- Test - lists.nanog.org

Re: SMTP store and forward requires DSN for integrity (was Re:Clueless anti-virus )
by Robert Bonomi 10 Dec '05

10 Dec '05

> From owner-nanog(a)merit.edu Sat Dec 10 06:58:38 2005 > Date: Sat, 10 Dec 2005 12:57:34 +0000 (GMT) > From: "Stephen J. Wilcox" <steve(a)telecomplete.co.uk> > Subject: Re: SMTP store and forward requires DSN for integrity (was Re:Clueless > anti-virus ) > > > On Sat, 10 Dec 2005, Matthew Sullivan wrote: > > > Please remember people.. > > > > RFC 2821 states explicitly that once the receiving server has issued a > > 250 Ok to the end-of-data command, the receiving server has accepted > > responsibility for either delivering the message or notifying the sender > > that it has been unable to deliver. RFC2821 also says that a message > > MUST NOT be dropped for trivial reasons such as lack of storage space > > for the message. To that end is a detected > > virus/trajan/malware/phishing scam etc... a trivial reason to drop the > > message? > > > > Personally I believe that not trivial means not unless the entire server > > crashes and disks fry etc... To that end I am a firm believer that > > malware messages SHOULD BE rejected at the end of the data command > > rfc2821 was written prior to this problem Systems which 'silently discard' virus-infected messages for "policy" reasons are not in violation of RFC 2821, nor even the obseleted 821. "Delivery" of a message does NOT require that the message hit a person's "in box". Trivial proof: mail to an 'autoresponder'. 'Delivery' of any message is handled in accordance with 'policy' established at the receiving site. If policy dictates that that message be routed to the bit-bucket, rather than to the user's mailbox, that message *IS* considered 'delivered', within the context of RFC 2821. > we should also take the rfc in context and differentiate between email sent > between individuals for which the responsibility applies, and email generated by > systems (spam, virus bounces) in which we the providers carry some > responsibility to drop them (okay, it would be better if they didnt exist in the > first place, but thats not reality) if they can be identified in the best > interests of the user > > to not do this is like saying we have a responsibility to ensure end to end > delivery of packets in a DoS attack just because the rules governing routing and > ip stacks dont explicitly cover the use of sinks and filters. > > Steve >

1 0

Re: SMTP store and forward requires DSN for integrity (was Re:Clueless anti-virus )
by Brandon Butterworth 10 Dec '05

10 Dec '05

This is pointless argument, please stop There are those who think they are right in spamming people with reports of a virus they didn't send and the rest of the planet who think they are mad and wish they'd get a clue. > As the recipient of the DSN is _always_ the best > judge whether the DSN was sent to a forged return-path, why not take > advantage of that superior knowledge? because that superior knowledge has already thrown them all away without looking any slight chance of one being valid is wasted If the AV systems that know they are dealing with forged senders, which they do, just dropped them then the volume of potentially valid ones may be low enough that we wouldn't just bin them all If you make it hard we will ignore it. brandon

1 0

Hurricane Katrina communication failures
by Sean Donelan 10 Dec '05

10 Dec '05

http://www.washingtonpost.com/wp-dyn/content/article/2005/12/09/AR200512090… During Katrina, virtually every system failed: Internet communications, radio transmissions, cell phones, even backup gear such as satellite phones handed out by federal relief workers after the storm. Even when the equipment worked, officials from different agencies and jurisdictions could not talk with one another. Their radios were simply not compatible.

1 0

Juniper DNS cache
by Peering 10 Dec '05

10 Dec '05

Dumb question...anyone know how to clear the DNS cache on a Juniper M-20? I looked all through the JUNOS documentation on their website and looked through all the available commands and couldn't find anything. Diane Turley Sr. Network Engineer Xspedius Communications Co. 636-625-7178

2 1

Re: SMTP store and forward requires DSN for integrity (was Re:Clueless anti-virus )
by Robert Bonomi 10 Dec '05

