bad announcement taxonomy

2015-11-18 Thread Randy Bush
some friends and i were talking about recent routing cfs, and found we
needed a clearer taxonomy.  i throw this out.

leak - i receive P and send it on to folk to whom i should not send
   it for business reasons (transit, peer, ...)

mis-origination - i originate P when i do not own it

hijack - an intentional mis-origination

7007 - i receive P (or some sub/superset), process it in some way
   (likely through my igp), and re-originate it, or part of it,
   as my own

we need a name for 7007 other then vinnie

randy


Re: bad announcement taxonomy

2015-11-18 Thread Roland Dobbins
On 18 Nov 2015, at 17:06, Randy Bush wrote:

> we need a name for 7007 other then vinnie

Mis-distribution?

---
Roland Dobbins 


Re: bad announcement taxonomy

2015-11-18 Thread Tony Finch
Randy Bush  wrote:
>
> leak - i receive P and send it on to folk to whom i should not send
>it for business reasons (transit, peer, ...)
>
> 7007 - i receive P (or some sub/superset), process it in some way
>(likely through my igp), and re-originate it, or part of it,
>as my own
>
> we need a name for 7007 other then vinnie

Laundered leak?

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
German Bight, Humber, Thames, Dover: West or northwest, backing southwest for
a time, 6 to gale 8, increasing severe gale 9 at times, perhaps storm 10 later
in German Bight and Humber. Rough or very rough, occasionally high later in
German Bight and Humber. Rain at times. Good, occasionally poor.


Re: bad announcement taxonomy

2015-11-18 Thread Randy Bush
>> 7007 - i receive P (or some sub/superset), process it in some way
>>(likely through my igp), and re-originate it, or part of it,
>>as my own
>>
>> we need a name for 7007 other then vinnie
> 
> Laundered leak?

how about re-origination?


Re: bad announcement taxonomy

2015-11-18 Thread Aftab Siddiqui
On Wed, 18 Nov 2015 at 22:29 Randy Bush  wrote:

> >> 7007 - i receive P (or some sub/superset), process it in some way
> >>(likely through my igp), and re-originate it, or part of it,
> >>as my own
> >>
> >> we need a name for 7007 other then vinnie
> >
> > Laundered leak?
>
> how about re-origination?
>

+1 Mis-distribution. or may be Mis-redistribution

Leak, Mis-origination, Hijack.. they all have something in common i.e.
#culprit
but re-origination sounds pretty legitimate.
-- 
Best Wishes,

Aftab A. Siddiqui


Re: bad announcement taxonomy

2015-11-18 Thread Randy Bush
>> how about re-origination?
> 
> +1 Mis-distribution. or may be Mis-redistribution

you lost the part of the language which made clear that the *origin* has
been changed.

randy


Re: bad announcement taxonomy

2015-11-18 Thread Randy Bush
> What about "origin scrubbing".

so now it has no origin?


Re: bad announcement taxonomy

2015-11-18 Thread William Herrin
On Wed, Nov 18, 2015 at 5:06 AM, Randy Bush  wrote:
> some friends and i were talking about recent routing cfs, and found we
> needed a clearer taxonomy.  i throw this out.
>
> leak - i receive P and send it on to folk to whom i should not send
>it for business reasons (transit, peer, ...)
>
> mis-origination - i originate P when i do not own it
>
> hijack - an intentional mis-origination
>
> 7007 - i receive P (or some sub/superset), process it in some way
>(likely through my igp), and re-originate it, or part of it,
>as my own
>
> we need a name for 7007 other then vinnie

mis-origination. When you non-maliciously announce P as if you own it
(even though you do not) the exact details of how you screwed the
pooch are not externally important. And we have enough obscure names
for things as it is.

-Bill

-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 


Re: bad announcement taxonomy

2015-11-18 Thread Todd Underwood
Reorigination?

