- myasntesting - mailman.ripe.net

New RIS Architecture Deployment
by Franz Schwarzinger 29 Jun '09

29 Jun '09

[Apologies for duplicates] Dear Colleagues, We have successfully carried out the upgrade of the RIS (Routing Information Service). The website has been updated with the improved tools: http://www.ris.ripe.net/ Please note that, in the coming days, the deployment of the backup cluster might cause minor delays in some RIS data being posted to the website. If you have any more questions or encounter any bugs, please contact ris(a)ripe.net. Kind Regards, Franz Schwarzinger -- Franz Schwarzinger RIPE Network Coordination Center Information Services Singel 258 Amsterdam NL http://www.ripe.net +31 20 535 4442

1 0

New RIS Architecture Deployment
by Franz Schwarzinger 25 Jun '09

25 Jun '09

[Apologies for duplicates] Dear Colleagues, On 29 June 2009, between 7:00 and 15:00 (UTC), the RIPE NCC will carry out a major upgrade of the Routing Information Service (RIS). During this time, the RIS webpages might not be available for short periods of time. This upgrade will significantly improve the speed and accuracy of the system, simplify the navigation and enhance the look and feel of the tools. The RIS webpages are available at: http://www.ripe.net/ris/ The format of the RIS reports will also change. If you are automatically parsing the reports, you might have to update your tools. The reports are currently available at: http://www.ris.ripe.net/weekly-report/ http://www.ris.ripe.net/risreport/ An example of the new weekly report can be found at: http://www.ris.ripe.net/weekly-report/reports/new-report-example.html The old MyASN service will be turned off and replaced by the new generic alarms interface, which is available at: http://www.ripe.net/is/alarms If you have any questions, please contact <ris(a)ripe.net>. Kind regards, Franz Schwarzinger -- Franz Schwarzinger RIPE Network Coordination Center Information Services Singel 258 Amsterdam NL http://www.ripe.net +31 20 535 4442

1 0

SV: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Ronni Poulsen via RT 17 Mar '09

17 Mar '09

Tjeck! > -----Oprindelig meddelelse----- > Fra: myasntesting-admin(a)ripe.net [mailto:myasntesting-admin@ripe.net] > På vegne af Ralph Pearson via RT > Sendt: 17. marts 2009 17:20 > Til: pasquini(a)vatican.va > Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; > tt-host(a)ripe.net > Emne: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single > Sign-On Deployment for Information Services Subscription Services > > Not defending the Pope here, but wasn't the problem RIPE's careless > crafting > of headers in the original email?...these days I assume everyone does a > reply-all... > -r > > > On Tue, Mar 17, 2009 at 9:13 AM, Justin Shore via RT <noc(a)isc.org> > wrote: > > > I guess the Pope can't afford quality help. > > > > > > -----Original Message----- > > From: myasntesting-admin(a)ripe.net [mailto:myasntesting- > admin(a)ripe.net] On > > Behalf Of Bradley Bopp via RT > > Sent: Tuesday, March 17, 2009 11:11 AM > > To: pasquini(a)vatican.va > > Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; > > tt-host(a)ripe.net > > Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] > Single > > Sign-On Deployment for Information Services Subscription Services > > > > He also hit every MYASN login sending it to the alias he did. I > would say > > a > > rather large security issue. No. > > > > > > > > > > On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > > > > > Hi Stefano, > > > > > > I believe you meant to e-mail <is-ops(a)ripe.net>. > > > > > > You have reached the NOC of ISC. ISC has nothing to do with the > > > operation of any of the RIPE NCC Information Services. > > > > > > Thank you, > > > > > > Paul Vlaar - ISC NOC > > > > > > On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT > > wrote: > > >> Dear, > > >> > > >> My User is ³pasquini² but my single Sign-On password doesn¹t work > and > > the > > >> password recovery the same.... > > >> Please help me. > > >> > > >> Best regards > > >> > > >> Stefano Pasquini > > >> > > >> > > >> > > >> _________________________ > > >> Dr. Stefano Pasquini > > >> Internet Office of the Holy See > > >> Cortile del Triangolo > > >> V-00120 Vatican City > > >> Vatican City State > > >> Phone: +39 (06) 6989346 > > >> +39 (06) 69893104 > > >> GSM: +39 (335) 230152 > > >> Email: pasquini(a)vatican.va > > >> Web: http://www.vatican.va > > >> > > >> > > >> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha > scritto: > > >> > > >>> [Apologies for duplicates] > > >>> > > >>> Dear IS user, > > >>> > > >>> We have successfully completed the deployment of the "Single > Sign-On" > > >>> system for our subscription services: > > >>> > > >>> - MyASN > > >>> - DNSMon > > >>> - TTM Ad Hoc > > >>> > > >>> To ensure continuity of our services, old user accounts will > continue > > to > > >>> be available for a period of three months. In that period, we > kindly > > ask > > >>> our users to migrate their existing accounts to the new system > using > > the > > >>> account migration web interface: > > >>> http://www.ripe.net/is/account/migrate > > >>> > > >>> If you have any questions, please send an email to is- > ops(a)ripe.net > > >>> > > >>> Regards, > > >>> Information Services Team > > >>> RIPE NCC > > >>> > > >>> > > >> > > >> > > >> > > >> > > >> ------------------------------------------------------------------ > ------ > > >> > > > > > > > Bradley D. Bopp > > Director Of Network Engineering > > http://www.nationalnet.com > > http://www.nationalnet.com/peering_policy.html > > > > NationalNet is committed to the highest level of Customer Service > available > > in the Web Hosting business. If you have any questions, comments or > > concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, > > 888-4NATNET). > > -- > > > > > > > > > > > > > > > >

1 0

Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Jeremy Palmer via RT 17 Mar '09

