RE: DMARC ViolationAS21299 - 46.42.196.0/24 ASN prepending 255 times

2022-03-29 Thread Adam Thompson
I partially agree with you, but… 10 is way too aggressive. I’m already seeing a “true” internet diameter of up to 13 AS hops today. Here’s the data I’m using to form that opinion. [ NOTE: my tooling didn’t handle BGP confederations in the RIB dump properly. It’s sufficiently rare (only 1009

Re: Let's Focus on Moving Forward Re: V6 still not supported

2022-03-29 Thread Masataka Ohta
Owen DeLong wrote: As I repeatedly pointed out, end to end NAT is clean preserving the universal peer to peer nature of the Internet. Nope… It really isn’t. Wrong. The problem of audit trail opacity is still a major issue with any form of stateful NAT. How poorly you understand NAT. As

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Randy Bush
> he said I needed to disable PoE because it messes with the Comcast > modems and he can see "buildups" in his graphs that show power is > "leaking" to the Comcast modem every 24 hours. revealing the critical failure with comcast support; they do not share what they are smoking randy --- ra...@p

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Sabri Berisha
- On Mar 29, 2022, at 2:46 PM, Joe Greco jgr...@ns.sol.net wrote: Hi, > So if you want the $100 test to eliminate PoE electrical effects, get > a pair of media converters and run fiber between them. Put the CPE on > the far end. Optimize as appropriate if you have SFP-capable switches. But

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Blake Hudson
Generally anything inside the customer premise (including wiring) is the customer’s responsibility. If your coax runs across a fluorescent light fixture, that’s on you. If your coax is RG59, it’s on you to replace with RG6 quad shield. Maybe the cable operator will work with you, maybe not. I’

Internet Storm Center says Russia hijacking Twitter's BGP

2022-03-29 Thread Jay R. Ashworth
https://isc.sans.edu/diary/rss/28488 -- Jay R. Ashworth Baylink j...@baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL US

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Aaron de Bruyn via NANOG
Thanks Blake, As I understand it all that stuff is on the "cable provider" side of the CPE and (within reason) it's up to the provider to deal with the signals arriving on the cable side of the modem. i.e. if it was a blower or something in our suite that was causing RF interference, the provider

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Blake Hudson
On 3/29/2022 3:24 PM, Joe Greco wrote: He's got graphs showing it every 24 hours? Liar, liar, pants on fire, lazy SOB is looking for an excuse to clear you off the line. Where the heck does this "24 hour" cycle even come from? What SNMP OID is there for "ghostly PoE build-up"? What crontab

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Brie
On 3/29/22 2:24 PM, Aaron C. de Bruyn wrote: On Tue, Mar 29, 2022 at 12:20 PM Brie > wrote: Unifi/EdgeSwitch? Yeah.  Unfortunately.  USW-24-250. Oh, I have quite a few of them in service. They work great in my experience as long as you don't shove them in hot c

Re: Let's Focus on Moving Forward Re: V6 still not supported

2022-03-29 Thread Owen DeLong via NANOG
> On Mar 26, 2022, at 17:30 , Masataka Ohta > wrote: > > Owen DeLong via NANOG wrote: > >> It still looks like NAT to me. > > Almost all the people, perhaps other than you, accept NAT > as is to keep IPv4 Internet or as part of transition > plan from IPv4 to IPv6. > >> NAT is a disgusting

Re: IPv6 Only - was Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-29 Thread jim deleskie
If then industry still hasn't adopted v6 full in 25 years maybe it's v6 that should be given up it, that it clearly wasn't what customers wanted. Perhaps we should should have a small group working on the next iteration. -jim On Tue, Mar 29, 2022, 5:54 PM Jacques Latour wrote: > So, in 25, 50 o

