<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><div><br></div></div><div dir="auto" style="color:rgb(0,0,0)">Hi Owen,</div><div dir="auto" style="color:rgb(0,0,0)">I won’t respond to your intimidation but focus on the real technical issues. See my response below inline</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le ven. 29 mai 2020 à 00:59, Owen DeLong <<a href="mailto:owen@delong.com">owen@delong.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space">Arnaud,<div><br></div><div>You are mistaken on a number of points.</div><div><br><div><br><blockquote type="cite"><div>On May 28, 2020, at 13:05 , Arnaud AMELINA <<a href="mailto:amelnaud@gmail.com" target="_blank">amelnaud@gmail.com</a>> wrote:</div><br><div><div dir="auto"><div dir="auto" style="font-family:sans-serif;font-size:12.8px">Hi, all communities </div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><div dir="auto">It was said that the hijacking of AS37353 was a configuration mistake, coupled with poor oversight in checking the right to use of the ASN by a certain IPDC customer. </div><div dir="auto"><br></div><div dir="auto">It was also said that this would have been facilitated by old and stalled IRR objects from MacroLAN before the service contract ended in December 2019. </div><div dir="auto"><br></div><div dir="auto">It was also stated that the BGP announcement was stopped and some actions taken to delete the stalled routing registry object from IRR. </div></div></div></div></blockquote><div><br></div>Yes… The registry objects created by MacroLAN have been deleted.</div><div><br></div><div><blockquote type="cite"><div><div dir="auto"><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><div dir="auto">Below are some data which gives some extra information and confirm previous claim that this incident was not accidental. </div></div></div></div></blockquote><div><br></div>Below is some very redacted data which gives virtually no information. </div><div><br></div><div><blockquote type="cite"><div><div dir="auto"><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><div dir="auto">NB: All data are collected from their source, Today, 28 May 2020, at 10:00 UTC. </div><div dir="auto"><br></div><div dir="auto">IRRs created in March 2020 with AS37353 as Origin for <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">156.241.3.0/24</a> by HGC </div><div dir="auto"><br></div><div dir="auto"> $ whois -h <a href="http://whois.radb.net/" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">whois.radb.net</a> '<a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">156.241.3.0/24</a>' </div><div dir="auto"><br></div><div dir="auto">route: <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">156.241.3.0/24</a> descr: Proxy-registered route object origin: AS37353 notify: <a href="mailto:matthew.chan@hgc.com.hk" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">matthew.chan@hgc.com.hk</a> mnt-by: MAINT-HGC-INTL changed: <a href="mailto:matthew.chan@hgc.com.hk" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">matthew.chan@hgc.com.hk</a> 20200304 source: RADB </div><div dir="auto"><br></div><div dir="auto">===== </div><div dir="auto">route: <a href="http://156.241.3.0/24" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">156.241.3.0/24</a> </div><div dir="auto">descr: Proxy-registered route object origin: AS37353 </div><div dir="auto">remarks: This is a HGC customer route-object </div><div dir="auto">remarks: which is being exported under this origin AS. </div><div dir="auto">remarks: </div><div dir="auto">remarks: This route object was created because no existing remarks: route object with the same origin was found. </div><div dir="auto">remarks: </div><div dir="auto">remarks: Please contact <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">radb@hutchcity.com</a> if you have any remarks: questions regarding this object. </div><div dir="auto">notify: <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">radb@hutchcity.com</a> </div><div dir="auto">mnt-by: MAINT-AS9304 </div><div dir="auto">changed: <a href="mailto:radb@hutchcity.com" style="text-decoration-line:none;color:rgb(66,133,244)" target="_blank">radb@hutchcity.com</a> 20200304 </div><div dir="auto">source: NTTCOM </div><div dir="auto">====</div></div></div></div></blockquote><div><br></div>We haven changed anything, but here’s the full text of that whois command:</div><div><div style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Monaco;color:rgb(1,232,0);background-color:rgba(0,1,3,0.980392)">...