17 Mar '09

Just have to get my ROFL in: ROFL :) Justin Shore via RT wrote: > I guess the Pope can't afford quality help. > > > -----Original Message----- > From: myasntesting-admin(a)ripe.net [mailto:myasntesting-admin@ripe.net] On Behalf Of Bradley Bopp via RT > Sent: Tuesday, March 17, 2009 11:11 AM > To: pasquini(a)vatican.va > Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; tt-host(a)ripe.net > Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services > > He also hit every MYASN login sending it to the alias he did. I would say a > rather large security issue. No. > > > > > On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > >> Hi Stefano, >> >> I believe you meant to e-mail <is-ops(a)ripe.net>. >> >> You have reached the NOC of ISC. ISC has nothing to do with the >> operation of any of the RIPE NCC Information Services. >> >> Thank you, >> >> Paul Vlaar - ISC NOC >> >> On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT wrote: >>> Dear, >>> >>> My User is ³pasquini² but my single Sign-On password doesn¹t work and the >>> password recovery the same.... >>> Please help me. >>> >>> Best regards >>> >>> Stefano Pasquini >>> >>> >>> >>> _________________________ >>> Dr. Stefano Pasquini >>> Internet Office of the Holy See >>> Cortile del Triangolo >>> V-00120 Vatican City >>> Vatican City State >>> Phone: +39 (06) 6989346 >>> +39 (06) 69893104 >>> GSM: +39 (335) 230152 >>> Email: pasquini(a)vatican.va >>> Web: http://www.vatican.va >>> >>> >>> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: >>> >>>> [Apologies for duplicates] >>>> >>>> Dear IS user, >>>> >>>> We have successfully completed the deployment of the "Single Sign-On" >>>> system for our subscription services: >>>> >>>> - MyASN >>>> - DNSMon >>>> - TTM Ad Hoc >>>> >>>> To ensure continuity of our services, old user accounts will continue to >>>> be available for a period of three months. In that period, we kindly ask >>>> our users to migrate their existing accounts to the new system using the >>>> account migration web interface: >>>> http://www.ripe.net/is/account/migrate >>>> >>>> If you have any questions, please send an email to is-ops(a)ripe.net >>>> >>>> Regards, >>>> Information Services Team >>>> RIPE NCC >>>> >>>> >>> >>> >>> >>> ------------------------------------------------------------------------ >>> > > Bradley D. Bopp > Director Of Network Engineering > http://www.nationalnet.com > http://www.nationalnet.com/peering_policy.html > > NationalNet is committed to the highest level of Customer Service available > in the Web Hosting business. If you have any questions, comments or > concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, > 888-4NATNET). -- Jeremy Palmer Network Engineering ViaWest, Inc. Office: 720.891.1045 Fax: 303-874-5236 www.viawest.net

1 0

Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Ralph Pearson via RT 17 Mar '09

17 Mar '09

Not defending the Pope here, but wasn't the problem RIPE's careless crafting of headers in the original email?...these days I assume everyone does a reply-all... -r On Tue, Mar 17, 2009 at 9:13 AM, Justin Shore via RT <noc(a)isc.org> wrote: > I guess the Pope can't afford quality help. > > > -----Original Message----- > From: myasntesting-admin(a)ripe.net [mailto:myasntesting-admin@ripe.net] On > Behalf Of Bradley Bopp via RT > Sent: Tuesday, March 17, 2009 11:11 AM > To: pasquini(a)vatican.va > Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; > tt-host(a)ripe.net > Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single > Sign-On Deployment for Information Services Subscription Services > > He also hit every MYASN login sending it to the alias he did. I would say > a > rather large security issue. No. > > > > > On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > > > Hi Stefano, > > > > I believe you meant to e-mail <is-ops(a)ripe.net>. > > > > You have reached the NOC of ISC. ISC has nothing to do with the > > operation of any of the RIPE NCC Information Services. > > > > Thank you, > > > > Paul Vlaar - ISC NOC > > > > On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT > wrote: > >> Dear, > >> > >> My User is ³pasquini² but my single Sign-On password doesn¹t work and > the > >> password recovery the same.... > >> Please help me. > >> > >> Best regards > >> > >> Stefano Pasquini > >> > >> > >> > >> _________________________ > >> Dr. Stefano Pasquini > >> Internet Office of the Holy See > >> Cortile del Triangolo > >> V-00120 Vatican City > >> Vatican City State > >> Phone: +39 (06) 6989346 > >> +39 (06) 69893104 > >> GSM: +39 (335) 230152 > >> Email: pasquini(a)vatican.va > >> Web: http://www.vatican.va > >> > >> > >> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: > >> > >>> [Apologies for duplicates] > >>> > >>> Dear IS user, > >>> > >>> We have successfully completed the deployment of the "Single Sign-On" > >>> system for our subscription services: > >>> > >>> - MyASN > >>> - DNSMon > >>> - TTM Ad Hoc > >>> > >>> To ensure continuity of our services, old user accounts will continue > to > >>> be available for a period of three months. In that period, we kindly > ask > >>> our users to migrate their existing accounts to the new system using > the > >>> account migration web interface: > >>> http://www.ripe.net/is/account/migrate > >>> > >>> If you have any questions, please send an email to is-ops(a)ripe.net > >>> > >>> Regards, > >>> Information Services Team > >>> RIPE NCC > >>> > >>> > >> > >> > >> > >> > >> ------------------------------------------------------------------------ > >> > > > > Bradley D. Bopp > Director Of Network Engineering > http://www.nationalnet.com > http://www.nationalnet.com/peering_policy.html > > NationalNet is committed to the highest level of Customer Service available > in the Web Hosting business. If you have any questions, comments or > concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, > 888-4NATNET). > -- > > > > > > > >

1 0

Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Bradley Bopp via RT 17 Mar '09

17 Mar '09

Lol Sent via BlackBerry from T-Mobile -----Original Message----- From: "Justin Shore via RT" <noc(a)isc.org> Date: Tue, 17 Mar 2009 16:13:39 To: <pasquini(a)vatican.va> Cc: <dnsmon-contact(a)ripe.net>; <is-ops(a)ripe.net>; <myasntesting(a)ripe.net>; <tt-host(a)ripe.net> Subject: RE: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services I guess the Pope can't afford quality help. -----Original Message----- From: myasntesting-admin(a)ripe.net [mailto:myasntesting-admin@ripe.net] On Behalf Of Bradley Bopp via RT Sent: Tuesday, March 17, 2009 11:11 AM To: pasquini(a)vatican.va Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; tt-host(a)ripe.net Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services He also hit every MYASN login sending it to the alias he did. I would say a rather large security issue. No. On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > Hi Stefano, > > I believe you meant to e-mail <is-ops(a)ripe.net>. > > You have reached the NOC of ISC. ISC has nothing to do with the > operation of any of the RIPE NCC Information Services. > > Thank you, > > Paul Vlaar - ISC NOC > > On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT wrote: >> Dear, >> >> My User is ³pasquini² but my single Sign-On password doesn¹t work and the >> password recovery the same.... >> Please help me. >> >> Best regards >> >> Stefano Pasquini >> >> >> >>_________________________ >> Dr. Stefano Pasquini >> Internet Office of the Holy See >> Cortile del Triangolo >> V-00120 Vatican City >> Vatican City State >> Phone: +39 (06) 6989346 >> +39 (06) 69893104 >> GSM: +39 (335) 230152 >> Email: pasquini(a)vatican.va >> Web: http://www.vatican.va >> >> >> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: >> >>> [Apologies for duplicates] >>> >>> Dear IS user, >>> >>> We have successfully completed the deployment of the "Single Sign-On" >>> system for our subscription services: >>> >>> - MyASN >>> - DNSMon >>> - TTM Ad Hoc >>> >>> To ensure continuity of our services, old user accounts will continue to >>> be available for a period of three months. In that period, we kindly ask >>> our users to migrate their existing accounts to the new system using the >>> account migration web interface: >>> http://www.ripe.net/is/account/migrate >>> >>> If you have any questions, please send an email to is-ops(a)ripe.net >>> >>> Regards, >>> Information Services Team >>> RIPE NCC >>> >>> >> >> >> >> >> ------------------------------------------------------------------------ >> > Bradley D. Bopp Director Of Network Engineering http://www.nationalnet.com http://www.nationalnet.com/peering_policy.html NationalNet is committed to the highest level of Customer Service available in the Web Hosting business. If you have any questions, comments or concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, 888-4NATNET). --

