my competitors to do this. jc

2 1

Data centre info
by Deric Kwok 07 May '09

07 May '09

Hi all Any suggestion about data center 1/ to put on the switch in rack? eg: top. middle or bottom position 2/ There is no raise floor - adv - disadv Thank you for your information

5 4