Re: Cisco Security Advisory

2014-03-28 Thread Randy Bush
> But clearly, this is one of those issues where you have a > good amount of folk on either side of the fence. and the discussion is about the size of five years of cisco notices and just as hard to delete welcome to nanog randy

Re: Cisco Security Advisory

2014-03-28 Thread Larry Sheldon
On 3/29/2014 12:43 AM, Mark Tinka wrote: But clearly, this is one of those issues where you have a good amount of folk on either side of the fence. I wonder what the ratio of "I don't want that info here" (for various values of "here") to "Geez! WHY didn't somebody tell me" is. -- Requ

Re: Cisco Security Advisory

2014-03-28 Thread Mark Tinka
On Saturday, March 29, 2014 02:34:13 AM Scott Weeks wrote: > You got 5 (actually 6 this time) perhaps because you're > only on NANOG. I got over 30 this time and once when > there were 9 vulnerabilities I got almost 50 emails from > cisco. I've always known that Cisco will submit their notices to

Re: Cisco Security Advisory

2014-03-28 Thread Scott Weeks
--- rdr...@direcpath.com wrote: From: Robert Drake because seeing 5 advisories at once is like a giant line break in NANOG discussions, so it's harder to tune it out and skip the emails :) They could Bcc: all the lists they are sending to in one set of emails so the message-id is the same, t

Re: Cisco Security Advisory

2014-03-28 Thread Robert Drake
On 3/28/2014 4:11 PM, Scott Weeks wrote: If a person is on multiple of *NOG mailing lists a lot of these're received. For example, I got well over 30 of them this round. It'd be nice to get something brief like this: -- The Semiannual Cisco IOS Sof

Re: ARIN board accountability to network operators

2014-03-28 Thread Jay Moran
On Fri, Mar 28, 2014 at 6:13 PM, Randy Bush wrote: > arin forcing folk to sign > contracts with clauses saying arin can change the Ts&Cs unilaterally and > arbitrarily, ... > Exactly! -- Jay

Re: why IPv6 isn't ready for prime time

2014-03-28 Thread William Herrin
Apropos nothing, I tried to bring up IPv6 with another service provider today (this being the fourth I've attempted with only one success) but all I'm getting is: %BGP-3-NOTIFICATION: sent to neighbor ::1000:A000::6 2/7 (unsupported/disjoint capability) 0 bytes :( -Bill -- William D.

Re: ARIN board accountability to network operators

2014-03-28 Thread Randy Bush
>> Yeah, RIPE NCC is definitely much cheaper for PI: no initial >> registration fee of ≥$500. The maintenance cost is $100/year vs >> €100/year (±$137) so there is a little difference there. The $37 > €50 per PI assignment from the ripe ncc, no? > http://www.ripe.net/ripe/docs/ripe-591 guys, you a

BGP Update Report

2014-03-28 Thread cidr-report
BGP Update Report Interval: 20-Mar-14 -to- 27-Mar-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS483741011 1.4% 60.8 -- CHINA169-BACKBONE CNCGROUP China169 Backbone 2 - AS8402

The Cidr Report

2014-03-28 Thread cidr-report
This report has been generated at Fri Mar 28 21:13:59 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Barry Shein
On March 28, 2014 at 00:06 o...@delong.com (Owen DeLong) wrote: > > Advertising is a valuable commodity. Free advertising is particularly > > valuable, ROI with I close to zero. > > But it?s only free if you send it to yourself and then approve it. Any > message you send to someone else wh

Re: 3356 leaking routes out 3549 lately?

2014-03-28 Thread Jared Mauch
On Mar 28, 2014, at 3:42 PM, Chip Marshall wrote: > On 2014-03-28, David Hubbard sent: >> Has anyone had issues with Level 3 leaking advertisements out their >> Global Crossing AS3356 for customers of 3549, but not accepting the >> traffic back? We've been encountering this more and more recen

Re: arin representation

2014-03-28 Thread Jared Mauch
On Mar 25, 2014, at 12:53 PM, Bob Evans wrote: > Like every governing body, it's easy to criticize it. However, if it were > some big monopoly with giant hidden agendas accomplished behind closed > doors, I wouldn't see networks like Verizon disappointed at an ARIN > meeting as their perspective

Re: Cisco Security Advisory

2014-03-28 Thread Scott Weeks
On 3/27/2014 7:44 PM, Alexander Neilson wrote: > I wonder if they should be invited to only post a single message with > the titles and links to the alerts so that people can follow it up. -- If a person is on multiple of *NOG mailing list

Re: arin representation

2014-03-28 Thread Doug Barton
On 3/24/2014 9:03 PM, Owen DeLong wrote: [0] As a member of the nominating committee in question, I will disagree with your claim that our declining to nominate you constitutes rigging the election. While I can’t disclose the details due to NDA restrictions on the NomCom, I will say that in my ex

Re: 3356 leaking routes out 3549 lately?