IPv6 Only - was Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-29 Thread Jacques Latour
So, in 25, 50 or 100 years from now, are we still going to be dual stack IPv4/IPv6? When are we going to give up on IPv4? People can run IPv4 all they want inside their networks for 1000s of years. What will it take to be IPv6 only? 😊 From: NANOG On Behalf Of Owen DeLong via NANOG Sent: March

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Matt Ertle
> On Mar 29, 2022, at 5:46 PM, Joe Greco wrote: > > So if you want the $100 test to eliminate PoE electrical effects, get > a pair of media converters and run fiber between them. Put the CPE on > the far end. Optimize as appropriate if you have SFP-capable switches. > > ... JG > — Bingo ^^^

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Niels Bakker
On Tue, Mar 29, 2022 at 11:21:28AM -0700, Aaron de Bruyn via NANOG wrote: When I said "yes", he said I needed to disable PoE because it messes with the Comcast modems and he can see "buildups" in his graphs that show power is "leaking" to the Comcast modem every 24 hours. This guy must have a

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Kord Martin
On 2022-03-29 5:46 p.m., Joe Greco wrote: On Tue, Mar 29, 2022 at 03:42:54PM -0400, Josh Luthman wrote: There's a certain manufacturer of TDD radio where the CPU clock is at the same frequency as what Verizon's enodeB will transmit. Even at miles away, it can and will cause PIM issues. Again,

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Aaron C. de Bruyn via NANOG
On Tue, Mar 29, 2022 at 1:12 PM Joe Greco wrote: > So if you want the $100 test to eliminate PoE electrical effects, get > a pair of media converters and run fiber between them. Put the CPE on > the far end. Optimize as appropriate if you have SFP-capable switches. Sure--that would shoot down

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Jay Hennigan
On 3/29/22 11:21, Aaron de Bruyn via NANOG wrote: I just got off the phone with a Comcast tech, and wanted to double-check my sanity. Somehow in the last 6 months I've managed to reach the exact same rep twice when dealing with an outage or a degraded service event. I asked him to remotely r

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Aaron C. de Bruyn via NANOG
On Tue, Mar 29, 2022 at 12:20 PM Brie wrote: > Unifi/EdgeSwitch? > Yeah. Unfortunately. USW-24-250. > Yeah, you know when 24v passive POE is turned on because it kills the > port on the other end that aren't designed to handle it. Your router > would likely have a dead eth port on it. > I'

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Aaron de Bruyn via NANOG
Just to be clear Josh, I'm not insulting him. I find the situation extremely difficult to believe based on my (possibly incorrect) understanding of how PoE works and very (very!) basic knowledge of things like RF interference—especially when it comes to Cable networks. I mean, the call literally

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Joe Greco
On Tue, Mar 29, 2022 at 03:42:54PM -0400, Josh Luthman wrote: > There's a certain manufacturer of TDD radio where the CPU clock is at the > same frequency as what Verizon's enodeB will transmit. Even at miles away, > it can and will cause PIM issues. Again, don't rule it out. I'm not ruling anyt

Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-29 Thread Owen DeLong via NANOG
Submit an Internet draft, same as any other IP related enhancement gets introduced. What you’re really complaining about is that it’s been virtually impossible to gain consensus to move anything IPv4 related forward in the IETF since at least 2015. Well… It’s a consensus process. If your idea

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Josh Luthman
There's a certain manufacturer of TDD radio where the CPU clock is at the same frequency as what Verizon's enodeB will transmit. Even at miles away, it can and will cause PIM issues. Again, don't rule it out. Maybe he's just looking for a simple answer that 99% of callers will accept and it make

Re: SentryPeer: A distributed peer to peer list of bad IP addresses and phone numbers collected via a SIP Honeypot

2022-03-29 Thread Gavin Henry
Hi all, Come a long way since Nov: https://github.com/SentryPeer/SentryPeer/releases/tag/v1.4.0 Peer to peer bad_actor replication is now released. Deutsche Telekom "T-Pot - The All In One Honeypot Platform" included SentryPeer (https://github.com/telekom-security/tpotce/tree/22.x) and Kali Linu