1 0

[NOC #JWI-783738]: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by noc via RT 17 Mar '09

17 Mar '09

Paul Vlaar via RT, Your Ticket has been received and a member of our staff will review it and reply accordingly. Listed below are details of this Ticket. Please make sure the Ticket ID remains in the subject at all times. Ticket ID: JWI-783738 Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services Department: Datahop NOC Priority: Normal Status: Open You can check the status of or reply to this Ticket online at: http://noc.datahop.it/index.php?_m=tickets&_a=viewticket&ticketid=30617 Email: noc(a)isc.org Password: 44b46a33 Please do let us know if we can assist you any further, Datahop

1 0

RE: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Justin Shore via RT 17 Mar '09

17 Mar '09

I guess the Pope can't afford quality help. -----Original Message----- From: myasntesting-admin(a)ripe.net [mailto:myasntesting-admin@ripe.net] On Behalf Of Bradley Bopp via RT Sent: Tuesday, March 17, 2009 11:11 AM To: pasquini(a)vatican.va Cc: dnsmon-contact(a)ripe.net; is-ops(a)ripe.net; myasntesting(a)ripe.net; tt-host(a)ripe.net Subject: Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services He also hit every MYASN login sending it to the alias he did. I would say a rather large security issue. No. On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > Hi Stefano, > > I believe you meant to e-mail <is-ops(a)ripe.net>. > > You have reached the NOC of ISC. ISC has nothing to do with the > operation of any of the RIPE NCC Information Services. > > Thank you, > > Paul Vlaar - ISC NOC > > On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT wrote: >> Dear, >> >> My User is ³pasquini² but my single Sign-On password doesn¹t work and the >> password recovery the same.... >> Please help me. >> >> Best regards >> >> Stefano Pasquini >> >> >> >> _________________________ >> Dr. Stefano Pasquini >> Internet Office of the Holy See >> Cortile del Triangolo >> V-00120 Vatican City >> Vatican City State >> Phone: +39 (06) 6989346 >> +39 (06) 69893104 >> GSM: +39 (335) 230152 >> Email: pasquini(a)vatican.va >> Web: http://www.vatican.va >> >> >> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: >> >>> [Apologies for duplicates] >>> >>> Dear IS user, >>> >>> We have successfully completed the deployment of the "Single Sign-On" >>> system for our subscription services: >>> >>> - MyASN >>> - DNSMon >>> - TTM Ad Hoc >>> >>> To ensure continuity of our services, old user accounts will continue to >>> be available for a period of three months. In that period, we kindly ask >>> our users to migrate their existing accounts to the new system using the >>> account migration web interface: >>> http://www.ripe.net/is/account/migrate >>> >>> If you have any questions, please send an email to is-ops(a)ripe.net >>> >>> Regards, >>> Information Services Team >>> RIPE NCC >>> >>> >> >> >> >> >> ------------------------------------------------------------------------ >> > Bradley D. Bopp Director Of Network Engineering http://www.nationalnet.com http://www.nationalnet.com/peering_policy.html NationalNet is committed to the highest level of Customer Service available in the Web Hosting business. If you have any questions, comments or concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, 888-4NATNET). --

1 0

Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Bradley Bopp via RT 17 Mar '09

17 Mar '09

He also hit every MYASN login sending it to the alias he did. I would say a rather large security issue. No. On 3/17/09 11:18 AM, "Paul Vlaar via RT" <noc(a)isc.org> wrote: > Hi Stefano, > > I believe you meant to e-mail <is-ops(a)ripe.net>. > > You have reached the NOC of ISC. ISC has nothing to do with the > operation of any of the RIPE NCC Information Services. > > Thank you, > > Paul Vlaar - ISC NOC > > On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT wrote: >> Dear, >> >> My User is ³pasquini² but my single Sign-On password doesn¹t work and the >> password recovery the same.... >> Please help me. >> >> Best regards >> >> Stefano Pasquini >> >> >> >> _________________________ >> Dr. Stefano Pasquini >> Internet Office of the Holy See >> Cortile del Triangolo >> V-00120 Vatican City >> Vatican City State >> Phone: +39 (06) 6989346 >> +39 (06) 69893104 >> GSM: +39 (335) 230152 >> Email: pasquini(a)vatican.va >> Web: http://www.vatican.va >> >> >> Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: >> >>> [Apologies for duplicates] >>> >>> Dear IS user, >>> >>> We have successfully completed the deployment of the "Single Sign-On" >>> system for our subscription services: >>> >>> - MyASN >>> - DNSMon >>> - TTM Ad Hoc >>> >>> To ensure continuity of our services, old user accounts will continue to >>> be available for a period of three months. In that period, we kindly ask >>> our users to migrate their existing accounts to the new system using the >>> account migration web interface: >>> http://www.ripe.net/is/account/migrate >>> >>> If you have any questions, please send an email to is-ops(a)ripe.net >>> >>> Regards, >>> Information Services Team >>> RIPE NCC >>> >>> >> >> >> >> >> ------------------------------------------------------------------------ >> > Bradley D. Bopp Director Of Network Engineering http://www.nationalnet.com http://www.nationalnet.com/peering_policy.html NationalNet is committed to the highest level of Customer Service available in the Web Hosting business. If you have any questions, comments or concerns feel free to contact us at 404-420-7000 ext 1 (or toll-free, 888-4NATNET). --

1 0

Re: [ISC-Ops #23527] [myasntesting] Re: [dnsmon-contact] Single Sign-On Deployment for Information Services Subscription Services
by Paul Vlaar via RT 17 Mar '09

17 Mar '09

Hi Stefano, I believe you meant to e-mail <is-ops(a)ripe.net>. You have reached the NOC of ISC. ISC has nothing to do with the operation of any of the RIPE NCC Information Services. Thank you, Paul Vlaar - ISC NOC On Tue Mar 17 2009 16:14:13 GMT+0100 (CET), Stefano Pasquini via RT wrote: > Dear, > > My User is ³pasquini² but my single Sign-On password doesn¹t work and the > password recovery the same.... > Please help me. > > Best regards > > Stefano Pasquini > > > > _________________________ > Dr. Stefano Pasquini > Internet Office of the Holy See > Cortile del Triangolo > V-00120 Vatican City > Vatican City State > Phone: +39 (06) 6989346 > +39 (06) 69893104 > GSM: +39 (335) 230152 > Email: pasquini(a)vatican.va > Web: http://www.vatican.va > > > Il 15/10/08 19:28, "RIPE NCC Information Services" <[IND]> ha scritto: > >> [Apologies for duplicates] >> >> Dear IS user, >> >> We have successfully completed the deployment of the "Single Sign-On" >> system for our subscription services: >> >> - MyASN >> - DNSMon >> - TTM Ad Hoc >> >> To ensure continuity of our services, old user accounts will continue to >> be available for a period of three months. In that period, we kindly ask >> our users to migrate their existing accounts to the new system using the >> account migration web interface: >> http://www.ripe.net/is/account/migrate >> >> If you have any questions, please send an email to is-ops(a)ripe.net >> >> Regards, >> Information Services Team >> RIPE NCC >> >> > > > > > ------------------------------------------------------------------------ > -- Paul_Vlaar(a)isc.org - ISC Operations - +1 650 423 1349 - PGP 0x294EC062

