<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
This is why it is included in the Spamhaus Bad Reputation RPZ blocklist</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<a href="https://check.spamhaus.org/listed/?searchterm=mnihyc.com" id="LPlnk999268">https://check.spamhaus.org/listed/?searchterm=mnihyc.com</a><br>
</div>
<div class="elementToProof">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"><b style="color:rgb(34,34,34); font-family:arial,sans-serif; font-size:12.8px"><span id="ms-rterangepaste-start"></span></b></p>
<b style="color:rgb(34,34,34); font-family:arial,sans-serif; font-size:12.8px">
<div><br>
</div>
<div><b style="color:rgb(34,34,34); font-family:arial,sans-serif; font-size:12.8px">Rick Wanner MSISE</b>
<div style="color:rgb(34,34,34); font-family:arial,sans-serif; font-size:12.8px">
<br>
</div>
<div style="color:rgb(34,34,34); font-family:arial,sans-serif; font-size:12.8px">
<div><b style="color:rgb(98,96,161); font-family:tahoma,sans-serif">Enterprise CyberSecurity</b><br>
</div>
<div>
<div><font color="#6260a1" size="1" face="tahoma, sans-serif"><b>2121 Saskatchewan Drive</b></font></div>
<div><font color="#6260a1" size="1" face="tahoma, sans-serif"><b>Regina, SK S4P 3Y2</b></font></div>
<div><font color="#6260a1" size="1" face="tahoma, sans-serif"><b>c: 306.533.1812</b></font></div>
<div><font color="#6260a1" face="tahoma, sans-serif"><b><font size="1">e: <a href="mailto:rick.wanner@sasktel.com" target="_blank" style="color:rgb(17,85,204)">rick.wanner@sasktel.com</a></font><br>
</b></font>
<div><b style="color:rgb(98,96,161); font-size:large"><font face="tahoma, sans-serif">SecURITy - Security You Are It!</font></b></div>
</div>
</div>
</div>
</div>
</b><a href="https://www.twitter.com/namedeplume/" target="_blank" style="font-family:arial,sans-serif; font-size:12.8px"><span id="ms-rterangepaste-end"></span></a><br>
<p style="margin-top:0px; margin-bottom:0px"></p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Slav Messetchkov <slav.messetchkov@sasktel.com><br>
<b>Sent:</b> November 28, 2022 5:58 PM<br>
<b>To:</b> rpki@lists.nlnetlabs.nl <rpki@lists.nlnetlabs.nl><br>
<b>Cc:</b> Takaya Ono <takaya.ono@sasktel.com>; Kim Huartson <kim.huartson@sasktel.com>; Rick Wanner <rick.wanner@sasktel.com><br>
<b>Subject:</b> Routinator repository blacklisted</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
span.x_EmailStyle17
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="x_WordSection1">
<p class="x_MsoNormal">Hello,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">We have been using Routinator as RPKI ROA proxy for several months now. Recently we noticed that the following sites, which are listed amongst Routinator’s repositories, have been blacklisted on Gremlins, and access to them is being blocked
by our Spamhaus RPZ:</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">rpki-rrdp.mnihyc.com</p>
<p class="x_MsoNormal">rpki-rsync.mnihyc.com</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">They are currently being blocked approximately 1000 times per day.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">List of Blacklists: </p>
<p class="x_MsoNormal">List: DRBL vote node gremlin.ru Host: vote.drbl.gremlin.ru Rating: 3</p>
<p class="x_MsoNormal">List: DRBL work node gremlin.ru Host: work.drbl.gremlin.ru Rating: 3</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Apparently this has been happening on and off for at least six months.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Has anyone else run into that? Are these sites trustworthy? And more broadly, how is the Repositories’ security posture validated? In our experience the Spamhaus feed has a very low false-positive count, so for now we’re treating this
as a threat and blocking it. If a site is compromised, is there a way to drop it from the list of Repositories, so that Routinator doesn’t send 1000s of unnecessary requests daily?</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks in advance for any advice on this matter!</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Slav Messetchkov</p>
<p class="x_MsoNormal">Sr. Engineer Core Network & Service Development</p>
<p class="x_MsoNormal">SaskTel, TSI/NSD</p>
</div>
</div>
NOTICE: This confidential e-mail message is only for the intended recipients. If you are not the intended recipient, be advised that disclosing, copying, distributing, or any other use of this message, is strictly prohibited. In such case, please destroy this
message and notify the sender.
</body>
</html>