[anti-abuse-wg] Re: Interaction between the RIPE and anti-abuse communities, was Draft Anti-Abuse WG Minutes ? RIPE 61

Gert Doering wrote:
> Hi,
> 
> On Wed, Feb 02, 2011 at 07:21:36AM +0530, Suresh Ramasubramanian wrote:
>> The RIPE community should, as a whole, be more operationally focused
>> on this loss of a scarce shared resource by allocating large parts of
>> it to entities that use these for a very short time before
> 
> Since IPv4 is going to run out anyway, what difference does "extend lots
> of effort to gain a few month" make here?
> 
> I can see and share the desire to stop criminals using network resources,
> but the argument about "the big problem is waste of scarce resources"
> just doesn't fly with me - as it will not make a big difference one
> way or the other.

IPv4 is to be used for quite some time. The miscreant community will turn
their focus to allocated but unused address space and AS resources. We just
handled an incident where an AS belonging to a finnish telco was advertised
via an AS in Russia. The /24 had a valid route object for this AS - this had
been left to the DB by accident.

We should look on more strict policies on appropriate registration of
address space delegations in use and deregistration when the resources are
taken out of service. Needless to say, the finnish provider in question
was slightly surprised to see a resource delegated to them appear behind a
RU provider. RIPE NCC could have a role in looking after disrepancies between
routing database and live global BGP routing table..

--Kauto

-- 
Kauto Huopio - kauto.huopio at ficora.fi
Senior information security adviser
Finnish Communications Regulatory Authority  / CERT-FI
tel. +358-9-6966772, fax +358-9-6966515, mobile +358-50-5826131
CERT-FI watch desk daytime: +358-9-6966510 / http://www.cert.fi