Mis-re-origination?
On Nov 18, 2015 22:53, "Randy Bush"  wrote:

> > What about "origin scrubbing".
>
> so now it has no origin?
>


Re: bad announcement taxonomy

2015-11-18 Thread Randy Bush
> Reorigination?

tried that and folk have been pushing back

> Mis-re-origination?

remiss-origination?  :)


Re: bad announcement taxonomy

2015-11-18 Thread William Herrin
On Wed, Nov 18, 2015 at 6:51 AM, William Herrin  wrote:
> On Wed, Nov 18, 2015 at 5:06 AM, Randy Bush  wrote:
>> some friends and i were talking about recent routing cfs, and found we
>> needed a clearer taxonomy.  i throw this out.
>>
>> leak - i receive P and send it on to folk to whom i should not send
>>it for business reasons (transit, peer, ...)
>>
>> mis-origination - i originate P when i do not own it
>>
>> hijack - an intentional mis-origination
>>
>> 7007 - i receive P (or some sub/superset), process it in some way
>>(likely through my igp), and re-originate it, or part of it,
>>as my own
>>
>> we need a name for 7007 other then vinnie
>
> mis-origination. When you non-maliciously announce P as if you own it
> (even though you do not) the exact details of how you screwed the
> pooch are not externally important. And we have enough obscure names
> for things as it is.

For that matter, just call it a hijack like it is. Don't legitimize
originating a prefix you don't own by giving it an innocuous name.

-Bill


-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 


Re: bad announcement taxonomy

2015-11-18 Thread Alejandro Acosta
El 11/18/2015 a las 7:16 AM, Randy Bush escribió:
>>> how about re-origination?
>> +1 Mis-distribution. or may be Mis-redistribution
> you lost the part of the language which made clear that the *origin* has
> been changed.

mutant?

>
> randy



Re: Veeam Cloud Connect?

2015-11-18 Thread Steven Miano
Using Veeam for backup at the moment, pretty unhappy with backup copy
functions on multiple deduplication devices.

Would also be very interested in hearing cloud connect experiences.

On Wed, Nov 18, 2015 at 12:09 AM, Mike Lyon  wrote:

> I haven't used Veeam Cloud Connect but I have used Veeam. I was pretty
> happy with it. Easy and fast to configure.
>
> -Mike
>
>
> On Tue, Nov 17, 2015 at 8:56 PM, Ryan Finnesey  wrote:
>
> > I was wondering if anyone has deployed Veeam Cloud Connect.  How has
> Veeam
> > been to work with?
> >
> >
> > Sent from my Windows Phone
> >
>
>
>
> --
> Mike Lyon
> 408-621-4826
> mike.l...@gmail.com
>
> http://www.linkedin.com/in/mlyon
>



-- 
Miano, Steven M.
http://stevenmiano.com


Re: bad announcement taxonomy

2015-11-18 Thread William Herrin
On Wed, Nov 18, 2015 at 8:50 AM, Mattia Rossi
 wrote:
> So probably it should be structured like this:
>
>   _ leak
> /
> hijack - mis-origination (which should be better described
> as: I originate P when I don't have the right to)
>\__ origin scrubbing (I like that)
>
> It's a hijack (the result)  in any case. If you want to differentiate
> between malice and stupidity/ignorance just call it "malicious hijack"
> opposed to  "accidental hijack". And then list the cause (leak,
> mis-origination, origin scrubbing)


Hi Mat,

I object to jargon on general principle. Excessive jargon makes
technical disciplines needlessly inaccessible to folks who aren't
steeped in the lore.

Now and then there's a concept of such routine utility within the
discipline that it's worth abbreviating into a word or short phrase.
In that case, words that imply the concept are a good choice. Route
Hijack is a good example of this.

Creating jargon down in the weeds, though, that's a bad thing. Unwise.
Something to be deliberately avoided.

Regards,
Bill Herrin



-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 


Re: bad announcement taxonomy

2015-11-18 Thread Roland Dobbins

On 18 Nov 2015, at 21:40, William Herrin wrote:

> Creating jargon down in the weeds, though, that's a bad thing.

