http://bgp.exa.org.uk, bgp.exa.org.uk/ 2010-09-05T07:22:39+01:00 http://bgp.exa.org.uk, bgp.exa.org.uk/ http://bgp.exa.org.uk, bgp.exa.org.uk/lib/images/favicon.ico text/html 2010-07-13T10:29:33+01:00 http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/start?rev=1279013373&do=diff What is ScavengerEXA ScavengerEXA is an open source application stack, designed to reduce SPAM on the internet. ScavengerEXA differentiates itself from other solutions by analysing the mail leaving an ISP's network and not entering a mail server. ScavengerEXA can be run without a mail server, making it useful to a wider audience in the Internet infrastructure community (Hosting providers and Cloud services as well as ISP's, for example). text/html 2010-07-06T15:45:37+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/start?rev=1278427537&do=diff ExaBGP - A BGP Route Injector WE MOVED TO GOOGLE CODE Please go to ExaBGP for up-to-date information. What is it ? A BGP speaker which can inject routes with arbitrary next-hops into your network to source some ipv4/ipv6 routes (using both IPv4 and IPv6 TCP connections) and/or mitigate DDOS using flowspec. text/html 2010-06-29T09:13:01+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/faq?rev=1277799181&do=diff Anticipated Users FAQ Q: Where do I report bugs - ask for help ?? A: <sigh> ... contact me: thomas . mangin AT exa - networks . co . uk Q: Where is the documentation ? A: Here and in the code .. really do you need more ?? Q: Is this code supported ? A: YES - Should you find any bug, please report it. text/html 2010-02-15T11:25:33+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/examples?rev=1266233133&do=diff IPv4 example neighbor 192.168.127.128 { description "a quagga test peer"; router-id 192.168.127.1; local-address 192.168.127.1; local-as 65000; peer-as 65000; graceful-restart; static { route 10.0.1.0/24 { next-hop 10.0.255.254; } route 10.0.2.0/24 { next-hop 10.0.255.254; community 30740:30740; } route 10.0.3.0/24 { next-hop 10.0.255.254; community [ 30740:30740 30740:0 ]; … text/html 2010-02-15T11:19:02+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/abnf?rev=1266232742&do=diff This is an attempt to describe the configuration file format using RFC 5234 From RFC 3986 IPv6address = 6( h16 ":" ) ls32 / "::" 5( h16 ":" ) ls32 / [ h16 ] "::" 4( h16 ":" ) ls32 / [ *1( h16 ":" ) h16 ] "::" 3( h16 ":" ) ls32 / [ *2( h16 ":" ) h16 ] "::" 2( h16 ":" ) ls32 / [ *3( h16 ":" ) h16 ] "::" h16 ":" ls32 / [ *4( h16 ":" ) h1… text/html 2010-02-14T18:57:54+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/flowspec?rev=1266173874&do=diff An example of FlowSpec setup neighbor 82.219.123.221 { [....] flow { route { match { source 10.0.0.1/32; destination 192.168.0.1/32; port =80; destination-port =3128 >8080&<8088; source-port >1024; protocol tcp; } then { discard; } } } } thomas@router> show configuration protocols bgp local-as 30740; group flow { type external; … text/html 2010-01-05T20:33:46+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/bgp/bitsonwire?rev=1262723626&do=diff Bits On Wire This is a copy from the google cache of <http://slidersv.startlogic.com/bitsonwire/?p=46> which content seems to have now vanished from the net (hopefully not for ever). Basic NLRI BGP Synopsis Main reason for the test is to see how exactly does BGP session establishment and update exchange look on the packet level. Debugs are included to complete the picture. text/html 2009-10-30T13:26:48+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/start?rev=1256909208&do=diff What are you looking for ? ScavengerEXA Networking Tools BGP Route injector text/html 2009-10-03T16:04:41+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/network/start?rev=1254582281&do=diff Network Tools What will I find here ? Some code which : * automate your aut-num RIPE updating process. * display visually inetnums ranges in html using svg or png In development: * send templated notification email to your peers when performing maintenance / having an outage text/html 2009-10-03T08:28:57+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/network/ripe/start?rev=1254554937&do=diff RIPE Network Tools Added a new peer to your router ? Forgot to update your aut-num following the change ! Save yourself time and automating the process. Disclaimer The RIPE aut-num generation code is used on our network to parse juniper configurations. The parser does takes some shortcut when it comes to global definition and may not work for you (this will be fixed in a future release). text/html 2009-04-23T07:49:50+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/links?rev=1240469390&do=diff Related Links SpamHINTS, scavengerEXA inspiration Amazon EC3 spam issues University used to relay spam The BBC create a botnet using SPAM Spam harms the environment Botnet of 1.9 millions machine text/html 2009-02-16T11:32:32+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/running?rev=1234783952&do=diff Running the program In production You will need to have the daemontools program installed. The ScavengerEXA programs should be controlled by the supervise program. Supervise takes care of running the programs and restarting them should they fail, and connecting the printout of the application to the appropriate log file. text/html 2009-02-16T11:30:58+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/configuration?rev=1234783858&do=diff Configuring ScavengerEXA Quick Configuration You can quickly configure ScavengerEXA to evaluate it by following those instructions. Controlling ScavengerEXA How to get Scavenger to start at boot time or how to run each scavenger program from the command line (in order to test a configuration change for example). text/html 2009-02-16T11:29:23+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/screenshot?rev=1234783763&do=diff Screenshot As everyone likes screenshots to have an idea of how an application works, here are some edited captures. Capture [root@sp-fw-1 scavenger]# ./service/scavenger-capture-pcap/run Psyco is not available ******************************************************************************** debug : 9 slow : False diffusion : rr promiscuous : False interface : eth0 internal : ['82.219.192.0/18', '82.219.9.0/24'] dispatc… text/html 2009-02-16T08:22:43+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/linx64?rev=1234772563&do=diff An open source program to fight spam at the source Thomas Mangin Exa Networks Linx 64 2009/02/16 The spam battle Spammers: * BOTNETs, creating their own spam infrastructure * Lots of “low” volume source How respond: * Postmaster should get help some help from the 'network', spammers do. * The fight should be brought back to the edge text/html 2009-02-15T17:04:47+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/press?rev=1234717487&do=diff Press Please let us know if scavengerEXA appears in any press publication text/html 2009-02-11T18:06:35+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/uknof12?rev=1234375595&do=diff An open source program to fight spam at the source Thomas Mangin Exa Networks UKNOF 12 2009/02/13 The spam battle - Yesterday Mice: * Using existing mail servers, open relay * Few high volume source Cats: * scanning for open relay * Using RBL text/html 2009-02-08T09:05:21+01:00 Thomas Mangin http://bgp.exa.org.uk, bgp.exa.org.uk/scavenger/craphound?rev=1234083921&do=diff Slashdot's response to this site will be .... In order to save time to our slashdot friends, here is the craphound filling for this software, just copy and paste to hopefully get a (Score:5, Funny) post ... Your post advocates a (X) technical ( ) legislative ( ) market-based ( ) vigilante approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to …