- anti-abuse-wg - mailman.ripe.net

An arrest in Russia
by Ronald F. Guilmette 03 Jan '20

03 Jan '20

Anyone have more details about this? https://belsat.eu/en/news/runet-founder-under-house-arrest/ The Czech company that allagedly received the allegedly stolen 7.5 "B" blocks (/16) would seem to be this one: ORG-RCS23-RIPE AS15731 https://www.ripe.net/membership/indices/data/cz.relcom.html But I am not seeing that ORG as having quite that many IPv4 addresses assigned. Maybe the alleged perp in this case only stole IPv6 addresses (?) Regards, rfg

15 25

Re: [anti-abuse-wg] [routing-wg] 2019-08 New Policy Proposal (RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space) to be discussed on Routing Working Group Mailing List
by Randy Bush 24 Dec '19

24 Dec '19

> as Alexander Azimov pointed out: people can just announce a *less* > specific, which will be "Not Found" even if an AS0 ROA exists for more > specific. And because there is no competing (valid/not found) > announcement they will attract the traffic. this was brought up in the sidr wg when as0 was first proposed. but it is very hard to stop the bright idea train in sidr[ops] or the ietf in general. randy

4 5

2019-08 New Policy Proposal (RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space) to be discussed on Routing Working Group Mailing List
by Petrit Hasani 23 Dec '19

23 Dec '19

Dear colleagues, A new RIPE Policy proposal, 2019-08, "RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space", is now available for discussion in the Routing Working Group This proposal aims to instructs the RIPE NCC to create ROAs with origin AS0 for all unallocated and unassigned address space under its control. You can find the full proposal at: https://www.ripe.net/participate/policies/proposals/2019-08 This proposed policy may be of interest to the Anti-Abuse working group as well. Therefore, we encourage you to review this proposal and send your comments to <routing-wg(a)ripe.net> before 29 November 2019. Kind regards, -- Petrit Hasani Policy Officer RIPE NCC

5 4

Update on 2019-04
by Brian Nisbet 19 Dec '19

19 Dec '19

Colleagues, As you may have noticed the Discussion Phase ended for 2019-04 on the 9th of December. Since then the Co-Chairs have been speaking to the proposer and the RIPE PDO about what to do next after the almost complete lack of discussion in the latest phase. The plan is that Jordi is going to work on text for a new version of the proposal, and may well solicit input here, and this new text will be brought to the list in January of 2020. If you have any questions or comments on this, please do let me know. Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270

1 0

FW: [aa-wg-chair] Draft Anti-Abuse WG Minutes from RIPE 79
by Brian Nisbet 17 Dec '19

17 Dec '19

Folks, Please see the draft minutes from our WG Session in Rotterdam. If you have any corrections or objections, could you please let us know ASAP? Thanks, Brian Co-Chair, RIPE AA-WG Brian Nisbet Service Operations Manager HEAnet CLG, Ireland's National Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland +35316609040 brian.nisbet(a)heanet.ie www.heanet.ie Registered in Ireland, No. 275301. CRA No. 20036270 From: Aa-wg-chair <aa-wg-chair-bounces(a)ripe.net> On Behalf Of Alun Davies Sent: Monday 16 December 2019 09:52 To: aa-wg-chair(a)ripe.net Subject: [aa-wg-chair] Draft Anti-Abuse WG Minutes from RIPE 79 Hello Brian, Tobias, Alireza, Please find attached the draft minutes for the Anti-Abuse WG session at RIPE 79. Do take a look when you have a moment and let us know if you’d like any changes made. If we don’t hear back from you by the end of this week, we’ll go ahead and publish them as is to the website. Cheers, Alun Davies RIPE NCC

4 6

Massive prefix theft in AFRINIC - attributed to an insider
by Suresh Ramasubramanian 05 Dec '19

05 Dec '19

Congratulations, Ron Guilmette. You’ve been doing this for years and this is your biggest success yet. https://mybroadband.co.za/news/internet/330379-how-internet-resources-worth… tl;dr - The insider is apparently Ernest Byaruhanga, AFRINIC employee #2, and he has now separated from AFRINIC --srs

4 3

Non-ASCII characters in abuse-mailbox addresses
by Thomas Hungenberg 21 Nov '19

21 Nov '19

Hi, some abuse contacts registered with RIPE use non-ascii characters with the abuse-mailbox addresses, e.g. % Abuse contact for '195.78.76.0 - 195.78.77.255' is 'abuse(a)xn--zrich-kva.email' However, the corresponding MTA does not support SMTPUTF8: 7B579403C6: to=<abuse(a)xn--zrich-kva.email>, relay=mail.xn--zrich-kva.email[109.95.241.50]:25, delay=0.33, delays=0.01/0/0.32/0, dsn=5.6.7, status=bounced (SMTPUTF8 is required, but was not offered by host mail.xn--zrich-kva.email[109.95.241.50]) (In this particular case, sending email to the IDNA representation of the email address <abuse(a)xn--zrich-kva.email> works.) In our experience, using umlauts and other non-ascii characters in (the host part of) email addresses still cause a lot of problems in general. Even if the recipient's MX supports SMTPUTF8 correctly, MTAs on the transport way may fail to handle SMTPUTF8 messages. To prevent such problems and make sure all abuse mailboxes can be addressed, I wonder if the values of abuse-mailbox attributes should be restricted to ASCII characters only. What do you think? - Thomas

6 9

New on RIPE Labs: Better Mail Security with DANE for SMTP
by Mirjam Kuehne 20 Nov '19

20 Nov '19

Dear colleagues, What are the risks associated with SMTP and how can DANE help to overcome these? Here is a list of tips and suggestions provided by Dennis Baaten and Internet.nl: https://labs.ripe.net/Members/dennis_baaten/better-mail-security-with-dane-… Kind regards, Mirjam Kühne RIPE NCC

1 0

2019-04 Discussion Period extended until 9 December 2019 (Validation of "abuse-mailbox")
by Petrit Hasani 11 Nov '19

11 Nov '19

Dear colleagues, The Discussion Period for the policy proposal 2019-04, "Validation of "abuse-mailbox"" has been extended until 09 December 2019. This proposal aims to have the RIPE NCC validate "abuse-c:" information more often, and introduces a new validation process that requires input from resource holders. You can find the full proposal at: https://www.ripe.net/participate/policies/proposals/2019-04 We encourage you to review this proposal and send your comments to <anti-abuse-wg(a)ripe.net>. Kind regards, -- Petrit Hasani Policy Officer RIPE NCC

2 1

New on RIPE Labs: Mail Filtering - Rethinking Our Reliance on RBLs
by Mirjam Kuehne 17 Oct '19

17 Oct '19

Dear colleagues, Keeping the channels of communication between us and the wider Internet community open has always been one of our main priorities. Just lately we received some input that caused us to rethink the way we've been doing things on this front. Find out more in this RIPE Labs article: https://labs.ripe.net/Members/razvano/mail-filtering-rethinking-our-relianc… Kind regards, Mirjam Kühne RIPE NCC

1 0