From info at arin.net Thu Mar 27 08:05:19 2008 From: info at arin.net (Member Services) Date: Thu, 27 Mar 2008 08:05:19 -0400 Subject: [consult] Community Consultation - Daily Publication of IP Addresses Issued and Returned Message-ID: <47EB8D7F.5010903@arin.net> ARIN would like to consult the community on the merits of the second part of Suggestion 2008-2 [excerpt below, full suggestion at bottom]: "In addition, ARIN should publish a report of addresses returned, and addresses issued, in the form of a mailing list (with daily email) and an RSS feed. This will only contain allocations/assignments made directly by ARIN or address blocks returned to ARIN's free pool. The intent is that RBL operators can subscribe to such a feed and keep their own lists clean." Although there is some merit in allowing the community prompt visibility to both the IP blocks being returned to ARIN's available pool of addresses and the IP blocks being issued by ARIN to the community, we also see this as a potential target for abuse. Specifically, certain parties may take the opportunity to use and announce IP addresses from these ranges without having the administrative authority to do so. To that end, there are two questions we like to ask the community: 1) Does the community think that the merits of this proposal outweigh the potential for abuse? 2) If the merits do outweigh the abuse, what sorts of suggestions do you have to mitigate potential for abuse? Discussion on this list will close at 5:00 PM EDT 10 April. Depending upon the discussion, ARIN may decide to conduct a poll on the topic during the following week. Only subscribers on the consult at arin.net list when the poll opens will be eligible to participate. The ARIN Consultation and Suggestion Process documentation is available at: http://www.arin.net/about_us/corp_docs/acsp.html. We welcome community-wide participation. Please address any process questions to info at arin.net. Regards, Member Services American Registry for Internet Numbers (ARIN) *********************************************************************** 2008.2 Submitted 01-17-2008 05:39:14 ARIN should track all RBLs, DUNS and similar IP address blacklists. Then, when an address block is re-issued to another organization or returned from an organization, ARIN should check these lists. If addresses from the re-issued block are found on one of the lists, then ARIN should attempt to inform the list maintainer. In addition, ARIN should publish a report of addresses returned, and addresses issued, in the form of a mailing list (with daily email) and an RSS feed. This will only contain allocations/assignments made directly by ARIN or address blocks returned to ARIN's free pool. The intent is that RBL operators can subscribe to such a feed and keep their own lists clean. From michael.dillon at bt.com Thu Mar 27 08:24:43 2008 From: michael.dillon at bt.com (michael.dillon at bt.com) Date: Thu, 27 Mar 2008 12:24:43 -0000 Subject: [consult] Community Consultation - Daily Publication of IP Addresses Issued and Returned In-Reply-To: <47EB8D7F.5010903@arin.net> References: <47EB8D7F.5010903@arin.net> Message-ID: > Specifically, certain parties may take the > opportunity to use and announce IP addresses from these > ranges without having the administrative authority to do so. The nice thing about having an open feed like this is that ISPs can automatically add the returned address blocks to BGP filter lists. In fact, cymru.com, who offer a variety of BGP filter lists in a variety of formats, could easily convert ARIN's feed into other formats that many ISPs are already subscribed to. I think the risk for abuse here is minimal. > 1) Does the community think that the merits of this proposal > outweigh the potential for abuse? Yes. > 2) If the merits do outweigh the abuse, what sorts of > suggestions do you have to mitigate potential for abuse? Contact Team Cymru and arrange for them to add your feed to their BGP filter feeds at the same time you open the feed for public consumption. Also, offer Team Cymru access to other ARIN data that they might be able to leverage to further improve their services which attach various attributes to different address ranges. Perhaps an ARIN-reserved attribute would be useful or an ARIN-unallocated or even an ARIN-reallocated attribute. If anyone has not been to the Team Cymru website recently, have a look at and particularly, their Services page. --Michael Dillon From cliffb at cjbsys.bdb.com Thu Mar 27 08:47:28 2008 From: cliffb at cjbsys.bdb.com (Cliff Bedore) Date: Thu, 27 Mar 2008 08:47:28 -0400 Subject: [consult] re Community Consultation - Daily Publication of IP Message-ID: <47EB9760.5090706@cjbsys.bdb.com> I'm not an ISP or any such but I would think that having the info published would outweigh not publishing. If in fact, people start advertising available addresses that they don't have permission to use, at least they won't have messed up an existing address block by "stealing" it. ISPs should be able to look at the list and see if spammers/??? have stolen an address block. (I guess you can do this within the current ARIN lookup also.) I don't know enough about routing/routing tables to know if this info could be used to filter "bad" addresses but that might be useful. If 2008-2 passes, this list would be valuable to those seeking address space. They could look and immediately tell if they can go to ARIN or will need to go to the "market" I guess in general I think openness is