- db-wg - mailman.ripe.net

RPSLng in the RIPE Whois Database
by Shane Kerr 21 Dec '04

21 Dec '04

Dear Colleagues, Beginning Wednesday 29 December 2004, the RIPE Database will support RPSLng. RPSLng extends the Routing Policy Specification Language (RPSL) allowing description of IPv6 and multicast routing policies. It includes a new object type, ROUTE6, and new attributes, such as "mp-import:" and "mp-export:". RPSLng was submitted to the IETF to become an RFC. You can read the most recent draft at: http://www.radb.net/rpslng-08.html This change will not affect the current contents of the database. It is optional for any objects you maintain. The main differences for query users are as follows: - Currently a query for an IPv4 address or network may return INETNUM, ROUTE, and INET-RTR objects. A query for an IPv6 address or network can only return an INET6NUM object. After we put RPSLng into production, IPv6 queries will start to also return ROUTE6 and INET-RTR objects, if they are in the database. - Currently an inverse query (using the "-i" flag) for AUT-NUM objects may return ROUTE objects. After we put RPSLng into production, a query will return both ROUTE and ROUTE6 objects. If you want to limit your query, you can use the "-T" flag. For example, if you only want ROUTE objects returned to an inverse query, you can type: whois -h whois.ripe.net -T route -i origin AS3333 Please change your scripts if necessary. We will not move the contents of the RPSLng prototype Whois server to the RIPE Whois Database. You will have to create any objects that define your routing policy in the production RIPE Whois Database. You can update the RPSLng prototype Whois server until the start of January 2005. The query interface will be available until the end of January 2005. -- Shane Kerr Software Manager RIPE NCC

3 2

IRRToolSet maintenance moved from RIPE NCC to ISC
by Shane Kerr 17 Dec '04

17 Dec '04

Colleagues, We are happy to announce that the maintenance for the IRRToolSet has moved from the RIPE NCC to the Internet Systems Consortium (ISC). Starting now, ISC will support software development and maintenance of this suite. The new web page for this is: http://www.isc.org/sw/IRRToolSet/ The mailing list has been moved. The new address is <irrtoolset(a)isc.org>. E-mail will be forwarded from the existing mailing list (*). The RIPE NCC believes that ISC's software development model matches the IRRToolSet requirements, and that ISC will be a better home for the software. Operators and developers will have a set-up that is more typical to collaborative open source software, from a company that is experienced and focused on it. The RIPE NCC is grateful to ISC for agreeing to maintain this useful set of tools. We will continue to provide support for RIPE-specific portions and work with ISC in refining the software. -- Shane Kerr Software Manager RIPE NCC (*) When the mailing list forwarding began, Thursday 2004-12-16, filtering was removed. Shortly after the mailing list filtering policy was changed to "subscriber only". Apologies for the unwanted mail received during this period.

1 0

Re: [db-wg] Modifying the ACL for the whois server
by Nicolas Raux 06 Dec '04

06 Dec '04

when I try this set acl 127.0.0.1 deny=0 it seems ok (no error is returned) but I still can t query my local whois server here is what I get when I type : show acl ip maxprivate maxpublic maxdenials deny trustpass threshold maxconn 0.0.0.0/0 -1 -1 10 0 0 4 6 127.0.0.1/32 -1 -1 10 1 0 4 6 Found 2 nodes

2 1

Problems with ERX for 192.0.0.0/8
by leo vegoda 01 Dec '04

01 Dec '04

Dear Colleagues, An error in the software managing the ERX process for 192.0.0.0/8 resulted in the creation of INETNUM objects with incorrect contact information for registrations in this range. As a consequence, e-mail notifications were sent to incorrect contacts on 18 November. Errors made when registering the contact information in the database have now been corrected. Any user updates to these INETNUM objects or maintainers since 11 November have been undone. A new set of ERX notification e-mails will be sent to the relevant contacts and the schedule will be extended by two weeks. The completion date will now be 17 February 2005. We apologise for any inconvenience caused. Kind regards, -- leo vegoda Registration Services Manager RIPE NCC

1 0

Whois referrals changed source IP
by Robert Martin-Legene 18 Nov '04

18 Nov '04

For those of you (TLD's only?) who receives whois referrals from whois.ripe.net and thought they would always come from 193.0.0.0/24, it now seems that even though whois.ripe.net is in that range, the referrals can come from at least 193.0.4.152 (as it does right now). For us, we only allow the -V3.2.0,$IP option (stating the origin IP) if from an "NCC IP#". For all other IP## using that option we would give an error. Our last request from 193.0.0.0/24 was received Nov 17 11:16:46. Would the NCC be kind enough to officially inform of which range(s) the requests can come from? (I doubt it's the entire 193.0.0.0/21, which are server networks.) (And to think that it was actually Verisign who mailed us to let us know they had a problem using our whois server, I find kind of funny). -- Robert Martin-Legène IT security manager DK Hostmaster A/S

2 1

Alex Dempsey/Vodafone is out of the office.
by alex.dempsey＠vodafone.com 09 Nov '04

