- db-wg - mailman.ripe.net

The DBTF needs your feedback!
by Bijal Sanghani 01 Feb '21

01 Feb '21

Dear colleagues, The DBTF (RIPE Database Requirements Task Force) would like to thank those that have given feedback so far on the published draft document - https://www.ripe.net/participate/ripe/tf/rdb-requirements-tf/the-ripe-datab… We appreciate the feedback given so far, however need a little bit more clarity on some aspects and have therefore published a new questionnaire to collect further feedback. Please can you take a few moments to compete this survey - https://www.surveymonkey.com/r/ZM222M3 You have until Monday, 15 February 2021 and the results will be reviewed and integrated by the task force in the final draft. More information about the task force is available at - https://www.ripe.net/participate/ripe/tf/rdb-requirements-tf Thank you for your participation! Kind regards, Bijal Sanghani RIPE DBTF Chair

1 0

Re: [db-wg] Fwd: [anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed
by Marco Schmidt 30 Jan '21

30 Jan '21

Dear Nick, Thanks for your email. We are planning a clean-up of these ROUTE objects. As we wanted to avoid deleting any legitimate objects of third parties, we checked with AFRINIC and they have now confirmed that these ROUTE(6) objects can be deleted. We also performed a check on all of the NONAUTH database for any ROUTE(6) objects (using the prefix only), we found 81 routes (out of 56,379) and 37 ROUTE6 (out of 1,568) that are not "allocated", "assigned", "available", "reserved" in any region. We will now inform the object holder and remove these objects. We don’t think a policy is necessary for this work, but we strongly believe we need an approach similar to NWI-5: "Inform the object holder that these IRR object(s) refer to an unallocated space. We will then delete them after a reasonable notification." This gives people time to react in cases of incorrect de-registration. We will initiate a discussion with the other RIRs to find a joint approach on how we deal with similar incidents in the future. We have also looked into publishing a list of deregistered resources and this will require some review internally if we plan to go down that route. A more straightforward approach might be for the RIRs to proactively highlight where we see objects in each others IRRs. Kind regards, Marco Schmidt Registry Services Assistant Manager RIPE NCC > From: *Nick Hilliard via db-wg* <db-wg(a)ripe.net <mailto:db-wg@ripe.net>> > Date: Fri, Jan 22, 2021, 17:21 > Subject: Re: [db-wg] [anti-abuse-wg] 196.52.0.0/14 > <http://196.52.0.0/14> revoked, cleanup efforts needed > To: Niall O'Reilly <niall.oreilly(a)ucd.ie <mailto:niall.oreilly@ucd.ie>> > Cc: Database WG <db-wg(a)ripe.net <mailto:db-wg@ripe.net>>, Mirjam > Kuehne <chair(a)ripe.net <mailto:chair@ripe.net>> > > > Niall O'Reilly wrote on 22/01/2021 09:55: > > Creating a policy seems to me to be too heavy an approach in this case. > > > > I would think that a simple request from the DB WG to the NCC > > should be enough. > > > > If a greater degree of formality were considered necessary, > > a new NWI could be created. > > there are two issues here: the immediate one relates to removal of these > particular objects, but there's a longer term issue of whether the NCC > needs to be asked by the community to delete all objects which are > deregistered from the other LIRs on an ongoing basis. Honestly I would > have thought probably not because this sounds like the sort of thing > that falls into general garbage cleanup, i.e. normal stewardship of > resources. > > Could someone from the NCC clarify what the current situation with this > is? Is this something which is currently dealt with, and if not, could > it be? > > The reverse is also relevant. I.e. the RIPE NCC probably needs to > publish lists of resources which have been deregistered so that other > RIRs / IRRDBs can delete objects which refer to those resources which > date from before the date of deregistration. > > Nick > >

