Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Mehmet Akcin
Yeah, I was just suggesting alternatives just incase. I have setup ICANN's axfr servers :) mehmet On May 20, 2014, at 10:50 PM, Doug Barton wrote: > The last time I asked them, F-root had a "we allow it because it's the right > thing to do but we don't like it" policy. Given that ICANN operat

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Doug Barton
The last time I asked them, F-root had a "we allow it because it's the right thing to do but we don't like it" policy. Given that ICANN operates an infrastructure purposely built for doing zone transfers, and given that they offer more zones than are on the roots, that's the way I recommend peo

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Mehmet Akcin
F-root also allows you to axfr root-zone ( dig @f.root-servers.net . axfr ) On May 20, 2014, at 10:32 PM, Doug Barton wrote: > Signed PGP part > On 05/20/2014 02:21 PM, Brandon Applegate wrote: > | Is anyone using this and having failed login for a few days now ? > I?ve been mirroring the root

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/20/2014 02:21 PM, Brandon Applegate wrote: | Is anyone using this and having failed login for a few days now ? I?ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread John Levine
In article <537c1f17.6070...@digital-z.com> you write: >On 5/20/14, 4:21 PM, Brandon Applegate wrote: >> Is anyone using this and having failed login for a few days now ? I�ve been >> mirroring the root >zone(s) for years and I just started getting failures in my logs. I emailed >an address I f

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Blaine Fleming
On 5/20/14, 4:21 PM, Brandon Applegate wrote: > Is anyone using this and having failed login for a few days now ? I’ve been > mirroring the root zone(s) for years and I just started getting failures in > my logs. I emailed an address I found on the Verisign website but so far > dead air. If a

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread jamie rishaw
Some output deleted to save spamminess: }~/ ftp rz.verisign-grs.net Connected to rz.verisign-grs.net. 220- Welcome to the VeriSign Global Registry Services gTLD Zone FTP Server Name (rz.verisign-grs.net:jamie): [myusername] 331 Please specify the password. Password: 230 Login successful.

Re: NAT IP and Google

2014-05-20 Thread Mark Andrews
Deploy IPv6. This is the solution to this problem. Google supports IPv6 on all their services AFAIK. Mark In message <537b64f7.5020...@edylie.net>, Pui Edylie writes: > Hi Everyone, > > May I know what is the best approach so that Google would not ban our > Natted IP from time to time as it

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread John Levine
In article <904ce971-b779-4c9e-af8d-8dafcce01...@burn.net> you write: >-=-=-=-=-=- > >Is anyone using this and having failed login for a few days now ? I�ve been >mirroring the root >zone(s) for years and I just started getting failures in my logs. I emailed >an address I found on >the Verisign

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Brandon Applegate
On May 20, 2014, at 5:32 PM, jamie <260...@gmail.com> wrote: > I have access; my last success was today at 12:27am est > > Wait; Do you have a userid or are you trying to log in anonymous? I'm pretty > sure this is a closed system.. > I have a username/pass. Got it by signing the agreement y

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread jamie
I have access; my last success was today at 12:27am est Wait; Do you have a userid or are you trying to log in anonymous? I'm pretty sure this is a closed system.. On Tue, May 20, 2014 at 4:21 PM, Brandon Applegate wrote: > Is anyone using this and having failed login for a few days now ? I’

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Nick Hilliard
On 20/05/2014 22:21, Brandon Applegate wrote: > Is anyone using this and having failed login for a few days now ? I’ve > been mirroring the root zone(s) for years and I just started getting > failures in my logs. ftp://rs.internic.net/domain/root.zone Nick

rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Brandon Applegate
Is anyone using this and having failed login for a few days now ? I’ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the Verisign website but so far dead air. If anyone knows of a more pointed email POC that would act

RE: NAT IP and Google

2014-05-20 Thread Tony Wicks
>Some of the networks I work with do the "everything behind NAT" thing and get bitten by this. Using a pool of addresses helps but... This is only going to get more painful with more people doing >"Carrier Grade" >NAT... I Run CGN with tens of thousands of broadband users being translated behind

Re: NAT IP and Google

2014-05-20 Thread William Waites
On Tue, May 20, 2014 at 10:35:56AM -0400, Harald Koch wrote: > > Might help if all your hosts have their own IPv6 addresses That was meant to be implied... But... On Tue, May 20, 2014 at 09:10:56AM -0600, Derek Andrew wrote: > They take out our campus, both IPv4 and IPv6. That's interesting, I

Re: All of .mil tld is down

2014-05-20 Thread Stephane Bortzmeyer
On Tue, May 20, 2014 at 02:35:49PM -0400, Brian Henson wrote a message of 107 lines which said: > Looks like it has been corrected now Not from everywhere. From two different networks in France, I get: % check-soa -i nipr.mil CON1.nipr.mil. 199.252.157.234: ERROR: Timeout CON2.nipr.

Re: All of .mil tld is down

2014-05-20 Thread Brian Henson
Looks like it has been corrected now On Tue, May 20, 2014 at 12:30 AM, Anurag Bhatia wrote: > Hi Clark > > > It's down when looked upon from our DNS recursors in India as well. > > > I have seen in past with many domains (not TLDs though) that when they are > down due to non-reachability of aut

Re: NAT IP and Google

2014-05-20 Thread Kevin Kadow
If at all possible, consider using a NAT pool instead of translating all outbound web traffic to a single IP address. When I ran Tribune's network (with about 15K internal client IPs), we were blacklisted by Google several times due to high query volumes. In the end I built a pair of /24 NAT poo

Re: NAT IP and Google

2014-05-20 Thread Chris Garrett
Their determination is based on the type of search traffic more than the volume. I had some success using squid to proxy through to them and reduce the overall number of complex queries. On May 20, 2014, at 10:10 AM, Derek Andrew wrote: > They take out our campus, both IPv4 and IPv6. > > Al

Re: NAT IP and Google

2014-05-20 Thread Derek Andrew
They take out our campus, both IPv4 and IPv6. All hailing attempts fail. Good luck. On Tue, May 20, 2014 at 8:21 AM, Pui Edylie wrote: > Hi Everyone, > > May I know what is the best approach so that Google would not ban our > Natted IP from time to time as it suspect it as a bot. > > Is the

Re: NAT IP and Google

2014-05-20 Thread Harald Koch
On 20 May 2014 10:27, William Waites wrote: > IPv6? > Might help if all your hosts have their own IPv6 addresses - doesn't help if you run an http proxy. Google blacklists my (personal) IPv6 proxy at least once a month. -- Harald

Re: NAT IP and Google

2014-05-20 Thread William Waites
On Tue, May 20, 2014 at 10:21:43PM +0800, Pui Edylie wrote: > > May I know what is the best approach so that Google would not ban our > Natted IP from time to time as it suspect it as a bot. IPv6?

NAT IP and Google

2014-05-20 Thread Pui Edylie
Hi Everyone, May I know what is the best approach so that Google would not ban our Natted IP from time to time as it suspect it as a bot. Is there any official channel from Google which we could work with them for resolution? Thanks much! Best, Edy

LACNIC becomes the first RIR to go below /9 of available IP space

2014-05-20 Thread Rubens Kuhl
http://www.lacnic.net/en/web/lacnic/inicio Website is still showing phase 0 of address depletion, but the updated quantity means that the /9 trigger has been reached. Rubens