'AS 7007' is jargon to those unaware of the history and context.

---
Roland Dobbins 


Re: bad announcement taxonomy

2015-11-18 Thread Matthias Waehlisch

On Wed, 18 Nov 2015, Randy Bush wrote:

> >> 7007 - i receive P (or some sub/superset), process it in some way
> >>(likely through my igp), and re-originate it, or part of it,
> >>as my own
> >>
> >> we need a name for 7007 other then vinnie
> > 
> > Laundered leak?
> 
> how about re-origination?
> 
  might be misleading in case you don't re-originate P exactly but only 
"part of it". 

  What about "origin scrubbing".


Cheers
  matthias


-- 
Matthias Waehlisch
.  Freie Universitaet Berlin, Inst. fuer Informatik, AG CST
.  Takustr. 9, D-14195 Berlin, Germany
.. mailto:waehli...@ieee.org .. http://www.inf.fu-berlin.de/~waehl
:. Also: http://inet.cpt.haw-hamburg.de .. http://www.link-lab.net


Re: bad announcement taxonomy

2015-11-18 Thread Mattia Rossi



Am 18.11.2015 um 13:08 schrieb William Herrin:

On Wed, Nov 18, 2015 at 6:51 AM, William Herrin  wrote:

On Wed, Nov 18, 2015 at 5:06 AM, Randy Bush  wrote:

some friends and i were talking about recent routing cfs, and found we
needed a clearer taxonomy.  i throw this out.

leak - i receive P and send it on to folk to whom i should not send
it for business reasons (transit, peer, ...)

mis-origination - i originate P when i do not own it

hijack - an intentional mis-origination

7007 - i receive P (or some sub/superset), process it in some way
(likely through my igp), and re-originate it, or part of it,
as my own

we need a name for 7007 other then vinnie

mis-origination. When you non-maliciously announce P as if you own it
(even though you do not) the exact details of how you screwed the
pooch are not externally important. And we have enough obscure names
for things as it is.

For that matter, just call it a hijack like it is. Don't legitimize
originating a prefix you don't own by giving it an innocuous name.


So probably it should be structured like this:

  _ leak
/
hijack - mis-origination (which should be better 
described as: I originate P when I don't have the right to)

   \__ origin scrubbing (I like that)

It's a hijack (the result)  in any case. If you want to differentiate 
between malice and stupidity/ignorance just call it "malicious hijack" 
opposed to  "accidental hijack". And then list the cause (leak, 
mis-origination, origin scrubbing)


Cheers,

Mat


Re: bad announcement taxonomy

2015-11-18 Thread Nigel Titley


On 18/11/2015 13:46, Randy Bush wrote:

how about re-origination?

+1 Mis-distribution. or may be Mis-redistribution

you lost the part of the language which made clear that the *origin* has
been changed.

Fenced



Time Warner contact?

2015-11-18 Thread noc
We're seeing 90% packet loss between Time Warner in socal, starting at 
24.30.169.141 (tge0-9-0-23.lsapcawv02h.socal.rr.com), and anything in 74.125 
(google space).



Has been in ticket hell for the last week.  Could you please contact me off 
list for the ticket number and additional information?



This is a major impairment, at least for those TW customers it's affecting.



Thanks,

Spencer

PBRC NOC





RE: Veeam Cloud Connect?

2015-11-18 Thread Nick Ellermann
Yes. We have the Veeam Cloud Connect platform deployed in multiple data centers 
for our customers. It's only useful for offsite backup copies at the moment, 
but with version 9 there will be VM replication options added to the platform. 
Veeam has been a great software partner of ours for several years and we enjoy 
the service provider program. 
Message me offline if you would like to know more. 


Sincerely,
Nick Ellermann - CTO & VP Cloud Services
BroadAspect
 
E: nellerm...@broadaspect.com 
P: 703-297-4639
F: 703-996-4443
 
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

-Original Message-
From: NANOG [mailto:nanog-bounces+nellermann=broadaspect@nanog.org] On 
Behalf Of Ryan Finnesey
Sent: Tuesday, November 17, 2015 11:57 PM
To: NANOG 
Subject: Veeam Cloud Connect?