10 Dec '05

> From owner-nanog(a)merit.edu Fri Dec 9 17:10:00 2005 > Cc: "Steven J. Sobol" <sjsobol(a)JustThe.net>, "Geo." <geoincidents(a)nls.net>, > nanog(a)merit.edu > From: Douglas Otis <dotis(a)mail-abuse.org> > Subject: Re: SMTP store and forward requires DSN for integrity (was Re:Clueless anti-virus ) > Date: Fri, 9 Dec 2005 15:08:49 -0800 > To: Todd Vierling <tv(a)duh.org> > > > > On Dec 9, 2005, at 1:12 PM, Todd Vierling wrote: > > > > None of these are my problem. I am a non-involved third party to > > the malware detection software, so I should not be a party to its > > outgoing spew. > > > > I have not requested the virus "warnings" (unsolicited), they are > > being sent via an automated trigger (bulk, by extension of the > > viruses also being bulk), and they are e-mail -- UBE by > > definition. Whether they are also formatted as DSNs or delivered > > like DSNs doesn't take away their UBE status. > > This is a third-party acting in good faith, "In good faith" is _HIGHLY_ debatable. "On blind faith" (that the sender address infor is accurate) is much closer to an accurate description. The aforementioned third parties, being experienced professionals, and even 'experts', in the field *SHOULD* KNOW BETTER than to act in that matter. How can they claim to be experts in the field and _NOT_ be aware of the _probability_ (not just the "possibility) of the sender address being spoofed? AND, *as*experts* in that area, it is incumbant on _them_ to 'act responsibily' on behalf of their clients/customers who are "not so knowledgable" about such matters. > How would the third-party acting in good faith know who really sent > the message?

1 0

Akamai server reliability
by Roy 09 Dec '05

09 Dec '05

Hi, Many moons ago, we got a set of Akamai servers. Over the years I think they replaced every one of them at least once. Last August we got a another set of servers due to a move and now two of those three servers have failed. I still have the original server that started garlic.com in production after 11+ years so I know servers can last a long time. I don't understand why Akamai failure rates are so high Is anyone else seeing high failure rates of Akamai servers at their facilities? Roy