2 1

Re: [db-wg] AFRINIC Audit report
by denis walker 30 Jan '21

30 Jan '21

Hi All Your post, Ronald, also has nothing to do with the RIPE Database. Please contact the webmaster(a)ripe.net if you have some issues with the web site. There is no need for either of you to reply to this email. Let's close this discussion on this mailing list. cheers denis co-chair DB-WG On Sat, 30 Jan 2021 at 00:52, Elad Cohen <elad(a)netstyle.io> wrote: > > Hi Denis, > > And what Ronald wrote has something to do with the RIPE database? him crying for not receiving "credits" (for his imagination) in his misery life and crying that he couldn't post a comment in RIPE website ... > > Kind Regards, > Elad > ________________________________ > From: denis walker <ripedenis(a)gmail.com> > Sent: Saturday, January 30, 2021 1:38 AM > To: Elad Cohen <elad(a)netstyle.io> > Cc: anti-abuse-wg(a)ripe.net <anti-abuse-wg(a)ripe.net>; db-wg(a)ripe.net <db-wg(a)ripe.net>; Ronald F. Guilmette <rfg(a)tristatelogic.com> > Subject: Re: [db-wg] AFRINIC Audit report > > HI Elad > > As co-chair of the DB-WG I would like to point out that what you are > talking about.has nothing to do with the RIPE Database. Please don't > use this mailing list for these discussions. > > cheers > denis > co-chair DB-WG > > On Fri, 29 Jan 2021 at 20:30, Elad Cohen via db-wg <db-wg(a)ripe.net> wrote: > > > > Yes Ronald, good job for causing Afrinic to spend $150k of their members money for legal expenses that you created with your proofless imaginative theories, and Afrinic will lose due to it, because unlike public perception which is based on "+1's" , in court what count is only facts and data. > > > > and good job by showing us how powerful your friends of spamhaus and ops-trust (https://portal.ops-trust.net/) are, that they can put a sword on the neck of any RIR in order for the RIR to give any head that they will like. > > > > Afrinic with all of their actions and all of their "report", didn't touch the company Cloud Innovation Ltd that didn't purchase legacy netblocks for money, but received two /11's and massive number of /16's for "free" from Afrinic, for the purposes of leasing worldwide, part of them can be seen in the link: https://bgp.he.net/cc#_prefixes > > Maybe it is because that the owner of Cloud Innovation Ltd, knows who to pay, such as Owen DeLong that admitted in Afrinic community-discuss that he received money from Cloud Innovation Ltd and also Owen DeLong wrote in Afrinic community-discuss mailing list the text "Nothing to see here" when people tried to raise questions regarding Cloud Innovation Ltd. > > > > Owen DeLong is a Ops-Trust community member, and also a friend of Ronald Guilmette. > > > > ---- > > > > To remind to you and to everyone, Mr. Jan Vermeulen interfered with the latest RIPE NCC Executive Board elections, by doing it he hurt the rights of all of RIPE community members. > > > > > > Last comment: > > Any ops-trust member or spamhaus university loser, please spare the brainwashing +1's. > > > > ________________________________ > > From: db-wg <db-wg-bounces(a)ripe.net> on behalf of Ronald F. Guilmette via db-wg <db-wg(a)ripe.net> > > Sent: Friday, January 29, 2021 7:20 PM > > To: anti-abuse-wg(a)ripe.net <anti-abuse-wg(a)ripe.net>; db-wg(a)ripe.net <db-wg(a)ripe.net> > > Subject: [db-wg] AFRINIC Audit report > > > > The following has recebntly been posted to the RIPE web site: > > > > https://labs.ripe.net/Members/alun_davies/outcome-of-the-afrinic-audit > > > > I have attempted to lodge the following comment, but apparently my comment > > is being held for review, presumably to insure that it does not contain > > any four letter words, nor any material that might violate GDPR, another > > four letter word. > > > > When I and my journalistic colleague, Jan Vermeulen of MyBroadband.co.za > > began our investigations into this colossal and truly epic malfeasance > > and theft of valuable IPv4 resources in mid 2019, the notion of either > > of us becoming famous or of receiving any credit for unraveling and > > publicly documenting this gigantic scandal was not what motivated us, > > nor has it been, since the beginning. Rather, we merely wished to right > > some wrongs and return to the people of Africa some valuable IP resources > > critically needed for the ongoing development of the Internet in Africa. > > Nonetheless, it would have been, I think, at least minimally respectful > > if either AFRINIC or (now) RIPE had taken a moment to at least mention > > our names and our very evident, abundant, and key contributions towards > > exposing this whole huge mess. Neither organization, it seems, has thus > > far elected to do so publicly. Such is the reward, or lack thereof, of > > a job well done. > > > > > > Regards, > > rfg > >