I was wondering if anyone has deployed Veeam Cloud Connect.  How has Veeam been 
to work with?


Sent from my Windows Phone


Re: bad announcement taxonomy

2015-11-18 Thread Stefan Fouant

> On Nov 18, 2015, at 9:45 AM, Roland Dobbins  wrote:
> 
>> On 18 Nov 2015, at 21:40, William Herrin wrote:
>> 
>> Creating jargon down in the weeds, though, that's a bad thing.
> 
> 'AS 7007' is jargon to those unaware of the history and context.

https://en.m.wikipedia.org/wiki/AS_7007_incident

He can thank me later 😜

Stefan Fouant
JNCIE-SEC, JNCIE-SP, JNCIE-ENT, JNCI
m (703) 625-6243

Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Kurt Kraut via NANOG
Hi,


I'm evaluating different datacenters and vendors accross the globe and it
isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET from
my office. I need to be able to perform this tests remotely, from multiple
endpoints.

The only company I know allow such thing is ThousandEyes, but it is
brutally and inexplicably expensive and doesn't fit perfectly to what I'm
looking for. It has a paradigm I'm willing to monitor 24x7 specific targets
from multiple points of view. I need to make tests on demand, on different
targets and URLs.

Does anyone know such service, DNS lookup, traceroute, ping and HTTP GET as
a service from multiple nodes geographically spread?


Thanks in advance,


Kurt Kraut


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Christopher Morrow
ripe atlas?

On Wed, Nov 18, 2015 at 11:28 AM, Kurt Kraut via NANOG  wrote:
> Hi,
>
>
> I'm evaluating different datacenters and vendors accross the globe and it
> isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET from
> my office. I need to be able to perform this tests remotely, from multiple
> endpoints.
>
> The only company I know allow such thing is ThousandEyes, but it is
> brutally and inexplicably expensive and doesn't fit perfectly to what I'm
> looking for. It has a paradigm I'm willing to monitor 24x7 specific targets
> from multiple points of view. I need to make tests on demand, on different
> targets and URLs.
>
> Does anyone know such service, DNS lookup, traceroute, ping and HTTP GET as
> a service from multiple nodes geographically spread?
>
>
> Thanks in advance,
>
>
> Kurt Kraut


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread William Herrin
On Wed, Nov 18, 2015 at 11:28 AM, Kurt Kraut via NANOG  wrote:
> I'm evaluating different datacenters and vendors accross the globe and it
> isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET from
> my office. I need to be able to perform this tests remotely, from multiple
> endpoints.

For common tests like ping and traceroute, google "ip looking glass".
There are a lot of them in a lot of locations, all free to use.

-Bill


-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Kurt Kraut via NANOG
Hi,


Thank you for the quick replies. Sorry for not being clear enough: I need
it to have an API so I can integrate it with my own solution, generate my
own metrics. So looking glasses are pretty much useless: they don't support
HTTP GET and DNS lookup (usually) and the parsing for so many different
HTML or telnet sources would be very time consuming.

Also I've seen many looking glasses with captchas to halt these intents. So
I need a SaaS with an API for these tests.

About RIPE ATLAS, I already have one of their boxes and it never worked.
Simply doesn't appear as online. Their support just barely gave me some
tips but with no meaningful result. I need something reliable and I'm
willing to pay for this service. RIPE Atlas falls in the category of 'best
effort'.


