North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Bogon Filter - Please check for 77/8 78/8 79/8

  • From: Michael.Dillon
  • Date: Wed Dec 13 08:59:08 2006

> B) Threaten the bogon list operator with a lawsuit for falsely claiming 
your
> addresses are bogons and hope they take the simplest path and fix their
> list.
> 
> This is a pretty classic case of someone inducing other people to rely 
on
> the accuracy of their data and then offering incorrect data (not 
arguably
> incorrect, manifestly incorrect and most likely negligently so) which 
those
> other people then rely on.

It's not just incorrect data. The design of the
system used by completewhois is flawed at the core.
They only know that certain address ranges are
"bogons" at a certain point in time. If their system
only reported this fact along with the date for
which it is known to be valid, then they would
likely win any lawsuits for incorrect data.

The fact is, that you can only know that an address
range is a bogon at the point in time which you check
it and that it WAS a bogon for some past period. For
most bogons, it is not possible to predict the future
time period during which it will remain a bogon.

Any protocol which does not allow the address range
to be presented along with the LAST TIME IT WAS CHECKED
is simply not suitable for presenting a bogon list.
BGP simply is not suitable for this. HTTP/REST, XML-RPC
or LDAP could be used to make a suitable protocol.

But even better would be to not have any bogons at all.
If IANA and the RIRs would step up to the plate and 
provide an authoritative data source identifying which
address ranges have been issued for use on the Internet
then bogon lists would not be needed at all. And if people
plug their systems into the RIR data feed, then there would
be fewer issues when the RIRs start issuing addresses from
a new block. IANA would be the authoritative source for
stuff like RFC 1918 address ranges and other non-RIR ranges.

One wonders whether it might not be more effective in the
long run to sue ICANN/IANA rather than suing completewhois.com.

--Michael Dillon

P.S. As any lawyer will tell you, it is a good idea to make
some attempt at solving your issue outside of the courts. 
Anyone contemplating a lawsuit against ICANN should probably
try emailing them and writing a few letters first. Since they
are a somewhat democratic structure, it may be possible to
get this fixed without lawsuits.