good. Cliff From info at arin.net Thu Mar 27 10:31:20 2008 From: info at arin.net (Member Services) Date: Thu, 27 Mar 2008 10:31:20 -0400 Subject: [consult] New ARIN Mailing List Acceptable Use Policy Message-ID: <47EBAFB8.6040706@arin.net> This message is being sent to all ARIN mailing lists. If you are subscribed to more than one ARIN managed mailing list, you will receive multiple copies of this announcement. At its 10 March meeting, the ARIN Board of Trustees adopted a new Mailing List Acceptable Use Policy (AUP) for all ARIN public mailing lists. The AUP sets forth general guidelines of acceptable list conduct and calls out a number of specifically prohibited activities. A section on reporting violations and enforcement is included, along with procedures on how both are to be accomplished. The full text is available on the ARIN website as a link off the main mailing list page at: http://www.arin.net/mailing_lists/aup.html Regards, Member Services American Registry for Internet Numbers (ARIN) From andrew.dul at quark.net Sun Mar 30 19:22:40 2008 From: andrew.dul at quark.net (Andrew Dul) Date: Sun, 30 Mar 2008 16:22:40 -0700 Subject: [consult] Community Consultation - Daily Publication of IP Addresses Issued and Returned In-Reply-To: <47EB8D7F.5010903@arin.net> References: <47EB8D7F.5010903@arin.net> Message-ID: <47F020C0.705@quark.net> Hello, This consultation reminds me of some work I did with while on the AC some other members a couple of years back. At the time the idea was to figure out if there was a benefit to the operational community to publishing the whole ARIN database in some form or another to allow people to filter, etc... http://nanog.org/mtg-0405/bicknell.html If I recall correctly there were quite a few folks who I spoke with who would support ARIN publishing all the allocated net-blocks. RIPE & APNIC publish their entire database (ftp://ftp.ripe.net/ripe/dbase/ & ftp://ftp.apnic.net/pub/whois-data/). It seemed like the preferred method would be RPSL, which would allow people to take advantage of exiting tools, plus also could allow new tools to be created that would use a common database format as a source. I personally think it would make more sense for ARIN to publish a public version of the entire database rather then specific daily changes. The public version need not contain any "contact" information, since if specific contact information was needed for a particular record it could be obtained via WHOIS. Andrew Member Services wrote: > ARIN would like to consult the community on the merits of the second > part of Suggestion 2008-2 [excerpt below, full suggestion at bottom]: > > "In addition, ARIN should publish a report of addresses returned, and > addresses issued, in the form of a mailing list (with daily email) and > an RSS feed. This will only contain allocations/assignments made > directly by ARIN or address blocks returned to ARIN's free pool. The > intent is that RBL operators can subscribe to such a feed and keep their > own lists clean." > > Although there is some merit in allowing the community prompt visibility > to both the IP blocks being returned to ARIN's available pool of > addresses and the IP blocks being issued by ARIN to the community, we > also see this as a potential target for abuse. Specifically, certain > parties may take the opportunity to use and announce IP addresses from > these ranges without having the administrative authority to do so. To > that end, there are two questions we like to ask the community: > > 1) Does the community think that the merits of this proposal outweigh > the potential for abuse? > > 2) If the merits do outweigh the abuse, what sorts of suggestions do you > have to mitigate potential for abuse? > > > Discussion on this list will close at 5:00 PM EDT 10 April. Depending > upon the discussion, ARIN may decide to conduct a poll on the topic > during the following week. Only subscribers on the consult at arin.net list > when the poll opens will be eligible to participate. > > The ARIN Consultation and Suggestion Process documentation is available at: > http://www.arin.net/about_us/corp_docs/acsp.html. > > We welcome community-wide participation. Please address any process > questions to info at arin.net. > > Regards, > > Member Services > American Registry for Internet Numbers (ARIN) > > *********************************************************************** > > 2008.2 > Submitted 01-17-2008 05:39:14 > ARIN should track all RBLs, DUNS and similar IP address blacklists. > Then, when an address block is re-issued to another organization or > returned from an organization, ARIN should check these lists. If > addresses from the re-issued block are found on one of the lists, then > ARIN should attempt to inform the list maintainer. > > In addition, ARIN should publish a report of addresses returned, and > addresses issued, in the form of a mailing list (with daily email) and > an RSS feed. This will only contain allocations/assignments made > directly by ARIN or address blocks returned to ARIN's free pool. The > intent is that RBL operators can subscribe to such a feed and keep their > own lists clean. > > > _______________________________________________ > ARIN-Consult > You are receiving this message because you are subscribed to the ARIN Consult Mailing > List (consult at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/consult Please contact the ARIN Member Services > Help Desk at info at arin.net if you experience any issues. > > >