Best regards,


Kurt Kraut

2015-11-18 14:32 GMT-02:00 William Herrin :

> On Wed, Nov 18, 2015 at 11:28 AM, Kurt Kraut via NANOG 
> wrote:
> > I'm evaluating different datacenters and vendors accross the globe and it
> > isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET
> from
> > my office. I need to be able to perform this tests remotely, from
> multiple
> > endpoints.
>
> For common tests like ping and traceroute, google "ip looking glass".
> There are a lot of them in a lot of locations, all free to use.
>
> -Bill
>
>
> --
> William Herrin  her...@dirtside.com  b...@herrin.us
> Owner, Dirtside Systems . Web: 
>


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Hank Nussbacher

At 14:38 18/11/2015 -0200, Kurt Kraut via NANOG wrote:

Try: https://asm.ca.com/en/

-Hank



Hi,


Thank you for the quick replies. Sorry for not being clear enough: I need
it to have an API so I can integrate it with my own solution, generate my
own metrics. So looking glasses are pretty much useless: they don't support
HTTP GET and DNS lookup (usually) and the parsing for so many different
HTML or telnet sources would be very time consuming.

Also I've seen many looking glasses with captchas to halt these intents. So
I need a SaaS with an API for these tests.

About RIPE ATLAS, I already have one of their boxes and it never worked.
Simply doesn't appear as online. Their support just barely gave me some
tips but with no meaningful result. I need something reliable and I'm
willing to pay for this service. RIPE Atlas falls in the category of 'best
effort'.


Best regards,


Kurt Kraut

2015-11-18 14:32 GMT-02:00 William Herrin :

> On Wed, Nov 18, 2015 at 11:28 AM, Kurt Kraut via NANOG 
> wrote:
> > I'm evaluating different datacenters and vendors accross the globe and it
> > isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET
> from
> > my office. I need to be able to perform this tests remotely, from
> multiple
> > endpoints.
>
> For common tests like ping and traceroute, google "ip looking glass".
> There are a lot of them in a lot of locations, all free to use.
>
> -Bill
>
>
> --
> William Herrin  her...@dirtside.com  b...@herrin.us
> Owner, Dirtside Systems . Web: 
>




Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Mick O Donovan
Hi there,

On Wed, Nov 18, 2015 at 02:38:28PM -0200, Kurt Kraut via NANOG wrote:
> About RIPE ATLAS, I already have one of their boxes and it never worked.
> Simply doesn't appear as online. Their support just barely gave me some
> tips but with no meaningful result. I need something reliable and I'm
> willing to pay for this service. RIPE Atlas falls in the category of 'best
> effort'.
> 
> 
> Best regards,
> 

I find this surprising. Like many hundreds/thousands of people around
the globe I find RIPE ATLAS an excellent and reliable way to get the
measurements you require.

You may not have had the best experience with your probe setup but I'm
sure that if someone can assist you with setup you'll be pleasantly
surprised at the ability the network of probes has to fulfill your needs
- after all it is the biggest measurement network on the internet today!

(at least that's what my t-shirt says)

Regards,

Mick

-- 

Mick O'Donovan | Network Engineer | BT Ireland |
Website: http://www.btireland.net
Looking Glass: http://lg.as2110.net
Peering Record: http://as2110.peeringdb.com
AS-SET Macro: AS-BTIRE | ASN: 2110


signature.asc
Description: Digital signature


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread A . L . M . Buxey
Hi,

> About RIPE ATLAS, I already have one of their boxes and it never worked.
> Simply doesn't appear as online. Their support just barely gave me some
> tips but with no meaningful result. I need something reliable and I'm
> willing to pay for this service. RIPE Atlas falls in the category of 'best
> effort'.

RIPE Atlas probes? you just plug them intoa working network with DHCP and
away they go - I'd investigate why it doesnt work - RIPE expect probe users
to be technically proficient and that the networks that the probes are on arent
RIPEs to debug/troubleshoot.   once you have a working one iy can do tests but 
you then also have access to the testing system that they offer allowing you 
to do on-demand tests for various things from probes around the world whever you
want - depending on how many points you have. I have a few million or so points 
:-)

alan


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread A . L . M . Buxey
hi,


...and SamKnows? 


alan


Re: bad announcement taxonomy

2015-11-18 Thread Casey Russell
I think Tony's on the right track here.  I vote we call this "Route
Laundering", the people who do it "Route Launderers", and the routes
themselves "Laundered Routes".