27 32

Weekly Routing Table Report
by Routing Table Analysis 09 Dec '05

09 Dec '05

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 10 Dec, 2005 Analysis Summary ---------------- BGP routing table entries examined: 176382 Prefixes after maximum aggregation: 99292 Unique aggregates announced to Internet: 85551 Total ASes present in the Internet Routing Table: 21109 Origin-only ASes present in the Internet Routing Table: 18376 Origin ASes announcing only one prefix: 8708 Transit ASes present in the Internet Routing Table: 2733 Transit-only ASes present in the Internet Routing Table: 73 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 20 Prefixes from unregistered ASNs in the Routing Table: 10 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1487247552 Equivalent to 88 /8s, 165 /16s and 152 /24s Percentage of available address space announced: 40.1 Percentage of allocated address space announced: 60.4 Percentage of available address space allocated: 66.4 Total number of prefixes smaller than registry allocations: 84709 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 37050 Total APNIC prefixes after maximum aggregation: 15698 Prefixes being announced from the APNIC address blocks: 34782 Unique aggregates announced from the APNIC address blocks: 16957 APNIC Region origin ASes present in the Internet Routing Table: 2433 APNIC Region origin ASes announcing only one prefix: 701 APNIC Region transit ASes present in the Internet Routing Table: 367 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 208250048 Equivalent to 12 /8s, 105 /16s and 164 /24s Percentage of available APNIC address space announced: 77.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 124/7, 126/8, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 93025 Total ARIN prefixes after maximum aggregation: 56083 Prefixes being announced from the ARIN address blocks: 72439 Unique aggregates announced from the ARIN address blocks: 27647 ARIN Region origin ASes present in the Internet Routing Table: 10395 ARIN Region origin ASes announcing only one prefix: 3871 ARIN Region transit ASes present in the Internet Routing Table: 958 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 17 Number of ARIN addresses announced to Internet: 278863872 Equivalent to 16 /8s, 159 /16s and 32 /24s Percentage of available ARIN address space announced: 69.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 34544 Total RIPE prefixes after maximum aggregation: 23346 Prefixes being announced from the RIPE address blocks: 31538 Unique aggregates announced from the RIPE address blocks: 21154 RIPE Region origin ASes present in the Internet Routing Table: 7406 RIPE Region origin ASes announcing only one prefix: 3881 RIPE Region transit ASes present in the Internet Routing Table: 1225 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 20 Number of RIPE addresses announced to Internet: 226658368 Equivalent to 13 /8s, 130 /16s and 136 /24s Percentage of available RIPE address space announced: 67.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 9937 Total LACNIC prefixes after maximum aggregation: 3316 Prefixes being announced from the LACNIC address blocks: 8216 Unique aggregates announced from the LACNIC address blocks: 4798 LACNIC Region origin ASes present in the Internet Routing Table: 657 LACNIC Region origin ASes announcing only one prefix: 209 LACNIC Region transit ASes present in the Internet Routing Table: 122 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 20 Number of LACNIC addresses announced to Internet: 22984448 Equivalent to 1 /8s, 94 /16s and 183 /24s Percentage of available LACNIC address space announced: 34.2 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1820 Total AfriNIC prefixes after maximum aggregation: 849 Prefixes being announced from the AfriNIC address blocks: 1172 Unique aggregates announced from the AfriNIC address blocks: 831 AfriNIC Region