2014-03-28 Thread Chip Marshall
On 2014-03-28, David Hubbard sent: > Has anyone had issues with Level 3 leaking advertisements out their > Global Crossing AS3356 for customers of 3549, but not accepting the > traffic back? We've been encountering this more and more recently, > bgpmon always detects it, and all we ever get from

Re: Access Lists for Subscriber facing ports?

2014-03-28 Thread Blake Hudson
Shawn L wrote the following on 3/27/2014 7:44 AM: With all of the new worms / denial of service / exploits, etc. that are coming out, I'm wondering what others are using for access-lists on residential subscriber-facing ports. We've always taken the stance of 'allow unless there is a compelling

2nd. Call for Papers and Participation - I Workshop pre-IETF (Side Event to CSBC 2014)

2014-03-28 Thread Juliao Braga

Weekly Routing Table Report

2014-03-28 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.ap

Re: ARIN board accountability to network operators

2014-03-28 Thread Sander Steffann
Oops. /me was confused. €50 indeed! Met vriendelijke groet, Sander Steffann > Op 28 mrt. 2014 om 15:20 heeft Nick Hilliard het volgende > geschreven: > >> On 28/03/2014 14:03, Sander Steffann wrote: >> Yeah, RIPE NCC is definitely much cheaper for PI: no initial >> registration fee of ≥$500. T

Re: WISP or other options

2014-03-28 Thread Nick
Thanks for all the ideas. Right now, Im talking with Maxwifi. Go the route of letting them deal with everything. Im still exploring other cheaper options: A) 3G/4G wireless service. A Orange rep is building a data plan to support 160 devices and to find out data usage in the area and availa

Re: anti-spam WKBIs, was why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread John Levine
>You say this like having a tax on running a botted computer on the internet >would be a bad thing. > >I agree that it would provide a bit of profit to the spammers for a very short >period of time, but I bet it would get >a lot of bots fixed pretty quick. What would actually happen is that the

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-28 Thread Lee Howard
On 3/27/14 6:42 PM, "Randy Bush" wrote: >nanog is a separable game. it is currently very confused between form >and substance, making committees for everything. like the bcop thing. >two organizations, nanog and isoc, forming organizational structures to >create a document store. the ops' do

Re: Why IPv6 isn't ready for prime time : -)

2014-03-28 Thread John Levine
>Indeed. Having been deeply involved leading the technical side of our >transition at my organiati Yeah, IPv6 can be like that. Helpfully, John

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Owen DeLong
On Mar 28, 2014, at 6:30 AM, Brandon Ross wrote: > On Fri, 28 Mar 2014, Owen DeLong wrote: > >> This assumes a different economic model of SPAM that I have been lead to >> believe exists. >> >> My understanding is that the people sending the SPAM get paid immediately >> and that the people p

3356 leaking routes out 3549 lately?

2014-03-28 Thread David Hubbard
Has anyone had issues with Level 3 leaking advertisements out their Global Crossing AS3356 for customers of 3549, but not accepting the traffic back? We've been encountering this more and more recently, bgpmon always detects it, and all we ever get from them is there's nothing wrong. Today it aff

Re: ARIN board accountability to network operators

2014-03-28 Thread Nick Hilliard
On 28/03/2014 14:03, Sander Steffann wrote: > Yeah, RIPE NCC is definitely much cheaper for PI: no initial > registration fee of ≥$500. The maintenance cost is $100/year vs > €100/year (±$137) so there is a little difference there. The $37 €50 per PI assignment from the ripe ncc, no? http://www.r

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-28 Thread Sander Steffann
Hi Owen, > Compare and contrast the costs of being a PI holding end-user in the RIPE > region to those in the ARIN region and the difference becomes much more > noticeable. Yeah, RIPE NCC is definitely much cheaper for PI: no initial registration fee of ≥$500. The maintenance cost is $100/year