I actually had a little trouble spelling the different forms of
laundering.  So I looked them up..


"I can't believe what a bunch of nerds we are. We're looking up "money
laundering" in a dictionary."

Casey Russell
Network Engineer
Kansas Research and Education Network

2029 Becker Drive, Suite 282

Lawrence, KS  66047
(785)856-9820  ext 9809
cruss...@kanren.net

On Wed, Nov 18, 2015 at 4:40 AM, Tony Finch  wrote:

> Randy Bush  wrote:
> >
> > leak - i receive P and send it on to folk to whom i should not send
> >it for business reasons (transit, peer, ...)
> >
> > 7007 - i receive P (or some sub/superset), process it in some way
> >(likely through my igp), and re-originate it, or part of it,
> >as my own
> >
> > we need a name for 7007 other then vinnie
>
> Laundered leak?
>
> Tony.
> --
> f.anthony.n.finchhttp://dotat.at/
> German Bight, Humber, Thames, Dover: West or northwest, backing southwest
> for
> a time, 6 to gale 8, increasing severe gale 9 at times, perhaps storm 10
> later
> in German Bight and Humber. Rough or very rough, occasionally high later in
> German Bight and Humber. Rain at times. Good, occasionally poor.
>


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Stephane Bortzmeyer
On Wed, Nov 18, 2015 at 02:38:28PM -0200,
 Kurt Kraut via NANOG  wrote 
 a message of 45 lines which said:

> About RIPE ATLAS, I already have one of their boxes and it never
> worked.  Simply doesn't appear as online. Their support just barely
> gave me some tips but with no meaningful result.

Like most people, I have a very good experience with RIPE Atlas
probes. If they fail (it never happened to me), there is a very
comprehensive FAQ 
and the nice people on the user mailing list (remember it is a
community service, the RIPE-NCC is not a commercial support team) are
very responsive.



Re: bad announcement taxonomy

2015-11-18 Thread Arturo Servin
Laundered route

I like it.

Or re-originated laundered route (it has more meaning but a bit too long)

.as

On Wed, 18 Nov 2015 at 09:33 Casey Russell  wrote:

> I think Tony's on the right track here.  I vote we call this "Route
> Laundering", the people who do it "Route Launderers", and the routes
> themselves "Laundered Routes".
>
> I actually had a little trouble spelling the different forms of
> laundering.  So I looked them up..
>
>
> "I can't believe what a bunch of nerds we are. We're looking up "money
> laundering" in a dictionary."
>
> Casey Russell
> Network Engineer
> Kansas Research and Education Network
>
> 2029 Becker Drive, Suite 282
>
> Lawrence, KS  66047
> (785)856-9820  ext 9809
> cruss...@kanren.net
>
> On Wed, Nov 18, 2015 at 4:40 AM, Tony Finch  wrote:
>
> > Randy Bush  wrote:
> > >
> > > leak - i receive P and send it on to folk to whom i should not send
> > >it for business reasons (transit, peer, ...)
> > >
> > > 7007 - i receive P (or some sub/superset), process it in some way
> > >(likely through my igp), and re-originate it, or part of it,
> > >as my own
> > >
> > > we need a name for 7007 other then vinnie
> >
> > Laundered leak?
> >
> > Tony.
> > --
> > f.anthony.n.finchhttp://dotat.at/
> > German Bight, Humber, Thames, Dover: West or northwest, backing southwest
> > for
> > a time, 6 to gale 8, increasing severe gale 9 at times, perhaps storm 10
> > later
> > in German Bight and Humber. Rough or very rough, occasionally high later
> in
> > German Bight and Humber. Rain at times. Good, occasionally poor.
> >
>


Re: bad announcement taxonomy

2015-11-18 Thread Joe Abley


On 18 Nov 2015, at 15:55, Arturo Servin wrote:

> Laundered route

The routes in question are not just being laundered, they're being bleached.


