Re: fair warning: less than 1000 days left toIPv4 exhaustion

1 msg	BGP issues qwest in Burbank, CA
1 msg	Looking for Yahoo-SOC contact
1 msg	Cachefly Contact
2 msg	auth*.ns.uu.net
1 msg	auth00/auth100.ns.uu.net down ?
3 msg	PCH BGP Archive down?
1 msg	Looking for Flickr contacts
2 msg	Charter - Southern Oregon routing issues
1 msg	Google Contact
1 msg	Bob Crooks/SaskTel/CA is out of the office.
51 msg	Microsoft.com PMTUD black hole?
4 msg	Strange network behaviour
1 msg	Was Burma off the air due to the Cyclone ?
17 msg	OSPF minutia, and, technote publication venues
2 msg	Deadline Extension UBICOMM 2008, September 29 -...
1 msg	[Fwd: Re: outages]
2 msg	outages
21 msg	Did Youtube not pay their domain bill?
9 msg	Introducing latency for testing?

fair warning: less than 1000 days left to IPv4 ...
\ Mike Leber (2 May 2008)
. \ jamie (2 May 2008)
. . \ Patrick W. Gilmore (2 May 2008)
. . \ Sean Figgins (2 May 2008)
. . . \ David Conrad (2 May 2008)
. . . \ Joel Jaeggli (2 May 2008)
. . \ Chris McDonald (2 May 2008)
. . \ Marc Manthey (2 May 2008)
. . . \ Patrick W. Gilmore (3 May 2008)
. . . . \ Tim Yocum (3 May 2008)
. . . . . \ JC Dill (13 May 2008)
. . . . . . \ Patrick W. Gilmore (13 May 2008)
. \ Deepak Jain (2 May 2008)
. . \ James R. Cutler (2 May 2008)
. . . \ Randy Bush (2 May 2008)
. . . . \ Mikael Abrahamsson (3 May 2008)
. . . . . \ Joel Jaeggli (3 May 2008)
. . . . \ Robert E. Seastrom (8 May 2008)
. \ Geoff Huston (4 May 2008)
. . \ William Warren (4 May 2008)
. . . \ Nathan Ward (4 May 2008)
. . . . \ Paul Vixie (4 May 2008)
. . . . . \ Tomas L. Byrnes (4 May 2008)
. . . . . . \ Joel Jaeggli (4 May 2008)
. . . . . . \ David Conrad (5 May 2008)
. . . . . \ Randy Bush (5 May 2008)
. . . . \ Paul Vixie (4 May 2008)
. . . \ Joel Jaeggli (4 May 2008)
. . . . \ Suresh Ramasubramanian (4 May 2008)
. . . . . \ Justin Shore (9 May 2008)
. . . . \ David Conrad (5 May 2008)
. . . . . \ Patrick W. Gilmore (5 May 2008)
. \ Iljitsch van Beijnum (5 May 2008)

Subject:	Re: fair warning: less than 1000 days left toIPv4 exhaustion
Group:	Nanog
From:	Justin Shore
Date:	9 May 2008

Suresh Ramasubramanian wrote:
> Let's think smaller. /16 shall we say?
>
> Like the /16 here. Originally the SRI / ARPANET SF Bay Packet Radio
> network that started back in 1977. Now controlled by a shell company
> belonging to a shell company belonging to a "high volume email
> deployer" :)
>
> http://blog.washingtonpost.com/securityfix/2008/04/a_case_of_network_identity_th e_1.html

Which leads me to ask an OT but slightly related question. How do other
SPs handle the blacklisting of ASNs (not prefixes but entire ASNs). The
/16 that Suresh mentioned here is being originated by a well-known spam
factory. All prefixes originating from that AS could safely be assumed
to be undesirable IMHO and can be dropped. A little Googling for that
/16 brings up a lot of good info including:

http://groups.google.com/group/news.admin.net-abuse.email/msg/5d3e3f89bb148a4c

Does anyone have any good tricks for filtering on AS path that they'd
like to share? I already have my RTBH set up so setting the next-hop
for all routes originating from a given ASN to one of my blackhole
routes (to null0, a sinkhole or srubber) would be ideal. Not accepting
the route period and letting uRPF drop traffic would be ok too.

Justin

_______________________________________________
NANOG mailing list
NANOG
http://mailman.nanog.org/mailman/listinfo/nanog