# AS201701 im Spoofer Report DENOG Juli 2018

**URL:** <https://forum.freifunk.net/t/as201701-im-spoofer-report-denog-juli-2018/19348>\
**Category:** FFRL Backbone\
**Created:** [9. August 2018 um 13:54 UTC](https://forum.freifunk.net/t/as201701-im-spoofer-report-denog-juli-2018/19348 "2018-08-09T13:54:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hexa](https://forum.freifunk.net/user_avatar/forum.freifunk.net/hexa/32/9296_2.png) [@hexa](https://forum.freifunk.net/u/hexa)\
**Post date:** [9. August 2018 um 13:54 UTC](https://forum.freifunk.net/t/as201701-im-spoofer-report-denog-juli-2018/19348/1 "2018-08-09T13:54:12Z")

</div>

Da seid ihr auf einer unrühmlichen Liste gelandet. Darf man fragen was da los war?

> In response to feedback from operational security communities,  
> CAIDA’s source address validation measurement project  
> ([https://spoofer.caida.org](https://spoofer.caida.org)) is automatically generating monthly  
> reports of ASes originating prefixes in BGP for systems from which  
> we received packets with a spoofed source address.  
> We are publishing these reports to network and security operations  
> lists in order to ensure this information reaches operational  
> contacts in these ASes.
> 
> This report summarises tests conducted within deu.
> 
> Inferred improvements during Jul 2018:  
> ASN Name Fixed-By  
> 16202 PRIMACOM 2018-07-17
> 
> Further information for the inferred remediation is available at:  
> [Evidence of Remediation](https://spoofer.caida.org/remedy.php)
> 
> Source Address Validation issues inferred during Jul 2018:  
> ASN Name First-Spoofed Last-Spoofed  
> 30823 COMBAHTON 2016-02-16 2018-07-11  
> 12222 AKAMAI 2018-02-14 2018-07-06  
> 29562 KabelBW-ASN 2018-06-12 2018-07-03  
> 61157 PLUSSERVER-ASN1 2018-06-14 2018-07-27  
> 6805 TDDE-ASN1 2018-07-10 2018-07-23  
> 201701 FFRL 2018-07-27 2018-07-27
> 
> Further information for these tests where we received spoofed  
> packets is available at:  
> [https://spoofer.caida.org/recent\_tests.php?country\_include=deu&no\_block=1](https://spoofer.caida.org/recent_tests.php?country_include=deu&no_block=1)

---

<div class="post-metadata">

**Author:** ![Lars](https://forum.freifunk.net/letter_avatar_proxy/v4/letter/l/74df32/32.png) [@Lars](https://forum.freifunk.net/u/Lars)\
**Post date:** [10. August 2018 um 15:47 UTC](https://forum.freifunk.net/t/as201701-im-spoofer-report-denog-juli-2018/19348/2 "2018-08-10T15:47:15Z")

</div>

Der Filter für ungültige Pakete von den Communities war an 2 Standorten nicht mehr aktiv.  
Wir haben ihn wieder aktiviert und verschwinden hoffentlich bald von der Liste.

---

<div class="post-metadata">

**Author:** ![pberndro](https://forum.freifunk.net/user_avatar/forum.freifunk.net/pberndro/32/8539_2.png) [@pberndro](https://forum.freifunk.net/u/pberndro)\
**Post date:** [9. Oktober 2018 um 07:09 UTC](https://forum.freifunk.net/t/as201701-im-spoofer-report-denog-juli-2018/19348/3 "2018-10-09T07:09:12Z")

</div>

Inferred improvements during Sep 2018:

ASN Name Fixed-By  
201701 FFRL 2018-09-08

Danke auch an @Lars für den fix 🙂