<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /></head><body><div data-crea="font-wrapper" style="font-family: Tahoma; font-size: 16px; direction: ltr"><div style="font-family: Tahoma; font-size: 16px"></div><div>><span style="font-family: Helvetica, Tahoma, Arial, sans-serif; font-size: 14.6667px;">I'm absolutely agree with Jury, that RIPE should create special commission to prevent future blocking of huge part of the internet. They have blocked about 18 Millions of IPv4 for this day, I can't imagine, what will be after week or month, but it looks like Russians can lose an internet access and hurt global internet.</span><div style="font-family: Helvetica, Tahoma, Arial, sans-serif; font-size: 14.6667px;"><br><br></div><div style="font-family: Helvetica, Tahoma, Arial, sans-serif; font-size: 14.6667px;"></div><div></div><div>I'm sorry to break the news to you, but various RIPE region countries have higher level tech in place and go far beyond IP blacklisting to track users and do.. very bad... things - Notably Saudi-Arabia and the UAE.</div><div>And there are countries where services are far more crippled than in Russia now for years - notably Iran.</div><div><br></div><div>RIPE is no government body and has no power to enforce anything - it's in this regard a think tank that some might listen to, but nobody has to, and let me tell you: lobby work is <b>damn</b> expensive, especially in the EU.</div><div><br></div><div>Russia is a sovereign nation and if this censorship concerns Russians their system - in theory at least, unlike some other countries in our region - has ways to remove the law as either unconstitutional or by vote.</div><div><br></div><div>If this watchdogs and failsafe mechanisms do not work... well, we cannot really help you with that, revolutions are not (yet) within the RIPE scope of operations.</div><div><br></div><div>--</div><div>William Weber</div><div>Consulting, Security & Management - Tel-Aviv, Israel / Rijeka, Croatia</div><div><br></div><div>https://ip6.im - No RIPE LIR? Still read this email for some reason? Grab a /40 *free* IPv6 space for BGP usage. Or just get it anyway, can't hurt to have.</div><div><br></div><div data-anchor="reply-title">On Wed, Apr 18, 2018 at 17:20, Youssef BENGELLOUN - ZAHR <ybzahr@prodware.fr> wrote:</div><blockquote><div xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><div lang="FR" link="blue" vlink="purple"> <br><div> <span lang="EN-US" style="mso-fareast-language: EN-US">Hello Juri,</span><br><br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br><span lang="EN-US" style="mso-fareast-language: EN-US">Thank you for alerting the community about this.</span><br><br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br><span lang="EN-US" style="mso-fareast-language: EN-US">If you want more support from the community, may I suggest you translate your web page in English ? For the sake of clarity.</span><br><br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br><span lang="EN-US" style="mso-fareast-language: EN-US">Best regards.</span><br><br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br><span lang="EN-US" style="mso-fareast-language: EN-US"></span><br> <br><br></div> <br> <br><table border="0"><tbody><tr><td colspan="2"><b><span style="font-size: x-small">Youssef BENGELLOUN - ZAHR</span></b> - <span style="font-size: x-small">Consultant Expert</span><br><font size="2">Prodware France</font><br><font size="2">T : +33 979 999 000 - F : +33 988 814 001 - </font><span style="font-size: x-small"><span style="font-size: x-small"><a href="mailto:ybzahr@prodware.fr" title="Click to send email to Youssef BENGELLOUN - ZAHR" target="_blank" tabindex="-1" rel="external"><span style="font-size: x-small">ybzahr@prodware.fr</span></a></span></span><br><hr style="text-align: left" width="100%"></td> </tr><tr><td style="vertical-align: top" width="215" text-align="center"><img border="0" width="200" height="62" src="cid:image1e8147.PNG@0990df24.448c336a"></td> <td style="width: 365px;color: #3b4148"><font size="2">Web : </font><a href="http://www.prodware.fr" target="_blank" tabindex="-1" rel="external"><font size="2">prodware.fr</font></a> <br><a href="http://twitter.com/Prodware/" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:image220119.JPG@3dada54d.44983a5f"></a> <a href="http://www.facebook.com/Prodware/" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:imageab3c6d.JPG@63a47cad.4fad2958"></a> <a href="https://www.linkedin.com/company/prodwarefrance" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:image7c9897.JPG@7e504a20.4b9b39f1"></a> <a