<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Randy,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Ah, I don't know how that happened, but Ronald X-posted to Routing and I managed not to. Don't worry, we're not trying to steal their family jewels.
<span id="🙂">🙂</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span><br>
</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Brian</span></div>
<div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px">Brian Nisbet (he/him)</p>
<p style="margin-top:0px; margin-bottom:0px">Service Operations Manager</p>
<p style="margin-top:0px; margin-bottom:0px">HEAnet CLG, Ireland's National Education and Research Network</p>
<p style="margin-top:0px; margin-bottom:0px">1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland</p>
<p style="margin-top:0px; margin-bottom:0px">+35316609040 brian.nisbet@heanet.ie www.heanet.ie</p>
<p style="margin-top:0px; margin-bottom:0px">Registered in Ireland, No. 275301. CRA No. 20036270 </p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Randy Bush <randy@psg.com><br>
<b>Sent:</b> Tuesday 27 April 2021 16:22<br>
<b>To:</b> Brian Nisbet <brian.nisbet@heanet.ie><br>
<b>Cc:</b> Anti Abuse WG <anti-abuse-wg@ripe.net><br>
<b>Subject:</b> Re: [anti-abuse-wg] AS8003 and U.S. Department of Defense routing</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">CAUTION[External]: This email originated from outside of the organisation. Do not click on links or open the attachments unless you recognise the sender and know the content is safe.<br>
<br>
<br>
interesting wg to do routing security analysis.<br>
<br>
as i do really not know the dod's or their proxy's motive(s), i can not<br>
say much about their tactics let alone strategy.<br>
<br>
i do know, and have actually seen and experienced, part of 11/8 being<br>
used as if it was 1918 space; ripe bologna was the first time. and the<br>
food in that town was fantastic!<br>
<br>
a /8 telescope would pick up leakage patterns as well as the current<br>
shotgun blast of announcements (i presume folk have looked at the actual<br>
announcements). i would naïvely think that the /8 might be slightly<br>
more easily analyzed than the pieces.<br>
<br>
maybe, as the telescope analysis shows focused leaks, they are trying to<br>
disrupt those focused uses with these focused announcements.<br>
<br>
but, if an op is using 11.12.666.0/23 internally, would they be careless<br>
enough to accept an exogenous announcement of that space? i guess i<br>
should not underestimate carelessness.<br>
<br>
is some random (small, i hope) isp using my address space internally as<br>
1918 equivalent abusive, beyond their customers maybe not be able to<br>
reach my network? if so, maybe the vigilantes are looking in the wrong<br>
direction.<br>
<br>
randy<br>
<br>
---<br>
randy@psg.com<br>
`gpg --locate-external-keys --auto-key-locate wkd randy@psg.com`<br>
signatures are back, thanks to dmarc header butchery<br>
</div>
</span></font></div>
</body>
</html>