Outside of needing more details and examples, BCP38 could use more advertising. The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it). For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it. The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important. Jack
bcp38.org coming soon =D ----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
Please reference: http://openresolverproject.org/ http://spoofer.csail.mit.edu/ http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack ...and anything else to raise the awareness level. Thanks, - ferg (co-perpetrator of BCP38) :-) On Wed, Mar 27, 2013 at 9:48 AM, Alain Hebert <ahebert@pubnix.net> wrote:
bcp38.org coming soon =D
----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
-- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com
And do not forget .... http://tools.ietf.org/html/bcp38 :) -as On 3/27/13 2:17 PM, Paul Ferguson wrote:
Please reference:
http://openresolverproject.org/ http://spoofer.csail.mit.edu/ http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack
...and anything else to raise the awareness level.
Thanks,
- ferg (co-perpetrator of BCP38) :-)
On Wed, Mar 27, 2013 at 9:48 AM, Alain Hebert <ahebert@pubnix.net> wrote:
bcp38.org coming soon =D
----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
But of course. :-) Also, just saw this: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet - ferg On Wed, Mar 27, 2013 at 11:02 AM, Arturo Servin <arturo.servin@gmail.com> wrote:
And do not forget ....
http://tools.ietf.org/html/bcp38
:)
-as
On 3/27/13 2:17 PM, Paul Ferguson wrote:
Please reference:
http://openresolverproject.org/ http://spoofer.csail.mit.edu/ http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack
...and anything else to raise the awareness level.
Thanks,
- ferg (co-perpetrator of BCP38) :-)
On Wed, Mar 27, 2013 at 9:48 AM, Alain Hebert <ahebert@pubnix.net> wrote:
bcp38.org coming soon =D
----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
-- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com
Noted. But today's contribution by Eric M. Caroll might end up on the front page =D. I got the domains... Now I just need a few free hours to setup something useful. As always, don't be shy to drop me contribution offlist. ----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 03/27/13 14:31, Paul Ferguson wrote:
But of course. :-)
Also, just saw this:
http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet
- ferg
On Wed, Mar 27, 2013 at 11:02 AM, Arturo Servin <arturo.servin@gmail.com> wrote:
And do not forget ....
http://tools.ietf.org/html/bcp38
:)
-as
On 3/27/13 2:17 PM, Paul Ferguson wrote:
Please reference:
http://openresolverproject.org/ http://spoofer.csail.mit.edu/ http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack
...and anything else to raise the awareness level.
Thanks,
- ferg (co-perpetrator of BCP38) :-)
On Wed, Mar 27, 2013 at 9:48 AM, Alain Hebert <ahebert@pubnix.net> wrote:
bcp38.org coming soon =D
----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
Well, http://www.BCP38.info is up. Now to make it sexy :( Being that my English is barely passable (my French is worst btw) =D, I won't be able to carry this alone. PS: Account creation is up and verified... I'm gathering reference to other projects and sites (feel free to send them to me offlist); The wiki is/will be fully indexed on major search engines; I'm planning to also add reference to documented events to increase eyeballs on BCP38; Nothing is set in stone... from the wiki (maybe another CMS), the look, the registrar or even the hosting location. Hopefully this can become usefull =D ----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 03/27/13 13:17, Paul Ferguson wrote:
Please reference:
http://openresolverproject.org/ http://spoofer.csail.mit.edu/ http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack
...and anything else to raise the awareness level.
Thanks,
- ferg (co-perpetrator of BCP38) :-)
On Wed, Mar 27, 2013 at 9:48 AM, Alain Hebert <ahebert@pubnix.net> wrote:
bcp38.org coming soon =D
----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
On 03/27/13 11:20, Jack Bates wrote:
Outside of needing more details and examples, BCP38 could use more advertising.
The best option, if they would accept it, is to have all RIRs mention BCP38 as well as require that mention of BCP38 be included in all IP justification requests to customers (so that those who receive netblocks from their ISPs are also aware of it).
For ARIN, at least, having it mentioned in the attestation process wouldn't be a bad idea. At least someone of management would be aware of it.
