Hurricane Electric's IPv6 Tunnel Broker Forums

IPv6 Certification Program Topics => General Discussion => Topic started by: polarhome on November 30, 2011, 01:41:22 AM

Title: Daily tests: Submit an IPv6 Whois - problem
Post by: polarhome on November 30, 2011, 01:41:22 AM
Hello,

I have noticed that not all valid and correct whois responses are accepted. The daily test fails with a message: "It looks like you submitted an invalid whois query!"

Here are two examples:
[root@mailhost ipv6]# whois 2001:550:1:b::d
[Querying whois.arin.net]
[Redirected to rwhois.cogentco.com:4321]
[Querying rwhois.cogentco.com]
[rwhois.cogentco.com]
%rwhois V-1.5:0010b0:00 rwhois.cogentco.com
2001:550:1:b::d
network:ID:NET6-200105500001000030
network:Network-Name:NET6-200105500001000030
network:IP-Network:2001:550:1::/48
network:Postal-Code:20007
network:Country:US
network:State:DC
network:City:Washington
network:Street-Address:1015 31st St NW
network:Org-Name:Cogent communications - IPENG
network:Tech-Contact:ZC108-ARIN
network:Updated:2009-06-02 00:06:51
network:Updated-by:John Knowles

%ok


...also:
[root@mailhost ipv6]# whois 2001:470:1f10:22f::2
[Querying whois.arin.net]
[Redirected to rwhois.he.net:4321]
[Querying rwhois.he.net]
[rwhois.he.net]
%rwhois V-1.5:0012b7:01 ops.he.net (HE-RWHOISd v:r255,m1:r290)
network:ID;I:NET-2001:470:1F10:22F::/64
network:Auth-Area:nets
network:Class-Name:network
network:Network-Name;I:NET-2001:470:1F10:22F::/64
network:Parent;I:NET-2001:470::/32
network:IP-Network:2001:470:1f10:22f::/64
network:Tech-Contact;I:POC-HE-NOC
network:Abuse-Contact;I:POC-HE-ABUSE
network:NOC-Contact;I:POC-HE-NOC
network:Created:20101123143205000
network:Updated:20101123143205000

contact:ID;I:POC-HE-NOC
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Network Operations Center
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:noc@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000

contact:ID;I:POC-HE-ABUSE
contact:Auth-Area:contacts
contact:Class-Name:contact
contact:Name:Abuse Department
contact:Company:Hurricane Electric
contact:Street-Address:760 Mission Ct
contact:City:Fremont
contact:Province:CA
contact:Postal-Code:94539
contact:Country-Code:US
contact:Phone:+1-510-580-4100
contact:E-Mail:abuse@he.net
contact:Created:20100901200738000
contact:Updated:20100901200738000
contact:Comment:For email abuse (spam) only

%ok


...while the responses from arin.net are accepted without any problem.

Is this a bug or intention?

Thank you.

Regards,
Z
Title: Re: Daily tests: Submit an IPv6 Whois - problem
Post by: jrocha on November 30, 2011, 02:16:55 PM
The whois test does not accept rwhois output, which is what you see in the examples you provided. It only accepts whois output from RIRs.
Title: Re: Daily tests: Submit an IPv6 Whois - problem
Post by: polarhome on December 01, 2011, 12:30:15 AM
Right... thank you very much for enlightening me.
Until now, I believed, that all valid, non empty, responses of whois command should be acceptable - at least considering with the common sense - but validation scripts are just a piece of code written by a programmer who not necessarily follows the common sense :) (sometimes I am one of those)

Is there any risk using rwhois? Is this answer not enough authoritative? 

Thank you.

Regards,
Z
Title: Re: Daily tests: Submit an IPv6 Whois - problem
Post by: broquea on December 01, 2011, 02:27:59 AM
The code expects RIR formatted answers, not rwhois, as it has since the start of the Certification Program. People have completed all 100 whois submissions, just looking at the ~200 Sages with 1500 alone, so it is not impossible to complete a daily submission.
Title: Re: Daily tests: Submit an IPv6 Whois - problem
Post by: polarhome on December 14, 2011, 01:33:42 AM
Hello,

...I am also on a good way to manage all my 100 daily tests... I would like to turn daily testers' attention that not just the rwhois format is not accepted, but the character encoding also counts.

