- Test - lists.nanog.org

A blatant podcast plug
by Dave Taht 10 Mar '23

10 Mar '23

I rather enjoyed doing this podcast a few weeks ago, (and enjoy this podcast a lot, generally), and it talks to what I've been up to for the past year or so on fixing bufferbloat for ISPs. https://packetpushers.net/podcast/heavy-networking-666-improving-quality-of… I am kind of curious as to how much XDP and EBPF now exist in the nanog universe and other applications y'all are finding for it? -- Come Heckle Mar 6-9 at: https://www.understandinglatency.com/ Dave Täht CEO, TekLibre, LLC

5 6

Request for additional data points
by Etienne-Victor Depasquale 10 Mar '23

10 Mar '23

Good people, Last year, I collected some data for my study from this list. I published a summary of the data for a short time and recently sent a snapshot regarding metro area access technologies. I am currently writing my paper and would love to have some additional data points. If anyone who has ***not yet contributed*** would like to do so, I am still collecting data here: https://forms.gle/ypcCZvrHbKXRbXqn9 Sincerely, Etienne -- Ing. Etienne-Victor Depasquale Assistant Lecturer Department of Communications & Computer Engineering Faculty of Information & Communication Technology University of Malta Web. https://www.um.edu.mt/profile/etiennedepasquale

1 0

My "N87 Moment" PC Shares Favorites + More
by Nanog News 09 Mar '23

09 Mar '23

*What Was Your N87 Moment?* *PC Recalls Their Favorite NANOG 87 Moment* The NANOG Programming Committee shares personal stories that made our most recent meeting memorable. What was your NANOG 87 Moment? Please email us at news(a)nanog.org. *READ NOW <https://www.nanog.org/stories/pc-recalls-nanog-87-favorite-moments/>* *NANOG 87 Pictures are LIVE!* *Check out our NANOG 87 Photo Album on Flickr * *VIEW NOW <https://www.flickr.com/photos/nanog/albums>* *NANOG Joins CaribNog 25* *CaribNOG 25 took place as Part of the Grenada ICT Week Technical ForumWatch the streamed footage of the final day of events. * *WATCH NOW <https://www.youtube.com/watch?v=DR-sGvSY3PE>* *NANOG 88 Sponsorships Available! * *Invest in the Strength of the Community We've Built* Our in-person conferences draw up to 1,500 individuals in multiple facets of network engineering, operations, and architecture, who gather with us in major cities across North America. Find out more about types of sponsorships + sponsorship opportunities! *VIEW NOW <https://www.nanog.org/participate/types-sponsorship/in-person-conferences/>*

1 0

NetElastic
by Travis Garrison 09 Mar '23

09 Mar '23

Anyone here running NetElastic? If so, what are your opinions on it. vBNG and CGNAT. Thank you Travis

1 0

Spoofer Report for NANOG for Feb 2023
by CAIDA Spoofer Project 08 Mar '23

08 Mar '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Feb 2023: none inferred Source Address Validation issues inferred during Feb 2023: ASN Name First-Spoofed Last-Spoofed 3356 LEVEL3 2016-03-06 2023-02-20 54825 PACKET 2016-04-15 2023-02-11 40065 CNSERVERS 2016-05-01 2023-02-27 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2023-02-22 20412 CLARITY-TELECOM 2016-09-30 2023-02-28 6181 FUSE-NET 2016-10-10 2023-02-25 25787 ROWE-NETWORKS 2016-10-21 2023-02-23 10796 TWC-10796-MIDWEST 2016-10-24 2023-02-22 271 BCNET 2016-10-24 2023-02-10 1403 EBOX 2016-11-12 2023-02-13 852 ASN852 2017-04-16 2023-02-20 7122 MTS-ASN 2017-05-16 2023-02-17 33452 RW 2018-09-19 2023-02-28 21804 ACCESS-SK 2019-06-09 2023-02-26 398836 2021-03-12 2023-02-27 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2023-02-20 44570 SEI-EUROPE-KFT 2022-05-07 2023-02-27 394414 E2WS 2022-05-08 2023-02-28 397086 GLOBAL-FRAG-NETWORKS-HOUSTON 2022-06-16 2023-02-27 11976 FIDN 2022-11-16 2023-02-22 12183 TALKIE-COMMUNICATIONS 2022-12-10 2023-02-21 21555 LHTC 2023-01-01 2023-02-24 33185 TGLO-VGLO 2023-02-04 2023-02-04 399852 2023-02-16 2023-02-26 62005 AdNet-Telecom 2023-02-27 2023-02-27 210546 2023-02-27 2023-02-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NY Verizon FIOS IPv6 routing issue
by Robert Blayzor 08 Mar '23

