On Mon, Oct 10, 2005 at 04:57:46PM +0200, Gert Doering wrote:
On Mon, Oct 10, 2005 at 06:53:07PM +0400, Max Tulyev wrote:
RIPE DB is just database, and if some records is changed - it doesn't help spammers. The aim is to take actions to networks giving them connectivity and announces that networks to the world.
If you go to an upstream ISP, and can display a RIPE network entry that claims "I own 195.30.0.0/16 and AS5539", chances are good that this ISP will then provide routing for you...
It's usually enough to just announce it right away, or fill some crappy web form with the prefix information. Unfortunately.
So indeed, getting the database entry is an important step toward tricking ISPs to route you.
Only for evildoers being customers of large ISPs who do stricly filter against IRR data. And then only RIPE IRR data can be used for authorization, as the only thing you need to create false IRR data in RADB is that you need to pay for a maintainer object. This is why I say that we need ONE constistent hierarchy of IRR auth data from IANA down. The safety net has larger holes than you seem to think, I'm afraid. :-Z Best regards, Daniel -- CLUE-RIPE -- Jabber: dr@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0