Re: Angled Polish Connectors and DWDM

2012-09-30 Thread Igor Ybema
Hi Aaron, > Are there situations when angled connectors are not > to be used? Are they 'safe' or even recommended for any kind of DWDM > application? To my knowledge APC is always better than PC connectors. APC are used to eliminate back reflections. Due to the angled connector reflections are se

facebook lost their A-record for www.facebook.com?

2012-03-06 Thread Igor Ybema
[igor@vds ~]$ host -t A www.facebook.com ns1.facebook.com Using domain server: Name: ns1.facebook.com Address: 204.74.66.132#53 Aliases: www.facebook.com has no A record However: [igor@vds ~]$ dig A www.facebook.com @ns1.facebook.com ; <<>> DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6_0.1 <<>> A www.fa

Re: bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
> > > one of the reasons the above was written... That does not include when ASN=0 is used in the aggregator attribute. Could you add that? regards, Igor

Re: bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
Hi all, A new update. A coder from ericsson told me that the problem is not 4-byte asn related. It is related to aggregator-asn=0 and aggregator-ip=0.0.0.0. Ericsson does not accept this as valid ASN and IP-address. The question is now, are all other vendors wrong in accepting this attribute (cle

Re: bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
> So Hostlogistic route to Level3 is malformed (according to the RFC, the > AGGREGATOR content is mandatory if the attribute is present), but their route > to NLayer is OK. Or maybe a Level3 router has a problem? > Anyway, our Redback/Ericsson routers are the problem now, since the other > vendo

Re: bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
> And what to do with 4-byte AS-numbers then? That would explain the 8 bytes. > Looking futher: Two new attributes, AS4_PATH and AS4_AGGREGATOR, are introduced that can be used to propagate four-octet based AS path information cross BGP speakers that do not support the four-octet AS numbers. How

Re: bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
> > AGGREGATOR is an optional transitive attribute of length 6. > > -- > In theory, there is no difference between theory and practice. > But, in practice, there is. Typical, because: AGGREGATOR is an optional transitive attribute of length 6. The attribute contains the last AS numbe

bgp update destroying transit on redback routers ?

2011-12-01 Thread Igor Ybema
Hi there, Since about 15:00u GMT we receive bgp updates from our transit which destroys the bgp sessions with them with message: send NOTIFICATION: 3/9 (update: optional attribute error) with 11 byte data. mxReadMs=610 We use redback smartedge routers (SE100) currently for BGP. Anyone who have s

Re: someone from verisign? website down over ipv6

2011-08-02 Thread Igor Ybema
> I've been told that this is fixed now.  Can you confirm? Correct. Site is working now over a tunneled ipv6. Great work! > Still working on the whois problem. Good luck with this. regards, Igor

Re: someone from verisign? website down over ipv6

2011-07-31 Thread Igor Ybema
Hi, extra info: Site problem looks path mtu related. On tunneled hosts the site does not work. On native hosts it does. Looks like something is blocking icmpv6 path mtu requests. My tunnels are ok, so must be in the verisign network, my guess a misconfigured firewall. Whois server problem is also

someone from verisign? website down over ipv6

2011-07-31 Thread Igor Ybema
for IPv6 dual-stack hosts. The IPv6 part of the whois server claims that he is dead and so again failover to IPv4 is not going to happen. Contact me off-list if necessary. regards, Igor Ybema

Re: Top webhosters offering v6 too?

2011-02-06 Thread Igor Ybema
Oxilion, dutch based provider (AS48539), also provides cloud services based on RHEV. They do provide IPv6 also. See for a redhat notice about this: http://www.redhat.com/about/news/prarchive/2010/oxilion.html Their site is mostly dutch, however this one is in English also http://oxilion.nl/virtual-

Re: Significant Announcement (re: IPv4) 3 February - Watch it Live!

2011-02-03 Thread Igor Ybema
> I think they were under a TCP-SYN attack :) > > The video was super choppy from here and I have bandwidth to burn at this > time of the day. A little disappointing, but I'm sure (fingers crossed) > someone will have a clean recording of it that they will make available. > > > I saw that also. Sw

Re: just seen my first IPv6 network abuse scan, is this the start for more?

2010-09-03 Thread Igor Ybema
> Sheng Jiang has discussed this issue in his draft: > http://tools.ietf.org/html/draft-jiang-v6ops-nc-protection-01 If I understand the RFC correctly it is based on an attack within the same subnet. Looks a lot like arp-flooding. However this scan was from a external host. The only traffic I saw

Re: just seen my first IPv6 network abuse scan, is this the start for more?

2010-09-03 Thread Igor Ybema
> Not necessarily so useless, as it was hitting your boxen, eh? True :) > Any noticeable effect on router CPU? Not visible in the graphs. A Foundry XMR was the router and all load on the CPU's in the router didn't change anything. regards, Igor

just seen my first IPv6 network abuse scan, is this the start for more?

2010-09-03 Thread Igor Ybema
ines. Are there more people who have seen this behaviour recently? Is this a start of hackers/spammers onto the IPv6 network? This is the first scan I have seen. I already contacted the ISP for the source address. No answer yet. If I have more news I will post them here. regards, Igor Ybema the Netherlands

Denic (.de) blocking 6to4 nameservers (since begin feb 2010)

2010-02-11 Thread Igor Ybema
asking your opinions about this policy. I find this really stupid because this completely brakes use for 6to4 in Germany and their is no good reason to block it. We know we should push our provider to support native IPv6, and we do. But this should not stop us using IPv6 6to4. regards, Igor Ybema

Re: IPv6 internet broken, cogent/telia/hurricane not peering

2009-10-12 Thread Igor Ybema
Just saw that telia <-> HE AND telia <-> Cogent got fixed. They are now connected through C&W. Maybe someone got woken up by these messages :) Cogent and HE is still broken but then again, i...@cogent is still beta. regards, Igor

IPv6 internet broken, cogent/telia/hurricane not peering

2009-10-12 Thread Igor Ybema
(due to the shortest path), cogent and telia (and maybe more) are not reachable. I already asked hurricane about their point of view. They simply just ignore it because they 'are the biggest one'. I'm currious about you point of view. regards, Igor Ybema Senior network Administrator Oxilion