09 Nov '04

I will be out of the office starting 08/11/2004 and will not return until 22/11/2004. I will be out of the office starting 08/11/2004 and will not return until 22/11/2004. For any urgent queries, please call me on +353 87 6227222, otherwise I will respond to your message on my return. Regards, Alex Dempsey ****************************************************************************** The content of this e-mail may be confidential or legally privileged. If you are not the named addressee or the intended recipient please do not copy it or forward it to anyone. If you have received this email in error please destroy it and kindly notify the sender and postmaster.ie(a)vodafone.com. Email cannot be guaranteed to be secure or error-free, it is your responsibility to ensure that the message (including attachments) is safe and authorised for use in your environment. Vodafone Ireland Limited. Directors: Peter Bamford Chairman (UK), Pauline Best (UK), Paul Donovan Chief Executive (UK), Gerry Fahy, David Boorman (UK), David Smithwhite (UK), Patrick Teahon, Alfred Kane. Registered in Ireland at MountainView, Leopardstown, Dublin 18. Co Reg No.: 326967 VAT Reg No. IE6346967G ******************************************************************************

1 0

RIPE DB tertiary whois server
by Daniel Roesen 09 Nov '04

09 Nov '04

Hi, whatever this server is... can you please keep this one in production and not switch back to primary/secondary? :-) Wow, this one is really fast... Regards, Daniel -- CLUE-RIPE -- Jabber: dr(a)cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0

3 3

RIPE-NCC-LOCKED-MNT
by Ulf Kieber 01 Nov '04

01 Nov '04

Re everybody, I accidentially stumbled into the following: kieber@rocky /home/wheel/kieber> whois -r -T inetnum 213.72.34.0/29 % This is the RIPE Whois secondary server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html inetnum: 213.72.34.0 - 213.72.34.7 netname: RABUTLERCO27579SCH descr: RA Butler County Infant School country: GB admin-c: CL71-RIPE tech-c: CL71-RIPE status: ASSIGNED PA mnt-by: RIPE-NCC-LOCKED-MNT remarks: Maintainer RIPE-NCC-NONE-MNT removed and object remarks: LOCKED by the RIPE NCC due to remarks: deprecation of the NONE authentication scheme. remarks: Please visit the following URL to unlock this object remarks: http://www.ripe.net/db/none-deprecation-042004.html changed: cmorrison(a)rmplc.co.uk 20000803 changed: ripe-dbm(a)ripe.net 20040429 source: RIPE kieber@rocky /home/wheel/kieber> whois -r -T inetnum -l 213.72.34.0/29 % This is the RIPE Whois secondary server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html inetnum: 213.72.0.0 - 213.72.255.255 org: ORG-RMp1-RIPE netname: UK-RESEARCHMACHINES-20000316 descr: Research Machines descr: PROVIDER Local Internet Registry country: GB admin-c: RMS4-RIPE tech-c: RMS4-RIPE status: ALLOCATED PA notify: registry(a)rmplc.co.uk mnt-by: RIPE-NCC-HM-MNT mnt-lower: RMIFL-MNT mnt-routes: RMIFL-MNT changed: hostmaster(a)ripe.net 20000316 changed: hostmaster(a)ripe.net 20011127 source: RIPE kieber@rocky /home/wheel/kieber> I suggest RIPE NCC changes all occurences of mnt-by: RIPE-NCC-LOCKED-MNT in objects with status: ASSIGNED PA to mnt-by: <the value of mnt-lower in the one level less specific inetnum> In the above mentioned case mnt-by: RIPE-NCC-LOCKED-MNT should be changed to mnt-by: RMIFL-MNT RIPE NCC should never have to lock ASSIGNED PA inetnums. -- Ulf Kieber email: ukieber(a)cogentco.com Sr. Network Engineer voice: +49-69-299896-21 C.C.D. Cogent Communications Deutschland GmbH fax : +49-69-299896-40 Optical Internet www : www.cogentco.com Brilliantly Fast. Elegantly Simple. AIM : ulfkieber

1 0

ccTLD data in RIPE DB?
by Ulf Kieber 26 Oct '04

26 Oct '04

Re, weren't ccTLD domain registries supposed to remove their stuff from the database? Do a "whois -r -T domain -i notify notify(a)nic.gm". Which ccTLDs are still holding their registry data in the RIPE DB anyway? -- Ulf Kieber email: ukieber(a)cogentco.com Sr. Network Engineer voice: +49-69-299896-21 C.C.D. Cogent Communications Deutschland GmbH fax : +49-69-299896-40 Optical Internet www : www.cogentco.com Brilliantly Fast. Elegantly Simple. AIM : ulfkieber

3 3

RPSLng database deployment?
by Bernhard Schmidt 20 Oct '04

20 Oct '04

Dear all, having missed the last RIPE meeting I'm unfortunately somewhat out of date regarding this, but could someone please enlighten me about the current plans for deployment of RPSLng in the regular RIPE database? I am using rpslng.ripe.net, but unfortunately almost noone else does. Running a network without any sustainable prefix authorization sucks quite hard, it is a real pain to have to contact your upstream by mail if you have a new prefix (besides other things). Are there any problems with RPSLng currently? Thanks Bernhard

6 6