From danijel.kovacic at carnet.hr Fri Aug 14 08:16:38 2009
From: danijel.kovacic at carnet.hr (Danijel Kovacic)
Date: Fri, 14 Aug 2009 08:16:38 +0200
Subject: [anti-abuse-wg] blacklisted IPs
Message-ID: <4A850146.8000907@carnet.hr>
Hi,
We have a problem with allocated address range to CARNet (Croatian
Academic and Research Network) which RIPE have assigned to us a few
months ago. The range is 82.132.0.0 /17.
Some of the world wide companies keep old records about IP addresses in
their databases so that makes problems to our users.
The problem is that our new IP range was in use in some company in
Teheran, Iran so many of the companies have that range on their "black
lists". For example, our users who have address 82.132.x.x are not
allowed to use Pay Pal or download Google Earth ("Google Pack is not
available in your county".)
Please, can anyone advice us what we can do concerning this problem.
x-ncc-regid:
Regards,
Danijel Kovacic
CARNet, Croatia
From thor at anta.net Fri Aug 14 12:14:43 2009
From: thor at anta.net (Thor Kottelin)
Date: Fri, 14 Aug 2009 13:14:43 +0300
Subject: [anti-abuse-wg] blacklisted IPs
In-Reply-To: <20090814100004.10787.47774.Mailman@postboy.ripe.net>
References: <20090814100004.10787.47774.Mailman@postboy.ripe.net>
Message-ID:
> Date: Fri, 14 Aug 2009 08:16:38 +0200
> From: Danijel Kovacic
> To: anti-abuse-wg at ripe.net
> CC: "ripe at carnet.hr"
> Some of the world wide companies keep old records about IP
> addresses in
> their databases so that makes problems to our users.
>
> The problem is that our new IP range was in use in some company in
> Teheran, Iran so many of the companies have that range on their
> "black
> lists". For example, our users who have address 82.132.x.x are not
> allowed to use Pay Pal or download Google Earth ("Google Pack is
> not
> available in your county".)
Various services exist that attempt to map IP addresses to countries. Your problem is a good example of why that is not as good an idea as it may seem at first glance.
Perhaps you could find out which services are causing the most trouble and have them update your information so that you will not need to contact each of their users separately.
--
Thor Kottelin
http://www.anta.net/
From brian.nisbet at heanet.ie Fri Aug 14 13:28:43 2009
From: brian.nisbet at heanet.ie (Brian Nisbet)
Date: Fri, 14 Aug 2009 12:28:43 +0100
Subject: [anti-abuse-wg] blacklisted IPs
In-Reply-To: <4A850146.8000907@carnet.hr>
References: <4A850146.8000907@carnet.hr>
Message-ID: <4A854A6B.9090408@heanet.ie>
Danijel,
> We have a problem with allocated address range to CARNet (Croatian
> Academic and Research Network) which RIPE have assigned to us a few
> months ago. The range is 82.132.0.0 /17.
>
> Some of the world wide companies keep old records about IP addresses in
> their databases so that makes problems to our users.
Sadly there is little or nothing this group can do for you. We would
strongly advise networks to be very careful when maintaining their own
blacklists or with which services they use as stale information can lead
to incidents such as you are expeiencing. And this is likely to happen
more and more as exhaustion approaches as more and more space is used.
> Please, can anyone advice us what we can do concerning this problem.
The best advice I can give is to contact the relevant large companies
and inform them that the space has now been allocated to CARNet (with
approriate Whois links etc) and ask them to remove their blocks. As
with all such things, their networks, their rules, but hopefully the
knowleged that they are losing out on quite a few potential customers
will encourage them to quickly update their rulesets. If the companies
use services
As Thor mentioned, you may also be able to find out which geolocation
services are being used and go to the source of the problem, but these
may vary on a company by company basis.
Regards,
Brian.
From danijel.kovacic at carnet.hr Mon Aug 17 08:51:55 2009
From: danijel.kovacic at carnet.hr (Danijel Kovacic)
Date: Mon, 17 Aug 2009 08:51:55 +0200
Subject: [anti-abuse-wg] blacklisted IPs
In-Reply-To: <4A854A6B.9090408@heanet.ie>
References: <4A850146.8000907@carnet.hr> <4A854A6B.9090408@heanet.ie>
Message-ID: <4A88FE0B.9060101@carnet.hr>
Dear Brian,
Thank you very much for your answer.
We will try to contact companies which are blacklisted our range.
Regards,
Danijel Kovacic
CARNet, Croatia
Brian Nisbet wrote:
> Danijel,
>
>> We have a problem with allocated address range to CARNet (Croatian
>> Academic and Research Network) which RIPE have assigned to us a few
>> months ago. The range is 82.132.0.0 /17.
>>
>> Some of the world wide companies keep old records about IP addresses in
>> their databases so that makes problems to our users.
>
> Sadly there is little or nothing this group can do for you. We would
> strongly advise networks to be very careful when maintaining their own
> blacklists or with which services they use as stale information can lead
> to incidents such as you are expeiencing. And this is likely to happen
> more and more as exhaustion approaches as more and more space is used.
>
>> Please, can anyone advice us what we can do concerning this problem.
>
> The best advice I can give is to contact the relevant large companies
> and inform them that the space has now been allocated to CARNet (with
> approriate Whois links etc) and ask them to remove their blocks. As
> with all such things, their networks, their rules, but hopefully the
> knowleged that they are losing out on quite a few potential customers
> will encourage them to quickly update their rulesets. If the companies
> use services
>
> As Thor mentioned, you may also be able to find out which geolocation
> services are being used and go to the source of the problem, but these
> may vary on a company by company basis.
>
> Regards,
>
> Brian.
--
Danijel Kovacic
Mrezni operater
Odjel mrezne infrastrukture
Hrvatska akademska i istrazivacka mreza - CARNet
Josipa Marohnica 5, 10000 Zagreb, Croatia
tel: +385 1 666 1 788, fax: +385 1 666 1 615
gsm: +385 91 1450 211
http://www.carnet.hr
From brian.nisbet at heanet.ie Wed Aug 19 16:23:36 2009
From: brian.nisbet at heanet.ie (Brian Nisbet)
Date: Wed, 19 Aug 2009 15:23:36 +0100
Subject: [anti-abuse-wg] RIPE 59: Call for Agenda Items
Message-ID: <4A8C0AE8.6050909@heanet.ie>
Afternoon,
As you will have seen, the meeting plan for RIPE 59 in Lisbon has been
published here:
http://www.ripe.net/ripe/meetings/ripe-59/meeting-plan.html
The Anti-Abuse WG meeting will be taking place on Thursday at 16:00.
If you have any think you think would be of benefit to the WG to
discuss, any policy proposals you would like to air (although, of
course, any such things will need to go through the PDP) or anything of
the like, please let Richard or I know.
Thanks,
Brian.