1 0

Single Sign-On Deployment for Information Services Subscription Services
by RIPE NCC Information Services 17 Mar '09

17 Mar '09

[Apologies for duplicates] Dear IS user, We have successfully completed the deployment of the "Single Sign-On" system for our subscription services: - MyASN - DNSMon - TTM Ad Hoc To ensure continuity of our services, old user accounts will continue to be available for a period of three months. In that period, we kindly ask our users to migrate their existing accounts to the new system using the account migration web interface: http://www.ripe.net/is/account/migrate If you have any questions, please send an email to is-ops(a)ripe.net Regards, Information Services Team RIPE NCC

2 1

Single Sign-On Deployment for Information Services Subscription Services
by RIPE NCC Information Services 09 Oct '08

09 Oct '08

[Apologies for duplicates] Dear IS user, On Wednesday, 15 October 2008, the RIPE NCC Information Services Team will deploy a new "Single Sign-On" system for all its subscription services: - MyASN - DNSMON - TTM Ad Hoc This will give you the opportunity to use all our services with a single username and password. The maintenance window is scheduled between 15:00 and 17:00 (UTC). However, no service interruption is expected for our users. If you have any questions, please send an email to is-ops(a)ripe.net. Regards, Information Services Team RIPE NCC

1 0

pepen@cajastur.es
by pepen＠cajastur.es 01 Sep '08

01 Sep '08

2 1

MyASN outage and RIS service degradation
by Erik Romijn 16 Apr '08

16 Apr '08

[Apologies for duplicates] Dear Colleagues, Due to failure of one of our database servers, the MyASN service is currently unavailable. No alarms will be detected and the configuration website is not working. The other RIS tools still work, but their speed is degraded. We do not know when this problem will be resolved, but we will let you know when more information is available. We thank you for your patience and apologise for any inconvenience this may cause. If you have any questions, please send an e-mail to <ris(a)ripe.net>. Regards, Erik Romijn Information Services RIPE NCC

1 1

MyASN Syslog alerts
by Sean Cardus 29 Feb '08

29 Feb '08

Hi, I've just created a new MYASN account and I'm looking at configuring syslog alerting. So I can configure our firewall, what source IPs can I expect the alerts to originate from? Thanks in advance, Sean -- Sean Cardus ZebraHosts LTD

2 2

RIS to be modified to support 4-byte ASNs
by Erik Romijn 11 Jan '07

11 Jan '07

[Apologies for duplicates] Dear Colleagues, >From 1 January 2007, the RIPE NCC has been assigning 4-byte Autonomous System Numbers (ASNs) to members. To support this, the Routing Information Service (RIS) will soon be modified so that RIS output can include 4-byte ASNs. Any tools you use that parse RIS output should therefore be updated to allow this. Raw data dumps from the RIS will also be affected and you should ensure any tools that read it are capable of handling the new format. The exact date when 4-byte ASNs will start appearing in the RIS is not yet known, as software is being still tested and modified. The RIPE NCC will post a notification three business days in advance of any changes being implemented. Details of the changes to the RIS can be found at: http://www.ripe.net/projects/ris/docs/asn.html If you have any questions, please send an e-mail to ris(a)ripe.net. Regards, Erik Romijn Information Services Department RIPE NCC

1 0

MyASN e-mail notification outage, 23-24 October 2006
by Erik Romijn 24 Oct '06

24 Oct '06

Dear Colleagues, The MyASN service did not send e-mail notifications for alarms from 23 October 2006, 16:00 (UTC) until 24 October 2006, 15:45 (UTC). The service has now been restored. All alarms have been detected and e-mail notifications, if any, will be sent out. Syslog notifications have not been delayed. It may be several hours before all e-mail notifications have been sent. This problem was caused by scheduled RIS maintenance on 23 October 2006. We are currently improving our monitoring system to reduce the time it takes to notice outages like these. We apologise for any inconvenience this outage may have caused. If you have any questions about this, please e-mail us at: ris(a)ripe.net. Regards, Erik Romijn RIS Operations RIPE NCC

1 0

RE: [myasntesting] ANNOUNCEMENT: RIS webserver upgrade tomorrow.
by Henry Dziewa 02 Dec '05

02 Dec '05

Hello, I haven't been to the MyASn project for a long while now, and not sure what if any Work was done to improve its functionality. I forgot the login info And would appreciate if anyone can let me know how to restore the login So that I can take a look at this tool once again. Thanks !

2 1

ANNOUNCEMENT: RIS webserver upgrade tomorrow.
by arife＠ripe.net 01 Dec '05

01 Dec '05

Dear Colleagues, We will upgrade the RIS webserver (http://www.ris.ripe.net/) at 1st of December 2005 15:00 CET. We do not expect any interruption to the service, however if you have any problems to access the RIS services, please do not hesitate to contact us. Regards, Arife Vural RIPE NCC