href="https://www.youtube.com/c/ProdwareFrance" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:imagefdae20.JPG@730e7f98.4a953683"></a> <a href="http://www.viadeo.com/fr/company/prodware" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:image7ef80f.JPG@ddfaf587.4da8b4b6"></a> <a href="http://www.prodware.fr/social-network/" target="_blank" tabindex="-1" rel="external"><img border="0" width="25" height="25" src="cid:image9a9ed9.JPG@e319a856.4eaec180"></a> <br></td> </tr></tbody></table> <br><br><div> <div style="border: none;border-top: solid #B5C4DF 1.0pt;padding: 3.0pt 0cm 0cm 0cm"> <b><span style="font-size: 12.0pt;color: black">De : </span></b><span style="font-size: 12.0pt;color: black">members-discuss <<a href="mailto:members-discuss-bounces@ripe.net" target="_blank" tabindex="-1" rel="external">members-discuss-bounces@ripe.net</a>> au nom de "<a href="mailto:contact@antiddos.solutions" target="_blank" tabindex="-1" rel="external">contact@antiddos.solutions</a>" <<a href="mailto:contact@antiddos.solutions" target="_blank" tabindex="-1" rel="external">contact@antiddos.solutions</a>><br><b>Date : </b>mercredi 18 avril 2018 à 11:01<br><b>À : </b>"<a href="mailto:hostmaster@ntx.ru" target="_blank" tabindex="-1" rel="external">hostmaster@ntx.ru</a>" <<a href="mailto:hostmaster@ntx.ru" target="_blank" tabindex="-1" rel="external">hostmaster@ntx.ru</a>>, "<a href="mailto:members-discuss@ripe.net" target="_blank" tabindex="-1" rel="external">members-discuss@ripe.net</a>" <<a href="mailto:members-discuss@ripe.net" target="_blank" tabindex="-1" rel="external">members-discuss@ripe.net</a>><br><b>Objet : </b>Re: [members-discuss] Russian government blocked 2mln IPs at 16/04/2018</span><br><br><br></div> <div> <br> <br><br></div> <div> <div> <a name="_MailOriginalBody" target="_blank" tabindex="-1">Dear colleagues,</a><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody"> </span><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody">I'm absolutely agree with Jury, that RIPE should create special commission to prevent future blocking of huge part of the internet. They have blocked about 18 Millions of IPv4 for this day, I can't imagine, what will be after week or month, but it looks like Russians can lose an internet access and hurt global internet.</span><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody"> </span><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody">With best regards, </span><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody"> </span><br><br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody">Nicolas</span><br><br><br></div> </div> <div> <span style="mso-bookmark: _MailOriginalBody"></span><br> <br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody"></span><br> <br><br></div> <div> <span style="mso-bookmark: _MailOriginalBody">17.04.2018, 19:14, "Juri" <<a href="mailto:hostmaster@ntx.ru" target="_blank" tabindex="-1" rel="external">hostmaster@ntx.ru</a>>:</span><br><br><br></div> <blockquote style="margin-top: 5.0pt;margin-bottom: 5.0pt"> <span style="mso-bookmark: _MailOriginalBody">Good day everybody!<br><br> Update, currently amount of IPv4 in blocklist is about 4.8 mln<br> You can see graphs and live update at </span><a href="https://2018.schors.spb.ru/" target="_blank" tabindex="-1" rel="external"><span style="mso-bookmark: _MailOriginalBody">https://2018.schors.spb.ru/</span><span style="mso-bookmark: _MailOriginalBody"></span></a><span style="mso-bookmark: _MailOriginalBody"><br><br> Telegram messenger keeps working. Telegram added new internal options to<br> avoid been blocked and today it works even without proxies.<br> Russian government adds more and more IPs to blocklist.<br> For example I can open Opera website. I can download Skype because<br> download cloud is blocked. A lot of Internet services affected.<br><br> I suggest that in RIPE region should be special commission and it should<br> be responsible for investigate of such cases and work on sanctions for<br> that. Or they can broke the internet at least.<br><br> p.s. As I mentioned already they wanted already to have ISPs have BGP<br> links with authority and accept announces of prefixes they don't like.<br> But that's the real attack for whole internet because that's just IP<br> hijacking.<br><br><br> Juri<br><br><br><br> On 17.04.2018 2:16, Juri wrote:</span><br><br><br><blockquote style="margin-top: 5.0pt;margin-bottom: 5.0pt"> <span style="mso-bookmark: _MailOriginalBody"> Good time of day!<br><br> I want to bring up discussion about situation in Internet inside Russian<br> Federation. I find current situation not good for Internet, not good for<br> RIPE community, for ISPs and for progress itself.<br><br> Short background.