Re: Let's Focus on Moving Forward Re: V6 still not supported Re: 20220326125.AYC

2022-03-29 Thread Owen DeLong via NANOG
Just because there is a small code snippet you found that prevents casting 240/4 as unicast on an interface doesn’t mean that removing that code will magically make 240/4 usable in the entire stack. It’s also important to note that there are at least a dozen IPv4 stacks in common use with diffe

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Joe Greco
On Tue, Mar 29, 2022 at 03:07:47PM -0400, Josh Luthman wrote: > We've routinely seen where lines not even connected to the same circuit in > any way (ie an OTA antenna coax line and cat5 POE) cause issues with one > another. As much as we would all love to have a perfect line in the sand, > there

Re: Let's Focus on Moving Forward Re: V6 still not supported

2022-03-29 Thread Owen DeLong via NANOG
> On Mar 26, 2022, at 09:37 , Tom Beecher wrote: > > Have you ever considered that this may be in fact: > > */writing/* and */deploying/* the code that will allow the use of 240/4 the > way you expect > > While Mr. Chen may have considered that, he has repeatedly hand waved that > it's 'not

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Brie
On 3/29/22 12:21 PM, Aaron de Bruyn via NANOG wrote: Both times I've talked with him, he noted the high packet loss, started to reboot the modem, and then asked me point-blank if we had any PoE switches on our network. This sounds like a guy who has created his own script for 'improving' hi

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Josh Luthman
We've routinely seen where lines not even connected to the same circuit in any way (ie an OTA antenna coax line and cat5 POE) cause issues with one another. As much as we would all love to have a perfect line in the sand, there isn't. Don't rule anything out until the issue is resolved. As someo

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Joe Greco
On Tue, Mar 29, 2022 at 11:21:28AM -0700, Aaron de Bruyn via NANOG wrote: > I just got off the phone with a Comcast tech, and wanted to double-check my > sanity. > > Somehow in the last 6 months I've managed to reach the exact same rep twice > when dealing with an outage or a degraded service even

PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Aaron de Bruyn via NANOG
I just got off the phone with a Comcast tech, and wanted to double-check my sanity. Somehow in the last 6 months I've managed to reach the exact same rep twice when dealing with an outage or a degraded service event. I asked him to remotely reboot the modem because there was high packet loss. Bo

Budget news: Proposed Puerto Rico FEMA distribution center (warehouse)

2022-03-29 Thread Sean Donelan
Program Change 1 – Caribbean Area Office and Warehouse Support: Description The FY 2023 Budget includes an increase of $1.4M for the staffing and operational costs of the Puerto Rico Distribution Centers (DC). Staff will manage readiness, disaster response operations and the distribution of com

Re: Let's Focus on Moving Forward Re: V6 still not supported

2022-03-29 Thread Tom Beecher
> > A traceroute from my machine to 240.1.2.3 goes through six routers at my > ISP before stopping (probably at the first default-route-free router). > My experience is the opposite. My home edge router (dd-wrt) will pass it, but nothing in my ISP's network will. $DayJob networks aren't worth chec

RE: IPv6 "bloat" history

2022-03-29 Thread Pascal Thubert (pthubert) via NANOG
Hello Ohta-san > An ARP table entry can be created when an IP address is assigned during > registration process and destroyed if the registration is invalidated. > > Or, do I misunderstand anything? You're perfectly correct. This is exactly what the registration would be for. I'm concerned abou

Re: IPv6 "bloat" history

2022-03-29 Thread Masataka Ohta
Pascal Thubert (pthubert) wrote: I tried exactly what you suggested for IPv6 with RFC 8505 and 8929. But to few people in mainstream networks realize what you just said. I found, theoretically by reading 802.11 specification, broadcast/multicast reliability problem and reported to IPv6 WG abou