1 1

false reports?
by Matsuzaki Yoshinobu 15 Nov '05

15 Nov '05

Hello all, We have seen many alarms at this moment. I checked the alarms by comparison with several route-server's records, and it seems the alarms are false reports. How is your situations, all? ----- Matsuzaki Yoshinobu <maz(a)iij.ad.jp> - IIJ/AS2497 INOC-DBA: 2497*629 In message <200511150304.jAF34wjY029283(a)diemen.ripe.net> Date: Tue, 15 Nov 2005 03:04:58 GMT myASn Notifications <myasn(a)ripe.net> wrote > Origin alarm 1356 (IIJ-CIDR), 58.138.0.0/17 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+---------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+---------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 58.138.0.0/17 | 193.203.0.52 | 3320 | Mon Nov 14 23:40:20 2005 | Mon Nov 14 23:40:28 2005 | > | | | 193.203.0.7 | | | | > '=------+---------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 622 (IIJ-CIDR), 210.128.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.128.0.0/16 | 193.203.0.52 | 4694 | Mon Nov 14 23:40:23 2005 | Mon Nov 14 23:40:34 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 623 (IIJ-CIDR), 210.130.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.130.0.0/16 | 193.203.0.52 | 2510 | Mon Nov 14 23:40:36 2005 | Mon Nov 14 23:40:36 2005 | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 624 (IIJ-CIDR), 210.133.192.0/18 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+------------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+------------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.133.192.0/18 | 193.203.0.52 | 4725 | Mon Nov 14 23:40:24 2005 | Mon Nov 14 23:40:34 2005 | > | | | 193.203.0.7 | | | | > '=------+------------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 625 (IIJ-CIDR), 210.138.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.138.0.0/16 | 193.203.0.52 | 2527 | Mon Nov 14 23:40:20 2005 | Mon Nov 14 23:40:29 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 626 (IIJ-CIDR), 210.148.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.148.0.0/16 | 193.203.0.52 | 4725 | Mon Nov 14 23:40:24 2005 | Mon Nov 14 23:40:34 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 627 (IIJ-CIDR), 210.149.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.149.0.0/16 | 193.203.0.52 | 4725 | Mon Nov 14 23:40:24 2005 | Mon Nov 14 23:40:34 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 628 (IIJ-CIDR), 210.173.0.0/19 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 210.173.0.0/19 | 193.203.0.52 | 18142 | Mon Nov 14 23:40:23 2005 | Mon Nov 14 23:40:33 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 631 (IIJ-CIDR), 219.126.128.0/17 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+------------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+------------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 219.126.128.0/17 | 193.203.0.52 | 4134 | Mon Nov 14 23:40:34 2005 | Mon Nov 14 23:40:34 2005 | > '=------+------------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 633 (IIJ-CIDR), 216.98.96.0/19 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 216.98.96.0/19 | 193.203.0.52 | 14039 | Mon Nov 14 23:40:24 2005 | Mon Nov 14 23:40:34 2005 | > | | | 193.203.0.7 | | | | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 1202 (IIJ-CIDR), 220.100.0.0/16 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 220.100.0.0/16 | 193.203.0.52 | 33798 | Mon Nov 14 23:40:34 2005 | Mon Nov 14 23:40:34 2005 | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 1200 (IIJ-CIDR), 220.156.0.0/17 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+----------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+----------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 220.156.0.0/17 | 193.203.0.52 | 33798 | Mon Nov 14 23:40:34 2005 | Mon Nov 14 23:40:34 2005 | > '=------+----------------+--------------+-----------------+--------------------------+-------------------------=' > > Origin alarm 1201 (IIJ-CIDR), 220.156.128.0/18 (exceptions not shown), myASn: 2497, MinED: 60, MinEC: 1, ADW: 3600 > .=------+------------------+--------------+-----------------+--------------------------+-------------------------=. > | RRC | Prefix(es) | Peer(s) | Conflicting ASs | First Seen | Last Seen | > |=------+------------------+--------------+-----------------+--------------------------+-------------------------=| > | rrc05 | 220.156.128.0/19 | 193.203.0.52 | 33798 | Mon Nov 14 23:40:34 2005 | Mon Nov 14 23:40:34 2005 | > '=------+------------------+--------------+-----------------+--------------------------+-------------------------='

2 1

RE: [myasntesting] false reports?
by Rob Wise 15 Nov '05

15 Nov '05

myasntesting-admin(a)ripe.net wrote: > Hello all, > > We have seen many alarms at this moment. I checked the alarms by > comparison with several route-server's records, and it seems the > alarms are false reports. > > How is your situations, all? We're seeing the same issue with reports for AS9942. Cheers, Rob

1 0

(no subject)
by rajtanu＠alliancekolkata.com 28 Oct '05

28 Oct '05

Dear sir Recently we got our IP fom Apnic.We want to setup our DNS server and make the reverse dns entry for those ips. Do we have to make any DNS entry to RIPE or APNIC servers? It willbe helpful for us we got any help regarding DNS setup. NOC

1 0

Fw: Welcome to the "Myasntesting" mailing list
by Brijesh Patel 26 Oct '05

26 Oct '05

----- Original Message ----- From: <myasntesting-request(a)ripe.net> To: <brijesh(a)gipl.net> Sent: Wednesday, October 26, 2005 5:39 PM Subject: Welcome to the "Myasntesting" mailing list > Welcome to the Myasntesting(a)ripe.net mailing list! > > To post to this list, send your email to: > > myasntesting(a)ripe.net > > General information about the mailing list is at: > > http://www.ripe.net/mailman/listinfo/myasntesting > > If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > http://www.ripe.net/mailman/options/myasntesting/brijesh%40gipl.net > > You can also make such adjustments via email by sending a message to: > > Myasntesting-request(a)ripe.net > > with the word `help' in the subject or body (don't include the > quotes), and you will get back a message with instructions. > > You must know your password to change your options (including changing > the password, itself) or to unsubscribe. It is: > > woxese > > If you forget your password, don't worry. There is a button on your > options page that will email your current password to you. > > Kind Regards, > > RIPE NCC Mailing list moderation team > >

1 0

MyASn will be offline today between 14.00 and 18.00 (CET).
by Arife Vural 25 Nov '04

25 Nov '04

Dear All, Because of urgent maintenance on our main RIS server, MyASn service would not be available today between 14.00 and 18.00 (CET). Other RIS services would not be affected from this maintenance window. Sorry for the inconvenience we caused. Kind regards. Arife

1 0

Re: myASn Account Created
by Hroi Sigurdsson 12 Jul '04

12 Jul '04

Matthew Williams wrote: > Hi there, > > >>morning from the one bogus entry and from the transit alarms, >>triggered >>by peer propagation. > > > Great :) > > I really appreciate that you're investing the time to investigate our system. Please feel free to suggest some features that you > think are missing in the current implementation. You're welcome. It is a useful tool. A cool feature would be auto-configuration (even auto-updating?) of alerts from info in aut-num objects. Another nice feature would be detection of leaks, ie. "only this set of prefixes may have my AS in the path". Comparative checks: "These prefixes must have identical paths" etc. (might be too noisy). Bug? Customer alerts contain empty AS fields: Customer alarm 742 (Default), 217.145.48.0/20 (exceptions not shown), MyASn: , Their ASn: , HDT: 60, HDE: 1, TTL: 3600 .=------+-----------------+--------------+--------------------------+-------------------------=. | RRC | Prefix | Peer | First Seen | Last Seen | |=------+-----------------+--------------+--------------------------+-------------------------=| | rrc10 | 217.145.48.0/20 | 217.29.66.65 | Wed Jul 7 02:02:01 2004 | Wed Jul 7 02:02:01 2004 | '=------+-----------------+--------------+--------------------------+-------------------------=' -- Hroi Sigurdsson · NetGroup DataCenter A/S St. Kongensgade 40H · DK-1264 Copenhagen K, Denmark Phone: +45 3370 1544 · Fax: +45 7025 2687

2 1

NOTIFICATION: myASn inaccessable from 4pm, CET, today (09.07.2004) , until 10am, CET, on Monday (12.07.2004)
by Matthew Williams 09 Jul '04

09 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear All, Due to a code update of the myASn beta, users will not be able to access the system over the weekend. We also expect that notifications during the maintenance window may be unreliable, and probably better ignored. The update and the following testing will commence at 4pm, CET, today (09.07.2004) and be completed by 10am, CET, on Monday (12.07.2004). Apologies for the short notice. Kind regards, Matthew Williams --- > Matthew Williams (MW243-RIPE) > Customer Liaison Engineer > RIPE NCC - http://www.ripe.net/np/ -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBQO6Z5sHkFbJe+GdoEQKomgCgtuNeg3IHx3TEyIUilZgq0qMQc7wAn0Ex eFOtVISez4CTTvb2zuPhNvQW =1COI -----END PGP SIGNATURE-----