origin ASes present in the Internet Routing Table: 144 AfriNIC Region origin ASes announcing only one prefix: 46 AfriNIC Region transit ASes present in the Internet Routing Table: 23 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2892800 Equivalent to 0 /8s, 44 /16s and 36 /24s Percentage of available AfriNIC address space announced: 8.6 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1006 6463 203 CHINANET-BACKBONE 9583 836 77 12 Sify Limited 4755 749 259 72 Videsh Sanchar Nigam Ltd. Aut 1221 671 1366 482 Telstra Pty Ltd 4766 653 3927 287 Korea Telecom (KIX) 7545 510 108 70 TPG Internet Pty Ltd 17676 470 6819 100 Softbank BB Corp. 17488 430 26 11 Hathway IP Over Cable Interne 9498 412 216 67 BHARTI BT INTERNET LTD. 9443 401 88 86 Primus Telecommunications 4802 346 74 159 Wantree Development 2907 340 1764 317 SINET Japan 9929 331 217 49 China Netcom Corp. 17557 329 24 160 Pakistan Telecom 18302 329 152 25 SK Global co., Ltd 7474 325 225 224 SingTel Optus Pty Ltd 17974 280 65 16 PT TELEKOMUNIKASI INDONESIA 18101 280 68 19 Reliance Infocom Ltd Internet 9837 274 78 173 Powertel Ltd 9800 255 410 67 CHINA UNICOM ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1471 6305 967 AT&T WorldNet Services 4323 1190 706 231 Time Warner Telecom 174 1058 5827 976 Cogent Communications 721 1054 21922 308 DLA Systems Automation Center 701 987 8118 830 UUNET Technologies, Inc. 6197 971 434 505 BellSouth Network Solutions, 2386 915 531 688 AT&T Data Communications Serv 18566 882 240 7 Covad Communications 1239 839 2800 593 Sprint 20115 657 535 343 Charter Communications 209 656 3606 520 Qwest 11492 632 89 11 Cable One 22773 590 1477 29 Cox Communications, Inc. 852 573 1092 381 Telus Advanced Communications 19262 569 1608 140 Verizon Global Networks 855 564 247 66 Canadian Research Network 19916 563 49 54 OLM LLC 3602 532 126 103 Sprint Canada, Inc. 3356 531 10619 411 Level 3 Communications, LLC 6478 503 1434 281 AT&T Worldnet Services RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 603 1958 477 UUNET - Commercial IP service 3301 306 1085 292 TeliaNet Sweden 3320 287 3231 242 Deutsche Telekom AG 8220 271 474 266 COLT Telecommunications 680 244 2040 238 DFN-IP service G-WiN 8708 233 274 215 Romania Data Systems S.A. 3246 226 469 219 Song Networks 6746 201 51 172 Dynamic Network Technologies, 1257 189 712 170 SWIPnet Swedish IP Network 3269 182 1829 68 TELECOM ITALIA 5515 180 840 127 Sonera Solution Autonomous Sy 786 174 1795 174 The JANET IP Service 5400 166 317 136 BT Ignite European Backbone 8866 163 37 9 Bulgarian Telecommunication C 6830 161 669 33 UPC Distribution Services 3300 159 169 93 AUCS Communications Services 12479 157 322 5 Uni2 Autonomous System 24863 156 38 9 LINKdotNET AS number 3215 155 1323 79 France Telecom Transpac 9121 149 417 23 TTnet Autonomous System LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 393 707 168 UniNet S.A. de C.V. 16814 295 18 7 NSS, S.A. 11172 289 106 74 Servicios Alestra S.A de C.V 19632 198 14 5 Metropolis Intercom S.A. 14117 184 11 6 Telefonica del Sur S.A. 22047 179 128 7 VTR PUNTO NET S.A. 13999 175 52 9 Mega Cable S.A. de C.V. 7303 152 72 19 Telecom Argentina Stet-France 6147 150 118 21 Telefonica Del Peru 11664 139 22 13 Keytech SA 11556 132 64 3 Cable-Wireless Panama 19169 127 8 20 Telconet 10481 121 48 8 Prima S.A. 6503 114 148 75 AVANTEL, S.A. 18822 114 8 11 TELEFONICA MANQUEHUE 5639 112 12 9 Telecommunications Services o 21826 112 14 18 INTERCABLE 6505 106 88 79 Global One Communicaoes Ltda 11311 99 8 10 Sinectis S.A. 4270 94 17 9 Red de Interconexion Universi AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 271 812 229 The Internet Solution 8452 147 44 7 TEDATA 5536 122 8 16 Internet Egypt Network 2018 117 298 103 Tertiary Education Network 15475 102 84 4 Nile Online 2905 74 155 67 The Internetworking Company o 6713 69 71 10 Itissalat Al-MAGHRIB 20928 61 16 2 Noor Advanced Technologies