08 Mar '23

Any Verizon IP engineers lurking on this list that can contact me about a recurring and chronic IPv6 routing issue in the upstate NY Verizon FIOS network. Getting feedback from several customers that have valid IPv6 PD from FIOS but routing is broken 2-3 hops out in Verizons network. This is causing major service issues with anyone that has IPv6 enabled. Happy to provide details or work the proper channels; if only you could easily find that information... -- inoc.net!rblayzor Email: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

1 0

Re: Re[2]: RFC6598 100.64/10: to bogon or not to bogon (team-cymru et all)
by Lukas Tribus 08 Mar '23

08 Mar '23

Hello, > It is just that, marketing. I disagree, authoritative and accurate product description and documentation of the tools used by the public matter a lot. If a ticket lands on my desk because a third party misuses a tool, I want to point to a single authoritative source of information. > It doesn't mean you have to follow it to the letter. I know that, you know that. That doesn't solve my problem. What solves my problem is accurate documentation and education. > Why not take this up with them Team Cymru directly? This is an operational networking issue that goes beyond the bogon list of Team Cymru. I am now in contact with Team Cymru, to improve the situation there, but that is just an example. My intention is to explain the problem and educate. Thanks, Lukas

1 0

Request for comments
by Etienne-Victor Depasquale 08 Mar '23

08 Mar '23

Good people of NANOG, Please find here <https://drive.google.com/file/d/1eZZeqbDaTj6nSJJDdK0iu5Xm9Z_691rR/view?usp=…> a snapshot of two datasets concerning access technologies in the metro area. The bar chart on the right summarizes data I collected last year from *NOGs; the bar chart on the left summarizes data received last year from Tier 1 and/or regional operators (incumbents). The y-axis shows cumulative responses for an option; the x-axis shows (hopefully unambiguous) monikers for the access technologies. Would anyone care to comment on how well this matches his/her perception of the current state of deployments? Cheers, Etienne -- Ing. Etienne-Victor Depasquale Assistant Lecturer Department of Communications & Computer Engineering Faculty of Information & Communication Technology University of Malta Web. https://www.um.edu.mt/profile/etiennedepasquale