1 0

RE: myASn Account Created
by Matthew Williams 07 Jul '04

07 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, myASn has to detect an update from a RIS peer somewhere that 'conflicts' with your configuration. Check one of the 'bogus' prefixes in BGPlay for the time period that that alarm was configured. If you see activity there that you feel should have triggered an event, which you didn't see in 'pending events' on the 'Manage Alarms' page or 'view details' on the 'View Alarms' page, then we would have to dig deeper to see whether it's a bug. You can use one of the RIS routing beacon as a reference (originated from AS12654), just to make sure that the myASn system is actually doing something. The list of prefixes is available here: http://www.ripe.net/ris/beaconlist.html Please note that syslog will report conflicting 'events' rather than 'alarms', and that the feature is very experimental at this stage. Thanks for testing myASn! Kind regards, Matthew Williams > -----Original Message----- > From: Hroi Sigurdsson [mailto:hroi@ngdc.net] > Sent: 06 July 2004 19:51 > To: risops(a)ripe.net > Subject: Re: myASn Account Created > > > Thanks. > > I created two bogus alarms just for testing, but I don't get > alerts? Alarm 741 and 742 are bogus. > -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBQOwS5cHkFbJe+GdoEQL6HACfQzS9znECa/P6rhU9KNQBVQynU/gAn2fJ CS2EKxjdAdQ+aa3LDJKyB0sx =yAQY -----END PGP SIGNATURE-----

1 0

NOTIFICATION: Old myASn Prototype Deprecated
by Matthew Williams 05 Jul '04

05 Jul '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear All, We will be turning off the old prototype at URL: http://www.ris.ripe.net/cgi-bin/myas/index.cgi on Friday, the 9th of July, 2004. The current beta is available here: http://www.ris.ripe.net/myasn.html. Just type in your old account information from the previous myASn prototype in the following format (without apostrophes): U: 'user@asn' PW: 'old password' There is a tool in this newer version of myASn, which allows you to import origin alarms into the configuration. Alas, the other alarm types could not be included due to design changes. Thanks for testing myASn. Your comments are more than welcome. Kind regards, The RIS Team --- > Matthew Williams (MW243-RIPE) > Customer Liaison Engineer > RIPE NCC - http://www.ripe.net/np/ -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBQOkedcHkFbJe+GdoEQK79gCeOxN/AbisyC88LpUD+FisVcwkRrUAoOqZ jNHaLfm32jpAyrUDc75ZkCyG =aJvw -----END PGP SIGNATURE-----

1 0

FW: [myasntesting] New alarm types (proposal)
by Matthew Williams 30 Jun '04

30 Jun '04

Hi there, This is the kind of feedback that we need :) > Expected Transit Alarm > > A Transit Alarm currently goes off when a prefix/AS appears to receive > transit from an unspecified provider. Our peering relationships are > complex, with multiple upstreams and presence at multiple At some point, the intention is to provide tighter integration with the RIPE db and IRR; eg enable the user to pull/import AS_sets and Route_sets into the myASn system. In the longer term, we'd also like to add myASn to the LIR portal. Other ideas are welcome. > exchanges. It would be complex to list and maintain our entire peering > structure in myasn. > > An Expected Transit Alarm would sound when a prefix/AS _doesn't_ > recieve transit from a _specified_ provider. It seems to me that you'd like a visibility type alarm with the option to match/don't match the regular expression and AS_path. We will definitely incorporate a visibility alarms in the near future. We have had many folk requesting this functionality (see 'requested features' after logging in). Exactly how has yet to be dwelled upon. I think we should look into your proposed alarm type. > > (The difficulty with this alarm is, of course, that perhaps your > routing beacons do not ever see the expected AS path.) > > > Comparision Alarms > > This would allow you to specify groups of prefixs that ought to have > idenitical AS paths, past a specified (common) point. > > For example: AS1 is providing identical global transit to AS's 2, 3 > and 4, and identical partial transit to AS's 5, 6, 7. For the global > transit after ^2_1_ , ^3_1_ and ^4_1 the paths seen should be > idenitcal. Likewise for ^5_1_ , ^6_1_ and ^7_1_ . I am a little confused about the paths above. If AS1 is providing transit to 2,3,4 etc then the RIS would expect to see AS1 upstream from 2,3,4 etc, or did I miss something? Anyway, I think I understand your point: tell me if the paths for this collection of prefixes are dissimilar beyond an AS. The question is what the advanced reg exp option could do for you when creating alarms. Kind regards, Matthew > > A comparison alarm would go off when differing AS paths are seen > within the given groups. > > With some extra thought on how to specify the common points in the AS > path, AS 1 could also compare it's global annoucements to those it > annouces for ASs 2, 3 and 4 etc. > > When setting up new transit and peering arrangements we would use this > to check the propogation of prefixes against known working > annoucements. It would also guard against indiviudal prefixes suddenly > being filtered at some future point. > > The nice thing about this is that it only compares, so you don't > actually have to maintain the AS paths you expect to see. > > > Just some suggestions - I'd be interested in what the implementors > think about the feasibilty of these. > > Sam > >

1 0

New alarm types (proposal)
by Sam Stickland 28 Jun '04

28 Jun '04

Hi, I've been playing about with the myasn system, and it's impressive, but it doesn't quite work the way we'd like to it. While the objective of the project is described as "an alarm notification system that monitors the propagation of eBGP routes" the biggest problem we face is the _non-propagation_ of eBGP routes. I've seen countless cases where our peers (or our peers peer) prefix filters were blocking routes we were attempting to annouce to them, but few incidents of route leaks or actual hi-jacking in comparision. With this in mind, I'd like to suggest two new types of alarm: Expected Transit Alarm A Transit Alarm currently goes off when a prefix/AS appears to receive transit from an unspecified provider. Our peering relationships are complex, with multiple upstreams and presence at multiple exchanges. It would be complex to list and maintain our entire peering structure in myasn. An Expected Transit Alarm would sound when a prefix/AS _doesn't_ recieve transit from a _specified_ provider. (The difficulty with this alarm is, of course, that perhaps your routing beacons do not ever see the expected AS path.) Comparision Alarms This would allow you to specify groups of prefixs that ought to have idenitical AS paths, past a specified (common) point. For example: AS1 is providing identical global transit to AS's 2, 3 and 4, and identical partial transit to AS's 5, 6, 7. For the global transit after ^2_1_ , ^3_1_ and ^4_1 the paths seen should be idenitcal. Likewise for ^5_1_ , ^6_1_ and ^7_1_ . A comparison alarm would go off when differing AS paths are seen within the given groups. With some extra thought on how to specify the common points in the AS path, AS 1 could also compare it's global annoucements to those it annouces for ASs 2, 3 and 4 etc. When setting up new transit and peering arrangements we would use this to check the propogation of prefixes against known working annoucements. It would also guard against indiviudal prefixes suddenly being filtered at some future point. The nice thing about this is that it only compares, so you don't actually have to maintain the AS paths you expect to see. Just some suggestions - I'd be interested in what the implementors think about the feasibilty of these. Sam