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Valdis . Kletnieks
On Fri, 28 Mar 2014 06:22:32 -0700, Owen DeLong said: > This assumes a different economic model of SPAM that I have been lead to > believe exists. > My understanding is that the people sending the SPAM get paid immediately and > that the people paying them to send it are the ones hoping that the

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-28 Thread Owen DeLong
On Mar 28, 2014, at 5:58 AM, Sander Steffann wrote: > Hi Owen, > >> I, for one, would not want to start having to pay RIPE-level fees. >> >> ARIN fees are a much better deal than RIPE fees. > > Only up to Small... The RIPE NCC membership fee is €1750 (±$2400 currently) > for everybody. The A

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Brandon Ross
On Fri, 28 Mar 2014, Owen DeLong wrote: This assumes a different economic model of SPAM that I have been lead to believe exists. My understanding is that the people sending the SPAM get paid immediately and that the people paying them to send it are the ones hoping that the advertising/phish

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Owen DeLong
On Mar 28, 2014, at 5:27 AM, Brandon Ross wrote: > On Thu, 27 Mar 2014, Owen DeLong wrote: > >> On Mar 27, 2014, at 1:38 PM, Brandon Ross wrote: >> >>> On Thu, 27 Mar 2014, Owen DeLong wrote: >>> On Mar 27, 2014, at 11:15 AM, Barry Shein wrote: Please explain in detail where

Re: Why IPv6 isn't ready for prime time :-)

2014-03-28 Thread Timothy Morizot
Hmmm. Phone accidentally sent email before it was finished. Indeed. Having been deeply involved leading the technical side of our transition at my organization for the past three years, I think those who wait until the IPv6/IPv4 divide is roughly 50/50 or later are going to be in for a world of hu

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-28 Thread Sander Steffann
Hi Owen, > I, for one, would not want to start having to pay RIPE-level fees. > > ARIN fees are a much better deal than RIPE fees. Only up to Small... The RIPE NCC membership fee is €1750 (±$2400 currently) for everybody. The ARIN fees are between $500 and $32000, with category Small at $2000

Re: IPv6 isn't SMTP

2014-03-28 Thread Blake Hudson
Clay Fiske wrote the following on 3/27/2014 7:54 PM: On Mar 27, 2014, at 12:16 PM, Blake Hudson wrote: It's entirely likely that a spammer would try to get a hold of a key due to its value or that someone you've done business with would share keys with a "business" partner . But ideally you

Re: IPv6 isn't SMTP

2014-03-28 Thread Blake Hudson
Barry Shein wrote the following on 3/27/2014 6:32 PM: On March 27, 2014 at 14:16 bl...@ispn.net (Blake Hudson) wrote: > > Barry Shein wrote the following on 3/27/2014 2:06 PM: > > > > > > I suppose the obvious question is: What's to stop a spammer from > > putting a totally legitimat

Re: Why IPv6 isn't ready for prime time :-)

2014-03-28 Thread Timothy Morizot
On Mar 27, 2014 8:01 PM, "Tim Durack" wrote: > > NANOG arguments on IPv6 SMTP spam filtering. > > Deutsche Telecom discusses IPv4->IPv6 migration: > > https://ripe67.ripe.net/presentations/131-ripe2-2.pdf > > Facebook goes public with their IPv4->IPv6 migration: > > http://www.internetsociety.org/

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Brandon Ross
On Thu, 27 Mar 2014, Owen DeLong wrote: On Mar 27, 2014, at 1:38 PM, Brandon Ross wrote: On Thu, 27 Mar 2014, Owen DeLong wrote: On Mar 27, 2014, at 11:15 AM, Barry Shein wrote: Please explain in detail where the fraud potential comes in. Spammer uses his botnet of zombie machines to se

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-28 Thread Daniel Karrenberg
> On 27.03.2014, at 22:27, Randy Bush wrote: > > ...and this is aside from daniel's global measurement empire. not sure it > is a registry's job to do this, but it is a serious contribution to the > internet. ... there is the 'measurement analysis and tools' working group http://www.ripe.

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-28 Thread Owen DeLong
On Mar 27, 2014, at 10:31 PM, Barry Shein wrote: > > On March 27, 2014 at 12:14 o...@delong.com (Owen DeLong) wrote: >> >> On Mar 27, 2014, at 11:15 AM, Barry Shein wrote: >> >>> >>> On March 26, 2014 at 22:25 o...@delong.com (Owen DeLong) wrote: Actually, a variant on that that