Joe


OT: BdNOG announces website blocks

2015-11-18 Thread Scott Weeks

-
Md. abdullah Al naser mail.naserbd at yahoo.com 
Wed Nov 18 12:56:15 BDT 2015 

The service of Facebook, Viber and Whatsapp are 
blocked from now till further notice. It has been 
ordered by Begum Tarana Halim, State Minister, Post 
and Telecommunications. 
--



I just saw this on BdNOG and thought it might be 
interesting to others here and where some of the 
internet is headed...

Wow, all of these govt's just can't seem to deal 
with not being able to completely control *everything* 
about the populace.

So, in Bangladesh, no communicating with your social 
peers, no free calls, text or picture sharing and no 
mobile messaging.  The new State Minister for Post 
and Telecommunications in Bangladesh wants her money.

It'd be interesting to hear how they're attempting 
to make it happen.

scott


Re: OT: BdNOG announces website blocks

2015-11-18 Thread Grant Ridder
Any idea if this includes Instagram as well since it is a Facebook asset?

-Grant

On Wed, Nov 18, 2015 at 3:22 PM, Scott Weeks  wrote:

>
> -
> Md. abdullah Al naser mail.naserbd at yahoo.com
> Wed Nov 18 12:56:15 BDT 2015
>
> The service of Facebook, Viber and Whatsapp are
> blocked from now till further notice. It has been
> ordered by Begum Tarana Halim, State Minister, Post
> and Telecommunications.
> --
>
>
>
> I just saw this on BdNOG and thought it might be
> interesting to others here and where some of the
> internet is headed...
>
> Wow, all of these govt's just can't seem to deal
> with not being able to completely control *everything*
> about the populace.
>
> So, in Bangladesh, no communicating with your social
> peers, no free calls, text or picture sharing and no
> mobile messaging.  The new State Minister for Post
> and Telecommunications in Bangladesh wants her money.
>
> It'd be interesting to hear how they're attempting
> to make it happen.
>
> scott
>


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Matthew McGehrin

Hello.

Have you checked out some of the website monitoring sites?

I know Hyperspin has a free test for most of their locations:
http://www.hyperspin.com/en/quicktest.php

UptimeRobot, has free monitoring for up to 50 sites:
http://uptimerobot.com/

If you want to check DNS propagation, I use:
https://www.whatsmydns.net/

-- Matthew

Kurt Kraut via NANOG wrote:

Hi,

I'm evaluating different datacenters and vendors accross the globe and it
isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET from
my office. I need to be able to perform this tests remotely, from multiple
endpoints.

  


Re: OT: BdNOG announces website blocks

2015-11-18 Thread Rich Kulawiec
On Wed, Nov 18, 2015 at 03:34:13PM -0800, Grant Ridder wrote:
> Any idea if this includes Instagram as well since it is a Facebook asset?

This news story:

Social networking sites closed for security reasons, says Minister 
Tarana Halim

http://bdnews24.com/bangladesh/2015/11/18/social-networking-sites-closed-for-security-reasons-says-minister-tarana-halim

suggests that other sites are certainly on their radar:

She [Halim] said the government was keeping an eye on Twitter,
Tango, imo and several other social networking and messaging
applications.

---rsk


Re: OT: BdNOG announces website blocks

2015-11-18 Thread Scott Weeks

On Wed, Nov 18, 2015 at 3:22 PM, Scott Weeks  wrote:

> -
> Md. abdullah Al naser mail.naserbd at yahoo.com
> Wed Nov 18 12:56:15 BDT 2015
>
> The service of Facebook, Viber and Whatsapp are
> blocked from now till further notice. It has been
> ordered by Begum Tarana Halim, State Minister, Post
> and Telecommunications.
> --
>
> I just saw this on BdNOG and thought it might be
> interesting to others here and where some of the
> internet is headed...
>
> Wow, all of these govt's just can't seem to deal
> with not being able to completely control *everything*
> about the populace.
>
> So, in Bangladesh, no communicating with your social
> peers, no free calls, text or picture sharing and no
> mobile messaging.  The new State Minister for Post
> and Telecommunications in Bangladesh wants her money.
>
> It'd be interesting to hear how they're attempting
> to make it happen.
-


