Re: How to tell if something is anycasted?

On Tue, 16 May 2006, David Hubbard wrote: > So I'm looking at a company who offers anycasted DNS; > how do I tell if it's really anycasted? Just hop on > different route servers to see if I can find different > AS paths and then do traceroutes to see if they suggest > the packets are not ending

[OT] Re: Troubles with HE's Tunnelbroker

On Tue, 2006-05-16 at 18:42 -0400, Dan Mahoney, System Admin wrote: > I know at least some people here (srs?) use HE.net's tunnelbroker service. > > Has anyone else been experiencing issues? I have three different tunnels > that I've noticed are down (to various data centers), and calling their

private ip addresses from ISP

Hi all Have you had this experience? Our router is running BGP and connecting to our upstream provider with /30 network. Our log reveals that there are private IP addresses reaching our router's interface that is facing our upstream ISP. How could this be possible? Should upstream ISP be blo

RE: private ip addresses from ISP

What do you mean by "reaching"? Two quick observations from a mis-configuration point of view: If you mean you are seeing BGP routes for those networks: Sometimes ISPs null route private addresses with static routes in their networks and they accidentally leak (redistribute) to customers/peers. T

RIPE IP Anti-Spoofing Task Force (Was: private ip addresses from ISP)

On Wed, 2006-05-17 at 15:14 +0100, Ivan Groenewald wrote: [..] > If you mean you are getting traffic destined for RFC1918 space, then make > sure you aren't announcing those networks to your upstreams by accident. > Poor upstream configs/filters could allow stuff like that to escape to peers > of t

Re: How to tell if something is anycasted?

well Peter, ONE root server operator has that practice. Others have different practices regarding anycast. --bill On Tue, May 16, 2006 at 11:59:54PM -0700, Peter Boothe wrote: > > On Tue, 16 May 2006, David Hubbard wrote: > > > So I'm looking at a company who offers anycasted DNS; > > how d

Re: Geo location to IP mapping

In article <[EMAIL PROTECTED]>, Ashe Canvar <[EMAIL PROTECTED]> writes Thanks for all your replies. I came across http://www.hostip.info/use.html, which looks good, at least from a API/ ease of use prespective. I just tried that, says I'm 100 miles south of where I really am. That's quite a

Re: How to tell if something is anycasted?

At 10:45 AM 5/17/2006, [EMAIL PROTECTED] wrote: well Peter, ONE root server operator has that practice. Others have different practices regarding anycast. --bill And there are many, with many TLD's. (rough counts) provider/tld's UDNS 48 ISC 19 PCH 8 PSG 23 ICANN 4 UUNET 61 RIPE 87 DEC 1

RE: private ip addresses from ISP

> Our router is running BGP and connecting to our > upstream provider with /30 network. Our log reveals > that there are private IP addresses reaching our > router's interface that is facing our upstream ISP. > How could this be possible? Should upstream ISP be > blocking private IP address ac

Re: How to tell if something is anycasted?

At 15:45 -0700 5/16/06, Steve Gibbard wrote: The approach I settled on was to ask lots of questions, and then do some traceroutes to verify once I knew where to look. If I knew there was supposed to be a server in location x, a looking glass near location x would probably find it for me. Fro

Re: Proxad? (Was: Drone Armies)

Who owns/operates *.abo.wanadoo.fr? I've had enormous non-stop spam flooding from them for years. Anyone have their complete list of IP ranges they'd be willing to share? Getting kind tired of running scripts to discover them. -- -Barry Shein The World | [EMAIL PROTECTED]

Re: How to tell if something is anycasted?

On Wed, 17 May 2006, Martin Hannigan wrote: And there are many, with many TLD's. (rough counts) provider/tld's UDNS 48 ISC 19 PCH 8 PSG 23 ICANN 4 UUNET 61 RIPE 87 DEC 10 NIC.FR 71 Note: There is cross servicing of TLDs counted above. Some numbers may seem low since there seems to be some b

[Way OT] Re: Geo location to IP mapping

- Original Message Follows - From: Jeff Rosowski <[EMAIL PROTECTED]> > > I just tried that, says I'm 100 miles south of where I > > really am. That's quite a long way out in a small > country like England. > > Only 100 miles? I entered the address of a box I have in > Virginia, and it

Re: [Way OT] Re: Geo location to IP mapping

On May 17, 2006, at 2:09 PM, Scott Weeks wrote: - Original Message Follows - From: Jeff Rosowski <[EMAIL PROTECTED]> I just tried that, says I'm 100 miles south of where I really am. That's quite a long way out in a small country like England. Only 100 miles? I entered the addr

Re: [Way OT] Re: Geo location to IP mapping

- Original Message Follows - From: Marshall Eubanks <[EMAIL PROTECTED]> > > One of the geolocation thingies said my addresses were > > in Amsterdam. That's only 10,000 miles from Hawaii. > > 2500 miles more and that's exactly the opposite side of > > the planet... ;-) > > Sometimes kn

Re: [Way OT] Re: Geo location to IP mapping

Marshall Eubanks wrote: On May 17, 2006, at 2:09 PM, Scott Weeks wrote: - Original Message Follows - From: Jeff Rosowski <[EMAIL PROTECTED]> I just tried that, says I'm 100 miles south of where I really am. That's quite a long way out in a small country like England. Only 100

