Skip to end of metadata
Go to start of metadata

Alerts

No Alerts at this time.

E-mail: security@lbl.gov

Network Usage Requirements

IP Addresses Registration

A "poached IP" is an unregistered (in DNS) static IP. Cyber Security will block poaching machines from all network access, and may be forced to do so without notice. Registration allows LBLnet and Cyber Security to locate device owners in case of operational issues or security incidents.

To avoid network disruption, you must register static IP addresses at: https://iprequest.lbl.gov/

DNS Contact Information

Static IP addresses must have two valid contacts.  At least one contact must be LBL staff and the other may be LBL staff or a LBL affiliate. A third contact is optional and may be LBL staff, a LBL affiliate or an email address.  It's good practice to use a group mailing list as the third contact. 

DNS Contacts may be used to resolve issues with a host including, but not limited to:

  • Insecure configuration
  • Software security vulnerability
  • System compromise
  • Improper operation causing operational problems
  • Copyright or other intellectual property problems
  • Content problems or issues

DNS Contacts for host are visible to any authenticated LBNL employee by visiting https://dnscontacts.lbl.gov/

You can update the DNS contact records at  https://iprequest.lbl.gov/ 

Host without two valid contacts may be blocked from network access. You can check to see if a host is blocked using https://onestop.lbl.gov/

DNS Delegation

LBLNet does not allow delegation in the (*.gov) zones we manage. Users who wish to add, delete or change records in existing zones can request changes at https://iprequest.lbl.gov

 Users who require automation or dynamic changes may be allowed to update records using dynamic DNS (RFC 2136) authenticated by TSIG (RFC 2845). Users who cannot be accommodated in these ways will be encouraged to register a separate (non *.gov) domain.

DNS Reclamation 

We regularly reclaim hostnames and IP addresses not use for more than a year from DNS.  We do not send individual notices on this activity.