[nsp-sec] RBN / Zlob / Security Focus brief #701

[Chris Morrow]

On Mon, 17 Mar 2008, John Fraizer wrote:

> ----------- nsp-security Confidential --------
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> I'm pretty sure that someone on the list has the finger on the pulse of 
> RBN.  I've been caught up in merging networks and have lost track.  Can 
> anyone provide me a list or prefixes that are known to be in use by RBN?
>

I think Gerard had a list like:

I had xlated that to:

# rbn:       40989
# intercage: 27595
# mccolo:    26780
# hostfresh: 23898
# cernel:    36445
# hopone:    14361
#
filter-primitive intercage-as
   type as
   permit 27595
   default deny

filter-primitive rbn-as
   type as
   permit 40989
   default deny

filter-primitive mccolo-as
   type as
   permit 26780
   default deny

filter-primitive hostfresh-as
   type as
   permit 23898
   default deny

filter-primitive cernel-as
   type as
   permit 36445
   default deny

filter-primitive hopone-as
   type as
   permit 14631
   default deny


I didn't (apparently) copy down the ip blocks :(