AS 24835 59 34 6 RAYA Telecom - Egypt 5713 38 151 34 Telkom SA Ltd 33774 33 4 24 AS Number for Telecom Algeria 15706 31 8 3 Sudatel Internet Exchange Aut 8524 23 1 4 AUCEGYPT Autonomous System 16637 23 10 21 Johnnic e-Ventures 23889 23 5 9 MAURITIUS TELECOM 10798 22 1 13 Standard Bank of South Africa 21280 22 4 4 Swift Global Kenya Ltd.Is an 12455 18 6 5 Jambonet Autonomous system 12258 17 3 11 Vodacom Internet Company 15808 17 2 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1190 959 Time Warner Telecom 18566 882 875 Covad Communications 9583 836 824 Sify Limited 4134 1006 803 CHINANET-BACKBONE 721 1054 746 DLA Systems Automation Center 4755 749 677 Videsh Sanchar Nigam Ltd. Aut 11492 632 621 Cable One 22773 590 561 Cox Communications, Inc. 19916 563 509 OLM LLC 855 564 498 Canadian Research Network 6197 971 466 BellSouth Network Solutions, 5668 492 445 CenturyTel Internet Holdings, 7545 510 440 TPG Internet Pty Ltd 19262 569 429 Verizon Global Networks 3602 532 429 Sprint Canada, Inc. 17488 430 419 Hathway IP Over Cable Interne 17676 470 370 Softbank BB Corp. 4766 653 366 Korea Telecom (KIX) 6467 411 363 E.Spire Communications, Inc. 9498 412 345 BHARTI BT INTERNET LTD. List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 38976 UNALLOCATED 62.192.224.0/19 21166 Satgate autonomous s 38976 UNALLOCATED 62.192.232.0/24 21166 Satgate autonomous s 38972 UNALLOCATED 80.251.144.0/21 28947 CJSC InT, Ekaterinbu 38972 UNALLOCATED 80.251.151.0/24 28947 CJSC InT, Ekaterinbu 38972 UNALLOCATED 80.251.152.0/23 28947 CJSC InT, Ekaterinbu 24413 UNALLOCATED 202.46.32.0/19 17623 China Netcom Corp. 24408 UNALLOCATED 203.119.26.0/24 9800 CHINA UNICOM 24408 UNALLOCATED 203.119.27.0/24 9800 CHINA UNICOM 24408 UNALLOCATED 203.119.28.0/24 9800 CHINA UNICOM 24406 UNALLOCATED 203.119.29.0/24 4808 CNCGROUP IP network: Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.72.0.0/18 4780 Digital United Inc. 192.72.0.0/16 4780 Digital United Inc. 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:5 /10:8 /11:19 /12:86 /13:190 /14:343 /15:669 /16:8614 /17:2910 /18:4916 /19:11092 /20:12229 /21:10298 /22:13543 /23:14675 /24:95835 /25:352 /26:271 /27:207 /28:25 /29:12 /30:30 /31:3 /32:31 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 866 882 Covad Communications 6197 785 971 BellSouth Network Solutions, 7018 726 1471 AT&T WorldNet Services 9583 659 836 Sify Limited 2386 637 915 AT&T Data Communications Serv 11492 623 632 Cable One 4323 570 1190 Time Warner Telecom 19916 557 563 OLM LLC 4766 458 653 Korea Telecom (KIX) 855 436 564 Canadian Research Network 7011 402 466 Citizens Utilities 702 386 603 UUNET - Commercial IP service 5668 384 492 CenturyTel Internet Holdings, 1239 364 839 Sprint 6198 354 493 BellSouth Network Solutions, 15270 325 352 PaeTec.net -a division of Pae 6517 322 347 Yipes Communications, Inc. 22773 305 590 Cox Communications, Inc. 13609 298 340 Choice One Communications Inc 18302 298 329 SK Global co., Ltd Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:3 8:40 12:1626 13:1 15:11 16:3 17:3 18:3 20:42 24:711 30:2 32:73 38:186 40:54 44:3 47:3 52:4 55:1 56:3 57:34 58:99 59:109 60:166 61:813 62:812 63:1893 64:2918 65:2141 66:2902 67:597 68:686 69:1340 70:246 71:38 72:482 73:8 80:685 81:606 82:508 83:328 84:336 85:395 86:222 87:115 125:137 128:150 129:167 130:100 131:304 132:34 133:1 134:151 135:45 136:173 137:63 138:175 139:76 140:447 141:146 142:404 143:148 144:220 145:34 146:304 147:134 148:272 149:187 150:109 151:72 152:115 153:94 154:5 155:181 156:90 157:120 158:148 159:174 160:85 161:74 162:242 163:176 164:184 165:180 166:147 167:241 168:469 169:142 170:308 171:12 192:5762 193:3335 194:2436 195:1666 196:714 198:3911 199:3263 200:4236 201:471 202:6353 203:6611 204:3835 205:2078 206:2430 207:2920 208:2026 209:3436 210:1779 211:804 212:1242 213:1387 214:313 215:39 216:3763 217:1170 218:226 219:128 220:544 221:331 222:135 End of report