2 4

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 03 Mar '23

03 Mar '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 04 Mar, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 915877 Prefixes after maximum aggregation (per Origin AS): 346961 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 446240 Total ASes present in the Internet Routing Table: 74173 Prefixes per ASN: 12.35 Origin-only ASes present in the Internet Routing Table: 63640 Origin ASes announcing only one prefix: 26126 Transit ASes present in the Internet Routing Table: 10533 Transit-only ASes present in the Internet Routing Table: 445 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1039 Number of instances of unregistered ASNs: 1055 Number of 32-bit ASNs allocated by the RIRs: 41345 Number of 32-bit ASNs visible in the Routing Table: 34262 Prefixes from 32-bit ASNs in the Routing Table: 167731 Number of bogon 32-bit ASNs visible in the Routing Table: 39 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 532 Number of addresses announced to Internet: 3063466752 Equivalent to 182 /8s, 152 /16s and 203 /24s Percentage of available address space announced: 82.7 Percentage of allocated address space announced: 82.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 306375 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 242621 Total APNIC prefixes after maximum aggregation: 69112 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 237131 Unique aggregates announced from the APNIC address blocks: 97910 APNIC Region origin ASes present in the Internet Routing Table: 13342 APNIC Prefixes per ASN: 17.77 APNIC Region origin ASes announcing only one prefix: 3892 APNIC Region transit ASes present in the Internet Routing Table: 1801 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8617 Number of APNIC addresses announced to Internet: 773691776 Equivalent to 46 /8s, 29 /16s and 153 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 267916 Total ARIN prefixes after maximum aggregation: 121637 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 270075 Unique aggregates announced from the ARIN address blocks: 130267 ARIN Region origin ASes present in the Internet Routing Table: 19058 ARIN Prefixes per ASN: 14.17 ARIN Region origin ASes announcing only one prefix: 6966 ARIN Region transit ASes present in the Internet Routing Table: 1960 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4745 Number of ARIN addresses announced to Internet: 1286859264 Equivalent to 76 /8s, 179 /16s and 234 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 257386 Total RIPE prefixes after maximum aggregation: 121252 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 253796 Unique aggregates announced from the RIPE address blocks: 156624 RIPE Region origin ASes present in the Internet Routing Table: 28232 RIPE Prefixes per ASN: 8.99 RIPE Region origin ASes announcing only one prefix: 12007 RIPE Region transit ASes present in the Internet Routing Table: 3949 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11050 Number of RIPE addresses announced to Internet: 718465920 Equivalent to 42 /8s, 210 /16s and 235 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 117790 Total LACNIC prefixes after maximum aggregation: 28486 LACNIC Deaggregation factor: 4.14 Prefixes being announced from the LACNIC address blocks: 117129 Unique aggregates announced from the LACNIC address blocks: 48798 LACNIC Region origin ASes present in the Internet Routing Table: 10981 LACNIC Prefixes per ASN: 10.67 LACNIC Region origin ASes announcing only one prefix: 2664 LACNIC Region transit ASes present in the Internet Routing Table: 2277 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8779 Number of LACNIC addresses announced to Internet: 176559104 Equivalent to 10 /8s, 134 /16s and 20 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29125 Total AfriNIC prefixes after maximum aggregation: 5708 AfriNIC Deaggregation factor: 5.10 Prefixes being announced from the AfriNIC address blocks: 37214 Unique aggregates announced from the AfriNIC address blocks: 12218 AfriNIC Region origin ASes present in the Internet Routing Table: 1726 AfriNIC Prefixes per ASN: 21.56 AfriNIC Region origin ASes announcing only one prefix: 597 AfriNIC Region transit ASes present in the Internet Routing Table: 334 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 30 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1071 Number of AfriNIC addresses announced to Internet: 107562240 Equivalent to 6 /8s, 105 /16s and 69 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9463 8884 51 CHINAMOBILE-CN China Mobile Communicati 7545 5797 786 692 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4862 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3680 1331 21 VIETEL-AS-AP Viettel Group, VN 7713 3533 1043 65 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3374 1874 95 VNPT-AS-VN VNPT Corp, VN 9498 2795 499 238 BBIL-AP BHARTI Airtel Ltd., IN 4766 2553 11251 591 KIXS-AS-KR Korea Telecom, KR 24560 2358 836 440 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2184 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 8040 10755 2872 AMAZON-02, US 11492 4517 299 627 CABLEONE, US 7155 3958 270 43 VIASAT-SP-BACKBONE, US 22773 3652 3064 290 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3504 1320 64 SHAW, CA 16625 3305 1661 2430 AKAMAI-AS, US 749 3033 50571 2300 DNIC-AS-00749, US 396982 2620 3586 356 GOOGLE-CLOUD-PLATFORM, US 7018 2565 24120 1572 ATT-INTERNET4, US 30036 2540 364 392 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7064 