1 0

RE: transit alarms with a single-element AS-PATH
by Matthew Williams 23 Jun '04

23 Jun '04

Hi there, > the RRC box we peer with is receiving the prefix directly > from us without our transit provider ASN prepended, so myasn > is flagging it as a leak. Hmm, if so, then that's not really what we want. I'll add this to the bug list after reproducing it. > BTW, I think that it would be useful to sort by default on > last seen date in show_alarmevents.html. We'll look into this one. Cannot promise anything though. Many thanks for the feedback. Kind regards, Matthew > -----Original Message----- > From: Marco d'Itri [mailto:md@Linux.IT] > Sent: 23 June 2004 18:38 > To: ris(a)ripe.net > Subject: transit alarms with a single-element AS-PATH > > > I'm receiving some events (for alarm 545) with only my own > ASN in the path. If I understand correctly what is happening, > the RRC box we peer with is receiving the prefix directly > from us without our transit provider ASN prepended, so myasn > is flagging it as a leak. > > BTW, I think that it would be useful to sort by default on > last seen date in show_alarmevents.html. > > -- > ciao, | > Marco | [6886 cov/HgvPKMXiU] >

1 0

myASn User Feedback
by Nipper, Arnold 20 Jun '04

20 Jun '04

Howdy, how do I change notification for Origin alarm? Do I have to add a new user? Arnold -- Arnold Nipper / DE-CIX Management GmbH, the German Internet Exchange e-mail: arnold.nipper(a)de-cix.net phone/mob: +49 172 265 0958 fax: +49 6224 9259 333 http://www.de-cix.net pgp-fingerprint: e533 5cc5 be27 27ae 04b7 0adc 2603 f8a9 1b59 3bd4

2 1

ANNOUNCEMENT: myASn beta ready for testing
by Matthew Williams 14 Jun '04

14 Jun '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear All, The myASn beta is now ready for testing! Just type in your old account information from the previous myASn prototype in the following format (without apostrophes): U: 'user@asn' PW: 'old password' URL: http://www.ris.ripe.net/myasn.html Thanks for testing myASn. Your comments are more than welcome. Kind regards, The RIS Team --- > Matthew Williams (MW243-RIPE) > Customer Liaison Engineer > RIPE NCC - http://www.ripe.net/np/ -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQA/AwUBQM2LncHkFbJe+GdoEQJOoACgh5dn6bqr9urGBv482JbjSVd777cAniVc lqM8z90QcFWdiLBE9ZS01U5r =u0On -----END PGP SIGNATURE-----

1 0

RE: [myasntesting] origin alarms / PI
by Henry Dziewa 19 May '04

19 May '04

Is it me or there is not much work being done with this project ? I have the same issues as described below and even when signing up the AS it takes a long time for someone to respond. -----Original Message----- From: Joerg Schumacher [mailto:schuma@gaertner.de] Sent: Friday, May 14, 2004 10:16 AM To: myasntesting(a)ripe.net Subject: [myasntesting] origin alarms / PI Hi, we just signed up and got our first origin alarm. Configured prefix: 194.120.234.0/24 prefix causing the alarm: 194.120.0.0/14 194.120.234.0/24 has status: ASSIGNED PI. Origin alarms for PI networks due to a less specific prefix aren't really useful. Regards, Joerg -- Gaertner Datensysteme 38114 Braunschweig Joerg Schumacher Hamburger Str. 273a Tel: 0531-2335555 Fax: 0531-2335556

4 3

origin alarms / PI
by Joerg Schumacher 14 May '04

14 May '04

Hi, we just signed up and got our first origin alarm. Configured prefix: 194.120.234.0/24 prefix causing the alarm: 194.120.0.0/14 194.120.234.0/24 has status: ASSIGNED PI. Origin alarms for PI networks due to a less specific prefix aren't really useful. Regards, Joerg -- Gaertner Datensysteme 38114 Braunschweig Joerg Schumacher Hamburger Str. 273a Tel: 0531-2335555 Fax: 0531-2335556

1 0

recover password for myAS
by Maxim Tuliuk 11 May '04

11 May '04

Hello I'm sorry, I forget login and password from myAS. How I can recover it? (AS: 21011) -- Maxim Tuliuk, Network Engineer ISP "TopNet": http://top.net.ua/ (+380-44) 239-2899/246-3669/248-8206

2 1

Re: Welcome to the "Myasntesting" mailing list
by Hilario Martin G. 04 May '04

04 May '04

Hi, would you please tell me my login name & password? thanks in advance, Hilario On Tue, 04 May 2004 15:19:38 +0200 myasntesting-request(a)ripe.net wrote: > Welcome to the Myasntesting(a)ripe.net mailing list! Your myASn account > has been created! > > In order to start using it type you AS number into the 'AS number:' > text box and click on 'SUBMIT'. The next page shows two links, > 'Current Alarms' and 'Alarm Configuration'. From this point your Login > Name and Password will be required.