1 0

The Cidr Report
by cidr-report＠potaroo.net 09 Dec '05

09 Dec '05

This report has been generated at Fri Dec 9 21:46:44 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 02-12-05 173338 115455 03-12-05 173496 115437 04-12-05 173359 115462 05-12-05 173453 115444 06-12-05 173453 115376 07-12-05 173358 115368 08-12-05 173369 115518 09-12-05 173462 115525 AS Summary 21018 Number of ASes in routing system 8719 Number of ASes announcing only one prefix 1924 Largest number of prefixes announced by an AS AS8151 : Uninet S.A. de C.V. 91245568 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 09Dec05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 175158 115810 59348 33.9% All ASes AS8151 1924 537 1387 72.1% Uninet S.A. de C.V. AS4323 1184 236 948 80.1% TWTC - Time Warner Telecom AS18566 882 8 874 99.1% COVAD - Covad Communications AS4134 1004 249 755 75.2% CHINANET-BACKBONE No.31,Jin-rong Street AS721 1056 313 743 70.4% DLA-ASNBLOCK-AS - DoD Network Information Center AS22773 589 35 554 94.1% CCINET-2 - Cox Communications Inc. AS855 564 66 498 88.3% CANET-ASN-4 - Canadian Research Network AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS7018 1458 963 495 34.0% ATT-INTERNET4 - AT&T WorldNet Services AS3602 532 104 428 80.5% SPRINT-CA-AS - Sprint Canada Inc. AS6197 969 579 390 40.2% BATI-ATL - BellSouth Network Solutions, Inc AS11492 632 252 380 60.1% CABLEONE - CABLE ONE AS17676 470 101 369 78.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS17488 428 70 358 83.6% HATHWAY-NET-AP Hathway IP Over Cable Internet AS6467 406 49 357 87.9% ESPIRECOMM - e.spire Communications, Inc. AS812 370 27 343 92.7% ROGERS-CABLE - Rogers Cable Inc. AS4755 603 275 328 54.4% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS4766 616 289 327 53.1% KIXS-AS-KR Korea Telecom AS9498 415 91 324 78.1% BBIL-AP BHARTI BT INTERNET LTD. AS15270 347 30 317 91.4% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS9583 835 520 315 37.7% SIFY-AS-IN Sify Limited AS14654 292 6 286 97.9% WAYPORT - Wayport AS16814 295 31 264 89.5% NSS S.A. AS6167 326 63 263 80.7% CELLCO-PART - Cellco Partnership AS9929 319 56 263 82.4% CNCNET-CN China Netcom Corp. AS5668 489 227 262 53.6% AS-5668 - CenturyTel Internet Holdings, Inc. AS11172 396 135 261 65.9% Alestra AS18101 280 23 257 91.8% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS6140 431 189 242 56.1% IMPSAT-USA - ImpSat AS1239 833 592 241 28.9% SPRINTLINK - Sprint Total 19508 6181 13327 68.3% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.78.0/24 AS25994 NPG-001 - NPG Cable, INC 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.38.96.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 64.127.128.0/17 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.224.0/20 AS3356 LEVEL3 Level 3 Communications 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.0.0/21 AS30033 NHI-NETWORKS - NHI Networks 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.117.9.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.16.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.18.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.20.0/24 AS30085 NHI-COLOCATIONS - New Horizon Collocations 66.117.21.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.23.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.25.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.26.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.27.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.186.192.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.216.0.0/18 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 70.47.0.0/17 AS8001 NET-ACCESS-CORP - Net Access Corporation 85.129.3.0/24 AS14585 CIFNET - CIFNet, Inc. 85.129.4.0/24 AS14585 CIFNET - CIFNet, Inc. 88.196.0.0/16 AS3249 ESTPAK Estonian Telephone Company Ltd. 90.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.72.0.0/16 AS4780 SEEDNET Digital United Inc. 192.72.0.0/18 AS4780 SEEDNET Digital United Inc. 192.72.192.0/18 AS4780 SEEDNET Digital United Inc. 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 AFRINIC African Network Information Center 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.0.246.0/24 AS3303 SWISSCOM Swisscom Solutions Ltd 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.59.178.0/24 AS8481 TRANSNET transnet INTERNET Services 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.66.75.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.131.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.46.0/23 AS17747 ZIML-AP ZEE INTERACTIVE MUTIMEDIA LTD., BANGALORE 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.133.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.138.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.145.0/24 AS4637 REACH Reach Network Border AS 203.89.146.0/24 AS4637 REACH Reach Network Border AS 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.135.0.0/16 AS8151 Uninet S.A. de C.V. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 208.138.48.0/20 AS6971 ESCH - Eschelon Telecommunications, Inc. 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.97.64.0/19 AS6132 INGRESSNET - Ingress Enterprises, Inc w/ Ingress Communications, Inc. 209.112.224.0/20 AS19817 DSLEXTREME - DSL Extreme 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Receiving route with metric 0
by Glen Kent 07 Dec '05

07 Dec '05

Nanogers, We are running RIP on one of our small cutomer routers and we are receiving routes with RIP metric 0. Is this valid? I thought each RIP router sends a metric of atleast 1, which is also what the RIP RFC seems to suggest. Has anyone ever come across such a scenario, i.e seeing RIP routes with metric 0? Thanks, Kent

4 6

Re: BGP Security and PKI Hierarchies
by Sandy Murphy 07 Dec '05

07 Dec '05

Michael Dillon said: >The fees are not charged for past services that were >received for free, only for future services. So you are saying that legacy space holder who signed a memberhsip agreement would not owe the usual yearly fee associated with their legacy space holdings but only those fees associated with any future address space allocations/assignments? I imagine that would please the legacy space holders. Do you know that this would be the case? I'm not a registry canon law expert myself. --Sandy

9 12