--- shortdudey...@gmail.com wrote:
From: Grant Ridder 

Any idea if this includes Instagram as well since it is 
a Facebook asset?
--


No idea.  I am seeing this want of govt's everywhere.  
Australia, China, US, BD, etc, etc.  It makes me want 
to get hosed off with disinfectant.

scott


Re: OT: BdNOG announces website blocks

2015-11-18 Thread Mark Andrews

In message <20151118161330.4768...@m0087793.ppops.net>, "Scott Weeks" writes:
> 
> On Wed, Nov 18, 2015 at 3:22 PM, Scott Weeks  wrote:
> 
> > -
> > Md. abdullah Al naser mail.naserbd at yahoo.com
> > Wed Nov 18 12:56:15 BDT 2015
> >
> > The service of Facebook, Viber and Whatsapp are
> > blocked from now till further notice. It has been
> > ordered by Begum Tarana Halim, State Minister, Post
> > and Telecommunications.
> > --
> >
> > I just saw this on BdNOG and thought it might be
> > interesting to others here and where some of the
> > internet is headed...
> >
> > Wow, all of these govt's just can't seem to deal
> > with not being able to completely control *everything*
> > about the populace.
> >
> > So, in Bangladesh, no communicating with your social
> > peers, no free calls, text or picture sharing and no
> > mobile messaging.  The new State Minister for Post
> > and Telecommunications in Bangladesh wants her money.
> >
> > It'd be interesting to hear how they're attempting
> > to make it happen.
> -
> 
> 
> --- shortdudey...@gmail.com wrote:
> From: Grant Ridder 
> 
> Any idea if this includes Instagram as well since it is 
> a Facebook asset?
> --
> 
> 
> No idea.  I am seeing this want of govt's everywhere.  
> Australia, China, US, BD, etc, etc.  It makes me want 
> to get hosed off with disinfectant.

And the Australian PM boasted about using apps which encrypted
traffic to avoid surveillance before he became PM.  Perhaps he
should be locked up as a terrorist.

Mark
 
> scott
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org


Re: Is there a DNS lookup, traceroute, ping and HTTP GET as a service?

2015-11-18 Thread Alex Krohn
Hi,

> Kurt Kraut via NANOG wrote:
> > Hi,
> >
> > I'm evaluating different datacenters and vendors accross the globe and it
> > isn't worthy to perform tests like DNS, traceroute, ping and HTTP GET from
> > my office. I need to be able to perform this tests remotely, from multiple
> > endpoints.
> >
> >   
> Have you checked out some of the website monitoring sites?
>

Can also look at GTmetrix:

https://gtmetrix.com/

which has rest api to launch real browser from a bunch of different
locations and then can access the HAR file to see time to first byte,
dns resolution, and a bunch of other metrics. 

https://gtmetrix.com/reports/www.nanog.org/INgQIGE6#waterfall

Full disclosure, GT owns it (but you can do everything you want with
free api). 

Cheers,

Alex



Re: bad announcement taxonomy

2015-11-18 Thread David Edelman
How about Origin Obfuscation

--Dave

Dave Edelman


> On Nov 18, 2015, at 16:51, Joe Abley  wrote:
> 
> 
> 
>> On 18 Nov 2015, at 15:55, Arturo Servin wrote:
>> 
>> Laundered route
> 
> The routes in question are not just being laundered, they're being bleached.
> 
> 
> Joe


Re: bad announcement taxonomy

2015-11-18 Thread Valdis . Kletnieks
On Wed, 18 Nov 2015 18:21:32 -0600, David Edelman said:
> How about Origin Obfuscation

Obfuscation implies intent.  Most leaks and mis-announcements don't
have intent because they're whoopsies.


pgpjuzzo1qQew.pgp
Description: PGP signature