[anti-abuse-wg] Clarification Regarding Needs Assessment and Audits

I have not had very much success following that process to report more than
one shady /15 in the past.

And as for india that is mostly botted IPs  rather than a cash and carry IP
address market. So far APNIC seems to have its act together rather better
on that front.

Again as for india there is active outreach going on, where quite a few
people are helping indian isps work on their security.

--srs (htc one x)
On 31-Aug-2013 7:20 PM, "Elvis Velea" <elvis at velea.eu> wrote:

> Hi,
>
> On 8/31/13 9:18 PM, Suresh Ramasubramanian wrote:
>
>> Nothing against all of romania
>>
>
> then maybe it would be a great idea to stop trowing rocks at it
>
>  but there appears to be more than one rogue operation there
>>
>
> Even better, use the RIPE NCC form and report the things you think are
> wrong with those /32s.. you probably know how to fill in a form, right?
>
>  [...] are now registering quite a lot of /32 v6 netblocks
>>
>
> you can only get one /32 per LIR, how many is quite a lot to you?
>
> I have the feeling you exaggerate 'quite a bit' as there are (as it
> appears in the members list) _in total_ 45 members from Romania, out of
> each at least 5-10% belong to governmental agencies. You surely do not want
> to blame the Government for all the spam you receive, right?
>
>
> So, I'd recommend you to stop blaming Romania for all the bad things
> happening in your life and look at the facts as well, Romanian LEADS the
> World IPv6 deployment and you are the only person in this community blaming
> everything you think is wrong unto Romania. Every country has it's own
> rogue companies, stop pointing fingers at only one.. you make everyone
> believe there is only one problem.
>
> I'd recommend looking at your friends' site [1] and see who you should
> point fingers at, or look at all the statistics showing that India is
> fighting with USA for #1 spam country in the world.
>
> I'd suggest that next time you want to say the words Romania and spam on a
> public mailing list to look first in your own garden.. it may be filled
> with rogue 'plants'
>
> cheers,
> Elvis
>
> [1] http://www.spamhaus.org/**statistics/countries/<http://www.spamhaus.org/statistics/countries/>
>
>
>> --srs (htc one x)
>>
>> On 31-Aug-2013 6:05 PM, "Elvis Velea" <elvis at velea.eu
>> <mailto:elvis at velea.eu>> wrote:
>>
>>     Hi Suresh,
>>
>>     Firstly, any member (LIR) can receive by default a /32 (up to a /29)
>>     ALLOCATION and NOT assignment. It's a /48 PI assignment that you can
>>     get if you are not an LIR.
>>
>>     Secondly, @Suresh - have a look at who is leading the world in IPv6
>>     deployment and then you may want to be careful with trowing stones
>>     at Romania.
>>     Romania IS and has been for at least one year the leader in IPv6
>>     deployment in the whole world, if you are badmouthing Romania for
>>     it's spam, try to praise it for it's IPv6 deployment, that would be
>>     fair.
>>
>>     My 2 cents,
>>     Elvis Daniel Velea (proud Romanian)
>>
>>
>>     On 8/31/13 7:11 AM, Suresh Ramasubramanian wrote:
>>
>>         I was starting to wonder whether anybody else with an operational
>>         antispam and security role for a large provider was around here.
>> :)
>>
>>         Thanks for chiming in, vijay. At a guess those v6 /32s are all
>>         registered in Romania?
>>
>>         --srs
>>
>>         On Saturday, August 31, 2013, Vijay Eranti (✌ విజయ్ ఈరంటి) wrote:
>>
>>              i agree with suresh's assessment.
>>
>>              Lately lot of spammers are getting /32 ipv6 assignments
>>         with their
>>              own ASNs and having a nice run.
>>              The ipv4 allotment is seriously broken in ripe - just having
>>              paperwork with valid forms filled is good enough to allot
>>         what ever
>>              range the spammers can ask.
>>
>>              regards
>>              vijay
>>
>>
>>              On Mon, Jul 8, 2013 at 12:04 AM, Suresh Ramasubramanian
>>              <ops.lists at gmail.com <mailto:ops.lists at gmail.com>
>>         <javascript:_e({}, 'cvml',
>>              'ops.lists at gmail.com <mailto:ops.lists at gmail.com>')**;>>
>> wrote:
>>
>>                  The lack of progress is simply because you have very
>>         few people
>>                  who are in a security rather than IP admin or network
>>         ops role.
>>                    Security as in for a seriously large provider.
>>
>>                  The other lack of progress - well, changing entrenched
>>         policies,
>>                  or enforcing them beyond a point where the enforcer is
>>         reluctant
>>                  to investigate (or is it "play police" according to the
>>         local
>>                  meme) is as tough as it sounds.
>>
>>
>>                  On Friday, July 5, 2013, Frank Gadegast wrote:
>>
>>                      Sascha Luck wrote:
>>
>>                          TTBOMK, as long as policy requirements are
>>         fulfilled
>>                          there is no mandate to revoke resources.
>>
>>
>>                      Any spammer on this list (think so, simply because
>>                      of the lack of progress) ?
>>
>>                      * Im starting now a second carrier in renting all
>>                      the IPv4 addresses left in our allocation exclusively
>>                      to abusers and make a lot of money with it.
>>                      Just make offers now. *
>>
>>                      Will surely put a working abuse contact email address
>>                      in RIPEs db, that gets directed to /dev/null
>>                      and have a correct postal address somewhere on
>>                      a funny island ...
>>
>>                      And it looks like if nobody could ever do anything
>>                      against it.
>>
>>                      The current regulations are simply slippery as
>>                      an eel (like we say in Germany), no way
>>                      to catch anybody responsible. Again, ridicolous ...
>>
>>
>>                      Kind regards, Frank
>>                      --
>>                      PHADE Software - PowerWeb http://www.powerweb.de
>>                      Inh. Dipl.-Inform. Frank Gadegast
>>                      mailto:frank at powerweb.de <mailto:frank at powerweb.de>
>>                      Schinkelstrasse 17
>>           fon: +49
>>                      33200 52920 <tel:%2B49%2033200%2052920>
>>                      14558 Nuthetal OT Rehbruecke, Germany
>>         fax: +49
>>                      33200 52921 <tel:%2B49%2033200%2052921>
>>
>>         ==============================**____==========================**
>> ==__==__==========
>>
>>
>>
>>                  --
>>                  --srs (iPad)
>>
>>
>>
>>
>>         --
>>         --srs (iPad)
>>
>>
>>     --
>>     Kind regards, Elvis Velea
>>
>>
> --
> Kind regards, Elvis Velea
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20130831/ac1606d9/attachment.html>