Re: [Way OT] Re: Geo location to IP mapping

> From [EMAIL PROTECTED] Wed May 17 13:22:15 2006 > Cc: nanog@merit.edu > From: Marshall Eubanks <[EMAIL PROTECTED]> > Subject: Re: [Way OT] Re: Geo location to IP mapping > Date: Wed, 17 May 2006 14:21:02 -0400 > To: [EMAIL PROTECTED] > > > > > On May 17, 2006, at 2:09 PM, Scott Weeks wrote: >

Re: [Way OT] Re: Geo location to IP mapping

On Wed, 2006-05-17 at 08:09 -1000, Scott Weeks wrote: > - Original Message Follows - > From: Jeff Rosowski <[EMAIL PROTECTED]> > > > > I just tried that, says I'm 100 miles south of where I > > > really am. That's quite a long way out in a small > > country like England. > > > > Only 100

Re: [Way OT] Re: Geo location to IP mapping

- Original Message Follows - From: Jeroen Massar <[EMAIL PROTECTED]> > > One of the geolocation thingies said my addresses were > > in Amsterdam. That's only 10,000 miles from Hawaii. > > 2500 miles more and that's exactly the opposite side of > > the planet... ;-) > > Try http://www.

Re: How to tell if something is anycasted?

On 17-May-2006, at 14:11, Steve Gibbard wrote: Of Marty's list above, only UltraDNS and PCH are anycast (there are several other anycast networks hosting TLDs that aren't on Marty's list). NS-EXT.ISC.ORG is anycast within AS 3557 as described in ISC- TN-2004-1 (and

Re: Troubles with HE's Tunnelbroker

Should be fixed now. The tunnelbroker service uses a bunch of retired 7206 routers. One of the routers ate its config. Because of the number of tunnels it uses compressed configurations, which can get corrupted if a router runs out of memory (from leaks and memory fragmentation). Tunnel broke

Re: How to tell if something is anycasted?

On 17-May-2006, at 10:45, [EMAIL PROTECTED] wrote: well Peter, ONE root server operator has that practice. Others have different practices regarding anycast. Actually, it looks to me like all thirteen root servers answer "HOSTNAME.BIND CHAOS TXT" queries (J might check for trailing dots,

Re: How to tell if something is anycasted?

At 02:11 PM 5/17/2006, Steve Gibbard wrote: On Wed, 17 May 2006, Martin Hannigan wrote: And there are many, with many TLD's. (rough counts) provider/tld's UDNS 48 ISC 19 PCH 8 PSG 23 ICANN 4 UUNET 61 RIPE 87 DEC 10 NIC.FR 71 Note: There is cross servicing of TLDs counted above. Some numbe

Re: [Way OT] Re: Geo location to IP mapping

At 03:58 PM 5/17/2006, Scott Weeks wrote: [ SNIP ] That's not the address space I manage. It's just my ISP. From www.hostip.info I get " ... actually we haven't a clue." The IP space I manage is a /15 and is in ARIN, so it's hard to miss... scott It's not really fair to baseline the

Re: How to tell if something is anycasted?

At 11:11 AM 5/17/2006 -0700, Steve Gibbard wrote: Of Marty's list above, only UltraDNS and PCH are anycast (there are several other anycast networks hosting TLDs that aren't on Marty's list). Just for the record.   All name servers (a,b,c,d.ns.mx) of .mx are anycasted.   You can see a presentatio

FCC Issues Second Order Mandating Internet Wiretapping Standards

Pardon the interruption, but I thought this might be slightly interesting to the list. EPIC.org: [snip] The Federal Communications Commission (FCC) has released a second order reaffirming its decision to require that broadband and certain VoIP services be designed to make government wiretappi

Re: FCC Issues Second Order Mandating Internet Wiretapping Standards

Sorry, mea culpa. Below: s/EPIC/CDT/ Thanks, - ferg -- "Fergie" <[EMAIL PROTECTED]> wrote: Pardon the interruption, but I thought this might be slightly interesting to the list. EPIC.org: [snip] The Federal Communications Commission (FCC) has released a second order reaffirming its decis

Renesys dissects the Bluesecurity DDoS

http://www.renesys.com/blog/2006/05/the_bluesecurity_fiasco_dont_m.shtml -- Suresh Ramasubramanian ([EMAIL PROTECTED])

Re: Proxad? (Was: Drone Armies)

On 5/17/06, Barry Shein <[EMAIL PROTECTED]> wrote: Who owns/operates *.abo.wanadoo.fr? I've had enormous non-stop spam flooding from them for years. abo is short for abonnement .. a city or district, in french that's customer dsl space, most of it dynamic consistent rDNS pattern as you ca

Re: Proxad? (Was: Drone Armies)

On 5/18/06, Mathias Koerber <[EMAIL PROTECTED]> wrote: > abo is short for abonnement .. a city or district, in french You may be thinking of 'arrondissement', which means district. 'Abo', however seems to refer to subscribers: I knew the word, but it was always associated in their rDNS with