1706 146 UNI2-AS, ES 39891 4561 269 58 ALJAWWALSTC-AS, SA 20940 4056 3399 175 AKAMAI-ASN1, NL 8551 3900 370 37 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2950 2292 911 ROSTELECOM-AS, RU 9009 2657 252 1378 M247, RO 34984 2264 359 608 TELLCOM-AS, TR 6849 2164 339 19 UKRTELNET, UA 58224 1847 949 546 TCI, IR 13188 1607 100 27 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11223 3349 585 Uninet S.A. de C.V., MX 10620 3466 504 876 Telmex Colombia S.A., CO 13999 2264 369 603 Mega Cable, S.A. de C.V., MX 11830 2261 369 64 Instituto Costarricense de Electricidad 28573 1341 2325 254 Claro NXT Telecomunicacoes Ltda, BR 3816 1298 757 159 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6503 1298 339 513 Axtel, S.A.B. de C.V., MX 6147 1128 370 22 Telefonica del Peru S.A.A., PE 11664 1098 180 458 Techtel LMDS Comunicaciones Interactiva 26615 1026 2498 45 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1551 393 19 LINKdotNET-AS, EG 24835 1528 533 30 RAYA-AS, EG 36992 1345 1517 276 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 1010 67 53 ORANGE-COTE-IVOIRE, CI 36935 854 520 42 Vodafone-, EG 6713 549 1861 34 IAM-AS, MA 15399 527 54 46 WANANCHI-, KE 24757 493 73 5 EthioNet-AS, ET 37342 493 32 1 MOVITEL, MZ Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11223 3349 585 Uninet S.A. de C.V., MX 9808 9463 8884 51 CHINAMOBILE-CN China Mobile Communicati 16509 8040 10755 2872 AMAZON-02, US 12479 7064 1706 146 UNI2-AS, ES 7545 5797 786 692 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4862 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4561 269 58 ALJAWWALSTC-AS, SA 11492 4517 299 627 CABLEONE, US 20940 4056 3399 175 AKAMAI-ASN1, NL 7155 3958 270 43 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9463 9412 CHINAMOBILE-CN China Mobile Communications Grou 12479 7064 6918 UNI2-AS, ES 16509 8040 5168 AMAZON-02, US 7545 5797 5105 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4862 4787 ERX-CERNET-BKB China Education and Research Net 39891 4561 4503 ALJAWWALSTC-AS, SA 7155 3958 3915 VIASAT-SP-BACKBONE, US 11492 4517 3890 CABLEONE, US 20940 4056 3881 AKAMAI-ASN1, NL 8551 3900 3863 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 3507 UNALLOCATED 5.105.166.0/24 213035 AS-SERVERION Serverion B.V., 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 16641 UNALLOCATED 8.10.194.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.10.210.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.12.250.0/24 3356 LEVEL3, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 1618 UNALLOCATED 8.21.143.0/24 136796 CL-JP-AS CORELINK JAPAN, JP 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.185.0/24 Origin: 174 COGENT-174, US 23.131.185.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.186.0/24 Origin: 174 COGENT-174, US 23.131.186.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.187.0/24 Origin: 174 COGENT-174, US 23.131.187.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.188.0/24 Origin: 174 COGENT-174, US 23.131.188.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.136.112.0/24 Origin: 54835 UNASSIGNED 23.136.112.0/24 Transit: 21559 OSNET, PR Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:39 /11:103 /12:299 /13:580 /14:1202 /15:2040 /16:13479 /17:8283 /18:13847 /19:25192 /20:44372 /21:51820 /22:109962 /23:97531 /24:546277 /25:822 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6121 7064 UNI2-AS, ES 8151 5224 11223 Uninet S.A. de C.V., MX 39891 3552 4561 ALJAWWALSTC-AS, SA 11492 3433 4517 CABLEONE, US 8551 3372 3900 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3312 3504 SHAW, CA 7155 3035 3958 VIASAT-SP-BACKBONE, US 22773 2697 3652 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2197 2540 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2020 3466 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1683 2:1241 3:168 4:5 5:4335 6:115 7:6 8:1555 9:1 11:172 12:1583 13:391 14:2337 15:293 16:111 17:365 18:398 20:249 21:4 22:188 23:6108 24:2489 25:4 27:2525 29:19 31:2505 32:107 34:8 35:106 36:1919 37:4604 38:4281 39:865 40:152 41:4031 42:1094 43:2343 44:305 45:16415 46:4175 47:381 49:1747 50:1830 51:386 52:1584 54:386 55:862 56:8 57:90 58:1746 59:1170 60:981 61:2436 62:2640 63:1939 64:5627 65:2322 66:4933 67:3030 68:1353 69:4143 70:1270 71:664 72:2976 74:2600 75:1458 76:605 77:2417 78:1851 79:3174 80:2059 81:1733 82:1504 83:1236 84:1532 85:3015 86:757 87:1955 88:1247 89:3623 90:610 91:7674 92:2012 93:2585 94:3507 95:3955 96:1328 97:331 98:1165 99:745 100:77 101:1061 102:2627 103:31048 104:4588 105:483 106:915 107:2541 108:932 109:4391 110:2100 111:3319 112:2045 113:1552 114:1628 115:2043 116:1919 117:2567 118:2276 119:1964 120:1771 121:1115 122:2591 123:2186 124:1586 125:2435 128:1328 129:1071 130:996 131:2011 132:790 133:421 134:1907 135:299 136:863 137:939 138:2581 139:1547 140:1198 141:1467 142:1428 143:1485 144:1209 145:356 146:1906 147:1559 148:2245 149:1929 150:919 151:1147 152:1846 153:487 154:4243 155:1429 156:1674 157:1292 158:1021 159:2266 160:2564 161:1444 162:3549 163:1495 164:1598 165:1678 166:856 167:1723 168:3847 169:924 170:4585 171:900 172:3505 173:2969 174:1015 175:1164 176:3741 177:4747 178:3614 179:2185 180:2385 181:3417 182:3428 183:1936 184:2351 185:20075 186:4679 187:4017 188:4148 189:3637 190:9108 191:1500 192:10962 193:8825 194:7230 195:5126 196:3065 197:2392 198:5958 199:6092 200:7774 201:5879 202:10697 203:10174 204:4601 205:3526 206:3860 207:3442 208:4081 209:4865 210:4464 211:2499 212:4096 213:3560 214:1096 215:55 216:6590 217:2650 218:1287 219:582 220:2018 221:972 222:872 223:2147 End of report

