From danijel.kovacic at carnet.hr Fri Aug 14 08:16:38 2009 From: danijel.kovacic at carnet.hr (Danijel Kovacic) Date: Fri, 14 Aug 2009 08:16:38 +0200 Subject: [anti-abuse-wg] blacklisted IPs Message-ID: <4A850146.8000907@carnet.hr> Hi, We have a problem with allocated address range to CARNet (Croatian Academic and Research Network) which RIPE have assigned to us a few months ago. The range is 82.132.0.0 /17. Some of the world wide companies keep old records about IP addresses in their databases so that makes problems to our users. The problem is that our new IP range was in use in some company in Teheran, Iran so many of the companies have that range on their "black lists". For example, our users who have address 82.132.x.x are not allowed to use Pay Pal or download Google Earth ("Google Pack is not available in your county".) Please, can anyone advice us what we can do concerning this problem. x-ncc-regid: Regards, Danijel Kovacic CARNet, Croatia From thor at anta.net Fri Aug 14 12:14:43 2009 From: thor at anta.net (Thor Kottelin) Date: Fri, 14 Aug 2009 13:14:43 +0300 Subject: [anti-abuse-wg] blacklisted IPs In-Reply-To: <20090814100004.10787.47774.Mailman@postboy.ripe.net> References: <20090814100004.10787.47774.Mailman@postboy.ripe.net> Message-ID: > Date: Fri, 14 Aug 2009 08:16:38 +0200 > From: Danijel Kovacic > To: anti-abuse-wg at ripe.net > CC: "ripe at carnet.hr" > Some of the world wide companies keep old records about IP > addresses in > their databases so that makes problems to our users. > > The problem is that our new IP range was in use in some company in > Teheran, Iran so many of the companies have that range on their > "black > lists". For example, our users who have address 82.132.x.x are not > allowed to use Pay Pal or download Google Earth ("Google Pack is > not > available in your county".) Various services exist that attempt to map IP addresses to countries. Your problem is a good example of why that is not as good an idea as it may seem at first glance. Perhaps you could find out which services are causing the most trouble and have them update your information so that you will not need to contact each of their users separately. -- Thor Kottelin http://www.anta.net/ From brian.nisbet at heanet.ie Fri Aug 14 13:28:43 2009 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Fri, 14 Aug 2009 12:28:43 +0100 Subject: [anti-abuse-wg] blacklisted IPs In-Reply-To: <4A850146.8000907@carnet.hr> References: <4A850146.8000907@carnet.hr> Message-ID: <4A854A6B.9090408@heanet.ie> Danijel, > We have a problem with allocated address range to CARNet (Croatian > Academic and Research Network) which RIPE have assigned to us a few > months ago. The range is 82.132.0.0 /17. > > Some of the world wide companies keep old records about IP addresses in > their databases so that makes problems to our users. Sadly there is little or nothing this group can do for you. We would strongly advise networks to be very careful when maintaining their own blacklists or with which services they use as stale information can lead to incidents such as you are expeiencing. And this is likely to happen more and more as exhaustion approaches as more and more space is used. > Please, can anyone advice us what we can do concerning this problem. The best advice I can give is to contact the relevant large companies and inform them that the space has now been allocated to CARNet (with approriate Whois links etc) and ask them to remove their blocks. As with all such things, their networks, their rules, but hopefully the knowleged that they are losing out on quite a few potential customers will encourage them to quickly update their rulesets. If the companies use services As Thor mentioned, you may also be able to find out which geolocation services are being used and go to the source of the problem, but these may vary on a company by company basis. Regards, Brian. From danijel.kovacic at carnet.hr Mon Aug 17 08:51:55 2009 From: danijel.kovacic at carnet.hr (Danijel Kovacic) Date: Mon, 17 Aug 2009 08:51:55 +0200 Subject: [anti-abuse-wg] blacklisted IPs In-Reply-To: <4A854A6B.9090408@heanet.ie> References: <4A850146.8000907@carnet.hr> <4A854A6B.9090408@heanet.ie> Message-ID: <4A88FE0B.9060101@carnet.hr> Dear Brian, Thank you very much for your answer. We will try to contact companies which are blacklisted our range. Regards, Danijel Kovacic CARNet, Croatia Brian Nisbet wrote: > Danijel, > >> We have a problem with allocated address range to CARNet (Croatian >> Academic and Research Network) which RIPE have assigned to us a few >> months ago. The range is 82.132.0.0 /17. >> >> Some of the world wide companies keep old records about IP addresses in >> their databases so that makes problems to our users. > > Sadly there is little or nothing this group can do for you. We would > strongly advise networks to be very careful when maintaining their own > blacklists or with which services they use as stale information can lead > to incidents such as you are expeiencing. And this is likely to happen > more and more as exhaustion approaches as more and more space is used. > >> Please, can anyone advice us what we can do concerning this problem. > > The best advice I can give is to contact the relevant large companies > and inform them that the space has now been allocated to CARNet (with > approriate Whois links etc) and ask them to remove their blocks. As > with all such things, their networks, their rules, but hopefully the > knowleged that they are losing out on quite a few potential customers > will encourage them to quickly update their rulesets. If the companies > use services > > As Thor mentioned, you may also be able to find out which geolocation > services are being used and go to the source of the problem, but these > may vary on a company by company basis. > > Regards, > > Brian. -- Danijel Kovacic Mrezni operater Odjel mrezne infrastrukture Hrvatska akademska i istrazivacka mreza - CARNet Josipa Marohnica 5, 10000 Zagreb, Croatia tel: +385 1 666 1 788, fax: +385 1 666 1 615 gsm: +385 91 1450 211 http://www.carnet.hr From brian.nisbet at heanet.ie Wed Aug 19 16:23:36 2009 From: brian.nisbet at heanet.ie (Brian Nisbet) Date: Wed, 19 Aug 2009 15:23:36 +0100 Subject: [anti-abuse-wg] RIPE 59: Call for Agenda Items Message-ID: <4A8C0AE8.6050909@heanet.ie> Afternoon, As you will have seen, the meeting plan for RIPE 59 in Lisbon has been published here: http://www.ripe.net/ripe/meetings/ripe-59/meeting-plan.html The Anti-Abuse WG meeting will be taking place on Thursday at 16:00. If you have any think you think would be of benefit to the WG to discuss, any policy proposals you would like to air (although, of course, any such things will need to go through the PDP) or anything of the like, please let Richard or I know. Thanks, Brian.