3 2

AFRINIC Audit report
by Ronald F. Guilmette 30 Jan '21

30 Jan '21

The following has recebntly been posted to the RIPE web site: https://labs.ripe.net/Members/alun_davies/outcome-of-the-afrinic-audit I have attempted to lodge the following comment, but apparently my comment is being held for review, presumably to insure that it does not contain any four letter words, nor any material that might violate GDPR, another four letter word. When I and my journalistic colleague, Jan Vermeulen of MyBroadband.co.za began our investigations into this colossal and truly epic malfeasance and theft of valuable IPv4 resources in mid 2019, the notion of either of us becoming famous or of receiving any credit for unraveling and publicly documenting this gigantic scandal was not what motivated us, nor has it been, since the beginning. Rather, we merely wished to right some wrongs and return to the people of Africa some valuable IP resources critically needed for the ongoing development of the Internet in Africa. Nonetheless, it would have been, I think, at least minimally respectful if either AFRINIC or (now) RIPE had taken a moment to at least mention our names and our very evident, abundant, and key contributions towards exposing this whole huge mess. Neither organization, it seems, has thus far elected to do so publicly. Such is the reward, or lack thereof, of a job well done. Regards, rfg

3 3

Re: [db-wg] Deprecation of whitepages
by Randy Bush 30 Jan '21

30 Jan '21

>>> The DB team maintains this list and will exclude an object on request. >> please exclude all objects i might wish to look up. perhaps i was being too subtle. the original purpose of the whois database was for operators to contact each other for coordination and sharing of exciting events. some of us dinosaurs still use it for these mundane purposes. > Blanket whitelisting won't work it is what we have today. the proposal is to change that. i am trying to understand how this would make my (a paying customer's) job easier. randy

2 1

Fwd: proposal: new attribute 'geofeed:
by Maria Stafyla 27 Jan '21

27 Jan '21

Hi Denis, all Please allow us some time to look into this and we will get back to you with our feedback next week. Kind regards, Maria Stafyla Senior Legal Counsel RIPE NCC > ---------- Forwarded message --------- > From: denis walker <ripedenis(a)gmail.com> > Date: Thu, 7 Jan 2021 at 15:59 > Subject: Re: [db-wg] Fwd: proposal: new attribute 'geofeed: > To: Hank Nussbacher <hank(a)interall.co.il>, <legal(a)ripe.net> > Cc: Database WG <db-wg(a)ripe.net> > > > HI Hank, colleagues > > Whilst I can't answer your basic question, I could say that if the > IETF approves a change to RPSL, with the RIPE Database data model > based on RPSL, in principle we should implement the RPSL change. > > Perhaps another question, to the RIPE NCC legal team, if I have a > fixed IP address or block of addresses, is this geofeed location data > personal data under the terms of GDPR? > > cheers > denis > co-chair DB-WG > > On Wed, 6 Jan 2021 at 07:01, hank--- via db-wg <db-wg(a)ripe.net> wrote: >> I guess I am not understanding something. >> Why do we need a geofeed attribute? What problem are we trying to solve? >> >> I understand why each block of IPs needs to be associated with a >> country, so that certain language specific auto-customizations will >> work. But what purpose is there to know that a /24 is in central >> Amsterdam? Is the purpose to assist marketers in geo-targetted sales? >> Is the purpose for network engineering (not sure what major problem >> we have that needs this)? >> >> Is the purpose to know where you are so that in the event of an >> emergency (terror, tornado, etc) you can get emergency targeted >> alerts? If so, then the geofeed has to be at the /32 level and since >> many if not most IPs are mobile, and that is where you will get the >> alert from - from your cellphone provider, I still don't quite >> understand the reason for a geofeed tag. >> >> Can someone clue me in? >> >> Thanks, >> Hank >> >> Caveat: The views expressed above are solely my own and do not express >> the views or opinions of my employer >> >>

5 5

Fwd: [anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed
by Nick Hilliard 22 Jan '21