<br><br> Russian government asked Telegram messenger service (like Viber, Watsup,<br> etc, they can be the next) to give them keys of end-to-end encryption<br> between users. Telegram refused to give it because it stands for<br> freedom, constitution rights of people and telegram says it's not<br> possible to give that keys because they don't have it. At least at<br> Friday 13 of April 2018 they blocked websites of Telegram and at Monday<br> 16 they blocked all technical networks of Telegram inside Russian<br> Federation.<br><br> This Monday was really nice and fun day when users of the Telegram, the<br> most popular messenger application in Russia, started to add VPN/Socks<br> settings to unblock telegram. Telegram users are good in IT and a lot of<br> people keep telegram online and use it.<br><br> What did Russian government (who keeps using Telegram messenger as well)<br> started to do? Yes, They started to block VPN services that gives free<br> socks5 proxies and VPNs for telegram users. A lot of such services were<br> based on Amazon Cloud. So, at the evening RKN (aka Roskonadzor, advisory<br> of telecom) started to add IPv4 networks in Russian blocklist (= blackhole).<br><br> Example of networks that were added to Russian blocklist/blackhole<br><br> Amazone<br> <ipSubnet ts="2018-04-16T17:35:00+03:00">52.58.0.0/15</ipSubnet><br> <ipSubnet ts="2018-04-16T17:47:00+03:00">18.196.0.0/15</ipSubnet><br> <ipSubnet ts="2018-04-16T17:47:00+03:00">18.194.0.0/15</ipSubnet><br> <ipSubnet ts="2018-04-16T19:57:00+03:00">18.184.0.0/15</ipSubnet><br> <ipSubnet ts="2018-04-16T17:47:00+03:00">35.156.0.0/14</ipSubnet><br><br> GOOGLE CLOUD<br> <ipSubnet ts="2018-04-16T20:21:00+03:00">35.192.0.0/12</ipSubnet><br><br> A lot of businesses were affected even some bank companies, processing<br> and others who where using Amazon services. Amount of small companies<br> affected is very large. Big companies? Apple services were affected too<br> as I found. A lot of application use Amazon cloud.<br><br> Just for info. Some time ago Russian gov wanted to integrate blackhole<br> based on BGP (and that's bring up the question about whole internet<br> stability). Because they break local internet time to time.<br><br> You can track amount of IPs in blocklist monitoring at<br> </span><a href="https://2018.schors.spb.ru/" target="_blank" tabindex="-1" rel="external"><span style="mso-bookmark: _MailOriginalBody">https://2018.schors.spb.ru/</span><span style="mso-bookmark: _MailOriginalBody"></span></a><span style="mso-bookmark: _MailOriginalBody"><br> A lot of news web sites write about this situation.<br><br> Сonclusion.<br><br> I don't find this situation suitable for any country. I know and fully<br> understand that it's not easy to find consensus in discussions of such<br> things. But I wish and I want community think about such issues.<br> They should not happen in any country.<br><br> We are as RIPE community are responsible for Internet stability and<br> safety and making this Internet better.<br><br> I want RIPE community offer how we should protect normal internet users<br> of all countries from unintelligent, irrational and very bad behavior of<br> local authorities. I think it's not good idea to assign any IPs for such<br> authorities.<br><br> Consensus should be found.</span><br><br><br></blockquote> <span style="mso-bookmark: _MailOriginalBody"></span><br> <br><br><span style="mso-bookmark: _MailOriginalBody">-- <br> Juri<br> +7 (499) 346-76-29</span><br><br><br><span style="mso-bookmark: _MailOriginalBody"><br> _______________________________________________<br> members-discuss mailing list<br></span><a href="mailto:members-discuss@ripe.net" target="_blank" tabindex="-1" rel="external"><span style="mso-bookmark: _MailOriginalBody">members-discuss@ripe.net</span><span style="mso-bookmark: _MailOriginalBody"></span></a><span style="mso-bookmark: _MailOriginalBody"><br></span><a href="https://mailman.ripe.net/" target="_blank" tabindex="-1" rel="external"><span style="mso-bookmark: _MailOriginalBody">https://mailman.ripe.net/</span><span style="mso-bookmark: _MailOriginalBody"></span></a><span style="mso-bookmark: _MailOriginalBody"><br> Unsubscribe: </span><a href="https://lists.ripe.net/mailman/options/members-discuss/contact%40antiddos.solutions" target="_blank" tabindex="-1" rel="external"><span style="mso-bookmark: _MailOriginalBody">https://lists.ripe.net/mailman/options/members-discuss/contact%40antiddos.solutions</span><span style="mso-bookmark: _MailOriginalBody"></span></a><span style="mso-bookmark: _MailOriginalBody"></span><br><br><br></blockquote> </div> <br></div></div></blockquote></div></div></body></html>