The only issue is see concerning the RIRs is that they may object to it being out of scope to their duties. However, informing people of something is not requiring implementation of something. On the other hand, we know that there are a great number of networks that don't participate with the community at large and may have no idea about BCP38 and why it is important.
Jack
----- Original Message -----
From: "Alain Hebert" <ahebert@pubnix.net>
http://www.BCP38.info is up.
Now to make it sexy :(
I'm workin' on it.
Being that my English is barely passable (my French is worst btw) =D, I won't be able to carry this alone.
Well, my English is *fantastic*, so I'll be happy to pith in. Or, y'know, "pitch". :-)
I'm gathering reference to other projects and sites (feel free to send them to me offlist);
Excellent point.
I'm planning to also add reference to documented events to increase eyeballs on BCP38;
I believe you mean people's after action reports, here; also an excellent idea. Create a new article for each event, named something like "Mar 2013 Cloudflare DNS DDOS attack"
Nothing is set in stone... from the wiki (maybe another CMS), the look, the registrar or even the hosting location.
Well, Mediawiki is certainly the platform I have the most background driving, but as long as the data can be ported, I don't object to changing... until people start making links to the inside of the site. :-} I too encourage people to dive in, though perhaps not yet to start publicizing the site widely for it's intended end purpose until we flesh it out for a week or so. Cheers, -- jra -- Jay R. Ashworth Baylink jra@baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274
On Fri, Mar 29, 2013 at 3:14 PM, Jay Ashworth <jra@baylink.com> wrote:
----- Original Message -----
From: "Alain Hebert" <ahebert@pubnix.net>
http://www.BCP38.info is up.
I can't prove that from my neck of the woods... $ dig www.bcp38.info ; <<>> DiG 9.7.6-P1 <<>> www.bcp38.info ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22339 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.bcp38.info. IN A phil
I get amusing results as well: delong-dhcp227:owen (182) ~/idisk_backup/draft-delong-ula-example % host www.bcp38.info www.bcp38.info has address 192.172.250.28 www.bcp38.info has IPv6 address 2607:2a00:1:6::c0ac:fa1c Host www.bcp38.info not found: 3(NXDOMAIN) Owen On Mar 29, 2013, at 15:24 , Phil Dyer <phil@cluestick.net> wrote:
On Fri, Mar 29, 2013 at 3:14 PM, Jay Ashworth <jra@baylink.com> wrote:
----- Original Message -----
From: "Alain Hebert" <ahebert@pubnix.net>
http://www.BCP38.info is up.
I can't prove that from my neck of the woods...
$ dig www.bcp38.info
; <<>> DiG 9.7.6-P1 <<>> www.bcp38.info ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22339 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.bcp38.info. IN A
phil
Well, Usual failure from my part =D. But I think I see what's happening... ns1.bcp38.org ns2.bcp38.org Are not yet registered. I've move them to "production" servers until it complete. Let me know. ----- Alain Hebert ahebert@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 03/29/13 18:37, Owen DeLong wrote:
I get amusing results as well:
delong-dhcp227:owen (182) ~/idisk_backup/draft-delong-ula-example % host www.bcp38.info www.bcp38.info has address 192.172.250.28 www.bcp38.info has IPv6 address 2607:2a00:1:6::c0ac:fa1c Host www.bcp38.info not found: 3(NXDOMAIN)
Owen
On Mar 29, 2013, at 15:24 , Phil Dyer <phil@cluestick.net> wrote:
On Fri, Mar 29, 2013 at 3:14 PM, Jay Ashworth <jra@baylink.com> wrote:
----- Original Message -----
From: "Alain Hebert" <ahebert@pubnix.net> http://www.BCP38.info is up.
I can't prove that from my neck of the woods...
$ dig www.bcp38.info
; <<>> DiG 9.7.6-P1 <<>> www.bcp38.info ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22339 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION: ;www.bcp38.info. IN A
phil
participants (7)
-
Alain Hebert -
Arturo Servin -
Jack Bates -
Jay Ashworth -
Owen DeLong -
Paul Ferguson -
Phil Dyer