I ran into troubles with getting the following error on valid whois responses:
QuoteResult: Fail
Reason: Record mismatch

If we take a closer look we see that the responses differs in ISO-8859-1 and UTF-8. I do not know what encoding HE uses during verification, but for sure non of those :)

Here is an example. please notice the difference in "person" records.

ISO-8859-1 encoding
[root@mailhost ~]# whois 2001:1291:0:4::b
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
%  The use of the data below is only permitted as described in
%  full by the terms of use (http://registro.br/termo/en.html),
%  being prohibited its distribution, comercialization or
%  reproduction, in particular, to use it for advertising or
%  any similar purpose.
%  2011-12-14 06:45:49 (BRST -02:00)

inetnum:     2001:1291::/32
aut-num:     AS16735
abuse-c:     CST87
owner:       COMPANHIA DE TELECOMUNICACOES DO BRASIL CENTRAL
ownerid:     071.208.516/0001-74
responsible: Cristiano Azevedo Vinaud
country:     BR
owner-c:     CCRDO
tech-c:      CNI15
inetrev:     2001:1291::/32
nserver:     nspar.ctbc.com.br
nsstat:      20111213 AA
nslastaa:    20111213
nserver:     nssar.ctbc.com.br
nsstat:      20111213 AA
nslastaa:    20111213
created:     20080610
changed:     20081229

nic-hdl-br:  CCRDO
person:      CTBC - Contratos e Registro de Domínios
e-mail:      security@ctbc.com.br
created:     20070606
changed:     20111118

nic-hdl-br:  CNI15
person:      CTBC - Núcleo de Aministração de IPs
e-mail:      admip@ctbc.com.br
created:     20060417
changed:     20110608

nic-hdl-br:  CST87
person:      Computer Security Incident Response Team
e-mail:      abuse@ctbc.com.br
created:     20051208
changed:     20111117

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), ticket, provider, ID, CIDR
% block, IP and ASN.


The same with UTF-8 encoding
[root@mailhost ipv6]# whois 2001:1291:0:4::b
[Querying whois.lacnic.net]
[Redirected to whois.registro.br]
[Querying whois.registro.br]
[whois.registro.br]

% Copyright (c) Nic.br
%  The use of the data below is only permitted as described in
%  full by the terms of use (http://registro.br/termo/en.html),
%  being prohibited its distribution, comercialization or
%  reproduction, in particular, to use it for advertising or
%  any similar purpose.
%  2011-12-14 06:51:19 (BRST -02:00)

inetnum:     2001:1291::/32
aut-num:     AS16735
abuse-c:     CST87
owner:       COMPANHIA DE TELECOMUNICACOES DO BRASIL CENTRAL
ownerid:     071.208.516/0001-74
responsible: Cristiano Azevedo Vinaud
country:     BR
owner-c:     CCRDO
tech-c:      CNI15
inetrev:     2001:1291::/32
nserver:     nspar.ctbc.com.br
nsstat:      20111213 AA
nslastaa:    20111213
nserver:     nssar.ctbc.com.br
nsstat:      20111213 AA
nslastaa:    20111213
created:     20080610
changed:     20081229

nic-hdl-br:  CCRDO
person:      CTBC - Contratos e Registro de Dom▒nios
e-mail:      security@ctbc.com.br
created:     20070606
changed:     20111118

nic-hdl-br:  CNI15
person:      CTBC - N▒cleo de Aministra▒▒o de IPs
e-mail:      admip@ctbc.com.br
created:     20060417
changed:     20110608

nic-hdl-br:  CST87
person:      Computer Security Incident Response Team
e-mail:      abuse@ctbc.com.br
created:     20051208
changed:     20111117

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to cert@cert.br
% and mail-abuse@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), ticket, provider, ID, CIDR
% block, IP and ASN.


Thank you.

Regards,
Z