1 0

Mail Sending Self-Test Platform
by Tobias Fiebig 03 Mar '23

03 Mar '23

Heho, after our paper on mail sending configurations some time ago [1], we now glued that together into a self-service site: https://email-security-scans.org/ Even though some of you might have already seen this at the APNIC blog or on other lists, i though i'd still drop it here as well, especially given that it includes a full IPv6 readiness test for mail infra (recursive DNS, authoritative DNS, and v6 mail delivery ;-)). I'd be happy to hear your feedback, especially if things do not work as expected (then, your test ID and ideally stored emails would be really helpful, so i can double check what went wrong). More details below (also see [2] for an overview of the tests we run). Please note that setting up the tests (as we have to configure vhosts for some MTA-STS cases etc.) takes some time on our site. The test-site should periodically reload and provide the status. As we use JS for that part, please reload it manually every few minutes if you block JS. I would also be interested to hear what you think should be included in addition to the current tests; Some of our plans for the future below as well. We already found some interesting bits, like Vultr having lame v6 delegation for their AuthNS servers' domain, making their domain and rDNS non v6-resolvable [3], or mail-in-a-box using relaxed/simple for DKIM, which breaks signature validity on long To: headers [4]. If you want me to block certain domains/IPv(4|6) ranges or ASes for the service to keep your users from using it, please let me know and i will implement it asap. # Overview The site tests a variety of parameters about mail sending (details: [2]), by evaluating mails a user sends us in reply to a message that can be requested on the site. Simply requesting a message on the site does not start any evaluation or measurements, i.e., you have to send a reply-all to a requested message to start the evaluation. After the test, you can also delete the test or download a copy of your data, and if you opted to do so, a copy of the emails as we received them. # Method Users send emails to us (in reply-all to a message we sent, for easier usability).Target MXes on our site are either configured in a fully RFC compliant way, or intentionally misconfigured in a common way (broken DNSSEC for the domain, for example, or a broken DANE record, again, see [2] for an overview). Thereby, we can determine the configuration/support of features by the senders' MXes. # Possible Harm The worst thing that should happen to mail operators is finding specific undeliverable mails (broken DNSSEC if DNSSEC is validated, v6 only DNS if no IPv6 DNS resolution is supported) in their mail queue, or users receiving bounces (see FAQ on the page). So far the system has been tested with several hundred mail-setups, without encountering issues. If you encounter other unintended side-effects, please reach out to abuse(a)email-security-scans.org or me directly off-list. # Test details Specifically, we are testing: - v4 Mail sending - v6 Mail sending - Greylisting support - Transport encryption (Plaintext/TLS cipher strength and version support, opportunistic encryption) - DANE support outbound, i.e., if you honor DANE - MTA-STS support outbound, i.e., if you honor MTA-STS (incl. whether you prefer DANE over MTA-STS, as it should be) - Sending of TLS reports and whether these are standard compliant, also providing a copy of the received report (Even though so far only three operators delivered TLS-RPT). - DNS resolvers used by the mailserver - Whether the mailers' DNS servers resolve via IPv6 - Whether the mailers' DNS servers validate DNSSEC - If all names relevant for email delivery resolve via IPv6 - If all names relevant for email delivery are DNSSEC signed - Mailer-basics (ehlo=rdns=fcrdns), SPF (from/envelope) - SPF policy size (by retrieving your policy, up to 20 referrals deep) - DKIM (also checking key-sizes, algorithm mismatches and canonicalization issues; These are surprisingly common, i.e., simple being set breaking only in cases not caught by standard dkim testers) - DMARC (policy validity, conformance of sent mails, displaying implicit defaults) - DMARC report deliverability by sending one(1) valid DMARC report for a received email, including authorization of out-of-domain RUA/RUF (also providing a copy of any bounces received) - Full IPv6 readiness (join over three previous IPv6 tests) - Whether any headers that should not be duplicated are duplicated - Whether any mandatory headers are missing - If From/Envelope match # Planned tests - ARC - evaluate outbound spam filtering - evaluate received_from stripping - test for inbound-link parsers - cluster by provider (via MTA sets), not domain - Add DANE checks for senders' MXes - test for host-addresses in SPF prefixes - add MTA-STS check for senders' domains - add test for handling more than 5 MX with only the lowest-prio one(s) being reachable - requesting-domains' MX aspects (null MX, IPv4/6 addr in MX record, non-reachable MX, broken MTA-STS/TLSA, broken DNSSEC, validation of our setups SPF/DKIM (via DNS server logs, v6 resolvability), etc.). With best regards, Tobias [1] https://www.usenix.org/system/files/atc22-holzbauer.pdf [2] https://www.email-security-scans.org/description.php [3] https://twitter.com/chelloway/status/1629999886694318080 [4] https://github.com/mail-in-a-box/mailinabox/issues/2239

1 0