1 0

(no subject)
by admin-dima 08 Jan '04

08 Jan '04

requested features

1 0

FW: MyASN - no alarms
by Matthew Williams 17 Dec '03

17 Dec '03

Forwarded to myasntesting... > -----Original Message----- > From: Arife Vural [mailto:arife@ripe.net] > Sent: 17 December 2003 12:00 > To: Andreas Laudwein > Cc: ris(a)ripe.net > Subject: Re: MyASN - no alarms > > > > Hi Andreas, > > > I wrote a question to Maximo, he responded but that was on his last > > working day for RIPE, so I'm now getting back to you with further > > questions ;-) > > I try to answer your question as much I can :-) > > > >>We just had a look at MyASN, configured it and waited for alarms, > > >>but we > > >>did not receive any ... our AS number is 8560. > > >> > > >>We put in 5 prefixes in, but no more-specifics (we have one > > >>more-specific announced). We put in two upstream > providers and 'forgot' > > >>one upstream to provoke upstream alarms. > > >> > > >>For some weird reason, we don't get any alarms. I > crosschecked with > > >>the > > >>RIS query and when I compare it with our config, I should > get a bunch of > > >>alarms. > > > > > >The myASn send alarm notification in case something unexpected > > >happen. In > > >your case you have configured: > > >the origin alarms: > > >@ ORIGIN 217.160/16 300 3 14400 > > >@ ORIGIN 195.20.224/19 300 3 14400 > > >@ ORIGIN 212.227/16 300 3 14400 > > >@ ORIGIN 82.165/16 300 3 14400 > > > > > >and the providers: > > >@ PROVIDERS 3356 300 3 14400 > > >@ PROVIDERS 1239 300 3 14400 > > > > > >you will only get alarm messages in case something unexpected > > >happens. For > > >example > > >if AS2323 announces prefix 217.160/16 you will then get > alarm messages. Or > > >if someone announces any prefix and the ASPATH is NOT "x x > x 3356 8569 x x > > >x" OR > > >"x x x 1239 8569 x x xÂ¨ then you will get alarm messages. > > > > so with this setting we should get alarms: as I wrote I left out a > > more > > specific in the configuration and I left out another > upstream, which is > > AS12312. > > If I query RIS directly, I e.g. see the announcement from > AS12132 as > > well as various announcements from other RIS peers who give > you a full > > feed and announce our route as their peer route. > > > > myASN is using only data from RRC03. That's kind of > misleading. You can > get all BGP announcement from RIS queries but you can not see > those in > myASN. New version will run over all RRC data. > > It looks there is a bug in ASPATH matching. This would be > fixed in the new version of myASN. > > > Can you please have a look at this issue ? > > > > We would be happy to integrate MyASN into our monitoring since it > > gives > > us a smart view on how the world's routers is see us. > > It's great to hear that! I suggest you to wait the new > version will be > online. We are planning to announce the new version late Jan. > > Kind regards, > > Arife > > > Thanks ! > > > > Regards, > > Andreas > > -- > > Andreas Laudwein p: +49 721 91374 391 > > Network Operations f: +49 721 91374 212 > > Schlund+Partner AG http://www.schlund.net > > -- > > "The shortest distance between two points is usually under repair" > > -Anonymous > >

1 0

RE: myASn Super User Account Created
by Matthew Williams 30 Oct '03

30 Oct '03

Hi there, > Thanks for creating my account. You are most welcome. > I had one question about the customer alarms. The tutorial > says the Customer Alarms are to check: > "Are my single-homed customers routes being announced with > myself as the expected transit provider?" > Does the system also check for more-specific announcements > from the customer prefix blocks that might show up with a > different source ASN? We do monitor more specifics. However, this particular alarm type focuses on matching the upstream of the origin, i.e. YYYY in AS sequence {XXXX, YYYY, ZZZZ}. This means that the highjacked more specific route would only be detected if announced over someone else than YYYY. The type of alarm you are implying will become available in the version of myASn that integrates into the RIPE NCC LIR Portal, for it'll allow the user to monitor IP space originating from any ASN. One of the remaining issues is how to facilitate users, whom are non-LIRs, with access to the system. We are currently looking into several feasible workarounds. Our aim is to provide this service to the entire community. Both related and non-related ideas are always welcome ;) LIR Portal: https://lirportal.ripe.net/lirportal/index.html I hope above answers your question. There should be a beta of the next version ready for demonstration by the next RIPE meeting in January. Watch this space for more information. Best regards, Matthew Williams Ps. I have cc'd Maximo Alves, the developer working on myASn, in case he has something to add. > -----Original Message----- > From: metzger(a)ripe.net [mailto:metzger@ripe.net] On Behalf Of > Joe Metzger > Sent: 28 October 2003 18:25 > To: matthew(a)ripe.net > Subject: Re: myASn Super User Account Created > > > Matthew, > Thanks for creating my account. > > This looks like a very interesting project! I was looking at > putting together something similar to help monitor and track > problems with Spammers hijacking address space for short > intervals and using them to inject spam. > > > I had one question about the customer alarms. The tutorial > says the Customer Alarms are to check: > "Are my single-homed customers routes being announced with > myself as the expected transit provider?" > > Does the system also check for more-specific announcements > from the customer prefix blocks that might show up with a > different source ASN? > > > Is the myastesting(a)ripe.net mailing list the appropriate > place to ask this kind of question? > > > --Thanks! > Joe Metzger > > Matthew Williams wrote: > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Dear myASn Test User, > > > > We have created a super user account for you with the requested > > password. You have also been added to our mailing list > > "myasntesting(a)ripe.net". Please help us to improve the > current alpha > > version by sending your comments to > mailto:myasntesting@ripe.net. The > > latest "bug" and > "requested features" lists are accessible from the > > help page after login. > > > > Some useful links: > > - - - ------------------- > > * myASn Login: http://www.ris.ripe.net/cgi-bin/myas/index.cgi > > > > * myASn Help: http://www.ripe.net/ris/myasnhelp.html > > > > * myASn FAQ: http://www.ripe.net/ris/myasnfaq.html > > > > * myASn Glossary: http://www.ripe.net/ris/myasngls.html > > > > * myASn Tutorial: > > http://www.ripe.net/ris/Talks/myAS_TUTORIAL_MEGABIT.pdf > > > > Thank you for signing up as a myASn test user! > > > > Kind regards, > > The RIS Team > > > > Ps. We are in the process of changing the project name from > "myAS" to > > "myASn". > > > > --- > > > Matthew Williams (MW243-RIPE) > > > Customer Liaison Engineer > > > RIPE NCC - http://www.ripe.net/np/ > > > > -----BEGIN PGP SIGNATURE----- > > Version: PGP 7.0.4 > > > > iQA/AwUBP56aIcHkFbJe+GdoEQJ5MQCg0R+egHb4GgAmJsp5xBzZYtMq4fkAoNmh > > GhPIefYXOy+oQ/8OosNrBzrM > > =7WnO > > -----END PGP SIGNATURE----- > > -- > Joe Metzger > metzger(a)es.net > Network Engineering, ESnet > Lawrence Berkeley National Laboratory >

2 2

AS378
by Hank Nussbacher 01 Sep '03

01 Sep '03

Comments: 1) I manage 2 ASNs 378 and 3339. Most ISPs manage quite a few. The model of having myASN based per ASN number is wrong. It should be based on a person or mntner who has authority for multiple ASNs. Otherwise, the tool becomes cumbersome. 2) When I login to myASN, I would like to see that the system has auto-learnt all my announced prefixes and presents a menu of prefixes - 1 per line - with boxes to be checked or modified - such as "remove" or "holdtime", "ttl", etc. 3) From http://www.ris.ripe.net/myas/accounts/378/myashelp.html (individual help page) you should have links to the FAQ as well. -Hank

3 2

[NOTIFICATION: myASn backend working again]
by Maximo Alves 15 Aug '03

15 Aug '03

Dear All, The myASn prototype's backend is working fine now. Best regards, The RIS Team

1 0

NOTIFICATION: myASn backend problems
by Matthew Williams 14 Aug '03

14 Aug '03

Dear All, The myASn prototype's backend is experiencing some problems with scanning the RIS raw data files. We are currently working on a fix and should have it ready by tomorrow afternoon. Best regards, The RIS Team Ps. The project name is changing from "myAS" to "myASn", hence the mailing list's new epithet: "myasntesting(a)ripe.net". - - --- > Matthew Williams-Bywater (MW243-RIPE) > Customer Liaison Engineer > RIPE NCC (http://www.ripe.net/np/)

1 0