22 Jan '21

196.52.0.0/14 seems to have been revoked by afrinic: > $ whois -h whois.afrinic.net " --list-versions 196.52.0.0/14" | grep -i delete > % This object was deleted on 2021-01-16 05:56 > $ Regarding cleanup of route: objects for this this (and other) unregistered address space in the ripe irrdb, can this just be done? Or is it necessary to create a policy to ask the NCC to do it? Nick -------- Forwarded Message -------- Subject: [anti-abuse-wg] 196.52.0.0/14 revoked, cleanup efforts needed Date: Wed, 20 Jan 2021 05:00:49 +0400 From: Ostap Efremov <kkind690(a)gmail.com> To: anti-abuse-wg(a)ripe.net Hi, 196.52.0.0/14 <http://196.52.0.0/14> was recently revoked. Before it was revoked, the whois for this /14 was: inetnum: 196.52.0.0 - 196.55.255.255 netname: LogicWeb-Inc descr: LogicWeb Inc. descr: 3003 Woodbridge Ave descr: Edison, NJ 08837 country: ZA remarks: ============REMARK==================== remarks: The custodianship of this IP prefix is presently remarks: in dispute. A police investigation is on-going remarks: and AFRINIC reserves the right to remarks: reclaim this IP prefix at anytime. remarks: ============REMARK=================== However, now, this /14 has been revoked by AFRINIC. Do a whois on it and you will see, it's unallocated. I believe this /14 was under control from our big friend from Israel, but I don't remember. This does not matter however. But, sadly there are about 367 ip ranges being announced from this /14 https://pastebin.com/raw/MHaW3nPe From about 71 unique ASN's This is a BOGON, unallocated space. I would appreciate if any network that is on that list and on this mailing list, would stop announcing parts of this hijacked /14. I reached out to RADB to remove all the radb entries concerning this /14, however after 72 hours they still haven't. This is not an ignored ticket, we have escalated internally with our RADb admins and they are looking into it. I will let them know that you are looking for a update and we will provide it as soon as possible. How is it possible that they can't just delete all entries? It is UNALLOCATED SPACE, it shouldn't be routed, it shouldn't have radb. https://www.radb.net/query?advanced_query=1&keywords=-M+196.52.0.0%2F14&-T+… I have also tried to post about this massive source of BOGONS on the nanog mailing list, however, they rejected my posts. Most likely because it possibly concerns "that one guy from Israel", however the nanog moderators refused to comment while continuing to reject my posts. Their self-censorship is very destructive and harmful. I hope that if this list is moderated, I will not have any trouble posting about this issue. Greetings, Ostap.

3 3

Address Assignment Practices in IPv4 and IPv6
by Stephen D. Strowes 21 Jan '21

21 Jan '21

Hi all, We've published a study on the stability of IPv4/IPv6 assignments in domestic ISPs, and the size of the IPv6 prefixes that networks typically assign to subscribers. We look at this from two different angles: what can we measure from RIPE Atlas, and what do operators state in the RIPE Database? In particular, understanding the size of IPv6 delegated prefixes is important for applications such as host reputation & blocklists, geolocation, and research on network measurement. The RIPE Database offers the community a way to share information on their prefix delegations, and deserves some attention! Read more here: https://labs.ripe.net/Members/stephen_strowes/address-assignment-practices-… Cheers, S.

1 0

Org-types
by Cynthia Revström 20 Jan '21

20 Jan '21

Hi DB-WG, This may have been discussed in the past but a quick search didn't yield much. Is there any reason for why ORG-NCC1-RIPE is marked as an LIR and not an RIR? Does RIR imply another RIR? I personally feel like marking the NCC as a member of itself is a bit odd, but honestly this is so minor so I understand if it was just not considered much. I noticed that there is currently only one RIR org (ORG-AFNC1-RIPE) which I assume came about as a result of the ERX process. (sidenote: ORG-AFNC1-RIPE is not referenced by anything except the role object anymore, so it might be somewhat redundant at this point) Other related info I found: Aside from the org-types of "LIR" and "OTHER" there are ~2300 orgs. There is a RIR, an IANA, and a WHITEPAGES. But the rest are "OTHER" but with differing capitalization (mainly Other and other). -Cynthia

4 5

Creating route objects without mnt on existing ones
by Patrick Velder 16 Jan '21

16 Jan '21

Hi there It seems to be impossible to create route objects for inet(6)nums, if there are other route objects to which your maintainer has no access. Even if you have mnt-by + mnt-routes on the inet(6)nums. Due to that, it's much more difficult to create new route objects for our customers, as we have to contact the maintainer of all existing objects in order to get mnt-by/mnt-routes on their route objects. In my opinion, that makes zero sense. If you have mnt-by/mnt-routes on an inetnum, you should be able to create objects, regardless of existing ones. Best regards Patrick

3 3