</div><div style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Monaco;color:rgb(1,232,0);background-color:rgba(0,1,3,0.980392)"><span style="font-variant-ligatures:no-common-ligatures">changed: <a href="mailto:admin@cloudix.online" target="_blank">admin@cloudix.online</a> 20200511 #03:10:36Z</span></div><div style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Monaco;color:rgb(1,232,0);background-color:rgba(0,1,3,0.980392)"><span style="font-variant-ligatures:no-common-ligatures">source: RADB</span></div><div style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Monaco;color:rgb(1,232,0);background-color:rgba(0,1,3,0.980392)"><span style="font-variant-ligatures:no-common-ligatures">0.000u 0.001s 0:00.19 0.0% 0+0k 0+0io 0pf+0w</span></div><div style="margin:0px;font-stretch:normal;font-size:16px;line-height:normal;font-family:Monaco;color:rgb(1,232,0);background-color:rgba(0,1,3,0.980392)"><span style="font-variant-ligatures:no-common-ligatures">owen (122) ~ % 2020/05/28 16:58:53</span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div>Looks like there’s additional cruft left in some routing registries that we still haven’t removed. I’ve asked people to get on that.</div><div><br></div></div></div></div></blockquote><div dir="auto" style="color:rgb(0,0,0)"><br></div><div dir="auto" style="color:rgb(0,0,0)">Good.. this is the reason for my mail.</div><div style="color:rgb(0,0,0)">Draw attention on these route objects which should have never existed on RADB and get them cleaned up by your customer who is the maintainer of the route object as per the records. </div><div style="color:rgb(0,0,0)"></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><div><div><div></div><div>However, just because it’s in RADB doesn’t mean it’s advertised. </div></div></div></div></blockquote><div><br></div><div><div dir="auto" style="color:rgb(0,0,0)">The routing visibility I referred to was not because route objects are in RADB or in NTT routing registries..</div><div dir="auto" style="color:rgb(0,0,0)"><br></div><div dir="auto" style="color:rgb(0,0,0)">Even though the prefix is no longer seen in global routing table, it is been seen by some route collectors.</div><div dir="auto" style="color:rgb(0,0,0)"><br></div><div dir="auto" style="color:rgb(0,0,0)">One route collector at RIPE Stat sees as shown in the picture as at now.</div><div dir="auto" style="color:rgb(0,0,0)"><br></div><div dir="auto" style="color:rgb(0,0,0)">[ picture]</div><div dir="auto" style="color:rgb(0,0,0)">And the ASPATH speaks for itself.</div></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><div><div><div>Nonetheless, we are actively working to get those errant entries cleaned up. Thank you for bringing them to our attention.</div><div><br></div></div></div></div></blockquote><div><div dir="auto" style="color:rgb(0,0,0)"><div dir="auto">Please let the community know when everything is cleaned.</div><div dir="auto">Thank you</div><div dir="auto"><br></div><div dir="auto">--</div><div>Arnaud</div><div><br></div><div>...</div></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><div><div><blockquote type="cite"><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
_______________________________________________<br>
Community-Discuss mailing list<br>
<a href="mailto:Community-Discuss@afrinic.net" rel="noreferrer" target="_blank">Community-Discuss@afrinic.net</a><br>
<a href="https://lists.afrinic.net/mailman/listinfo/community-discuss" rel="noreferrer noreferrer" target="_blank">https://lists.afrinic.net/mailman/listinfo/community-discuss</a><br>
</blockquote></div>
_______________________________________________<br>Community-Discuss mailing list<br><a href="mailto:Community-Discuss@afrinic.net" target="_blank">Community-Discuss@afrinic.net</a><br><a href="https://lists.afrinic.net/mailman/listinfo/community-discuss" target="_blank">https://lists.afrinic.net/mailman/listinfo/community-discuss</a><br></div></blockquote></div><br></div></div></blockquote></div></div></div></div></div></div></div></div>