Re: Hurricane Electric now supports ASPA for route filtering

2024-09-22 Thread Jeroen Massar via NANOG
> On 22 Sep 2024, at 23:14, Christopher Morrow wrote: > > On Sat, Sep 14, 2024 at 4:18 PM Lancheng via NANOG wrote: >> >> Hi Mike, >> >>> Hurricane Electric now uses ASPA to do hop by hop checking of AS paths >>> when deciding which routes to accept when building prefix filters. >> >>> Her

Out-of-Bailiwick DNS? (Was: HE.net problem)

2024-07-05 Thread Jeroen Massar via NANOG
> On 4 Jul 2024, at 23:22, Paul Ebersman wrote: > > cjc> On the other side of this, we all may be learning the value of not > cjc> having all of you NS records in a single zone with a domain under a > cjc> single registrar. > > From some trainings I did on how to be sure your DNS was robust:

Re: Correcting Netflix ipv6 geolocation

2023-10-19 Thread Jeroen Massar via NANOG
> On 19 Oct 2023, at 02:09, Justin Kilpatrick wrote: > > Our ipv6 subnet 2602::FBAD::/40 is You likely mean 2602:FBAD::/40, as the one above is not a valid IPv6 address ;) BGP wise it seems only 2602:fbad:8::/45 and 2602:fbad:10::/45 are announced as per https://bgp.tools/as/400429#prefixe

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Jeroen Massar via NANOG
> On 16 May 2023, at 06:46, Matthew Petach wrote: > [..] > I admit, I'm perhaps a little behind on the latest netflow whiz-bangs, > but I've never seen a netflow record type that included HTTP cookies > or PCAP data before. Take your pick from the "latest" ~2009 IPFIX Information Elements:

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
> On 3 Apr 2022, at 00:29, Michael Thomas wrote: > > > On 4/2/22 3:23 PM, Jeroen Massar via NANOG wrote: >> Hi Dan, >> >> Hope the rest of the world is treating you decently! >> >> There are a lot of bits and bobs that one has to get right for mai

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
Hi Dan, Hope the rest of the world is treating you decently! There are a lot of bits and bobs that one has to get right for mail to flow, amongst which: - IP -> PTR lookup -> that hostname lookup, and match to IP again (https://en.wikipedia.org/wiki/Forward-confirmed_reverse_DNS) - SPF -

Re: ASN in use, but no whois data?

2022-02-25 Thread Jeroen Massar via NANOG
> On 20220225, at 23:45, Matt Harris wrote: > > Hey folks, > I'm looking at an ASN 394183 and I can't find any whois or other contact data. First stop for info: bgp.tools! https://bgp.tools/as/394183#whois But yes, as others commented, looks like a ARIN-expired ASN... as long as one pay th

Re: FORT monitoring/visibility

2021-10-27 Thread Jeroen Massar via NANOG
> On 20211027, at 09:26, Lukas Tribus wrote: > > On Wed, 27 Oct 2021 at 08:47, Mark Tinka wrote: >> >> On 10/27/21 01:58, Randy Bush wrote: >>> my old DRL RP instances produce MRTG graphs etc of the CA >>> fetching side, though nothing on the rpki-rtr side. >> >> Randy, I actually have an on

Re: Geolocation accuracy

2021-10-19 Thread Jeroen Massar via NANOG
On 2021-10-19 13:39, Hank Nussbacher wrote: Can anyone recommend a geo-location service with high city accuracy? Maxmind, for most countries (broadband, which does move) is below 50% accuracy (they claim 68% accuracy for USA cities): https://www.maxmind.com/en/geoip2-city-accuracy-comparison?cou

Re: Admin for .tk (not a spam/abuse complaint!)

2021-09-29 Thread Jeroen Massar via NANOG
On 2021-09-29 01:03, Tim Harman via NANOG wrote: [..] {11:58}~ ➭ dig @194.0.41.1 test.tk ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> @194.0.41.1 test.tk ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached A traceroute with a source IP would be sooo

Re: IPv6 woes - RFC

2021-09-16 Thread Jeroen Massar via NANOG
> On 20210916, at 11:15, John Curran wrote: > > On 14 Sep 2021, at 3:46 AM, Eliot Lear wrote: >> …. >> There is no evidence that any other design choices on the table at the time >> would have gotten us transitioned any faster, and a lot of evidence and >> analysis that the exact opposite i

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
On 2021-09-10 18:27, Owen DeLong wrote: On Sep 10, 2021, at 01:39 , Jeroen Massar wrote: On 20210909, at 21:55, Owen DeLong via NANOG wrote: [..] Awful lot of red spots even in the top 100. Hell, even amazon.com isn't IPv6 yet. And the long tail is going to be the death of a tho

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
> On 20210909, at 21:55, Owen DeLong via NANOG wrote: >> [..] >> Awful lot of red spots even in the top 100. Hell, even amazon.com >> isn't IPv6 yet. And the long tail is going to be the death of a thousand >> cuts for the call center unless you have a way to deal with those sites. > > This

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
On 2021-09-04 23:02, Ryan Hamel wrote: Jeroen, > You people keep on giving money to ISPs that are not providing the service you want. Not everyone has the luxury of picking their ISP, But this list is NANOG Network Operators. We are the ISPs and the common consumer doesn't know o

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
> On 20210904, at 22:26, Grant Taylor via NANOG wrote: > > Hi, > > Does anyone have any recommendation for a viable IPv6 tunnel broker / > provider in the U.S.A. /other/ /than/ Hurricane Electric? SixXS shut down 4 years ago, to get ISPs to move their butts... as long as there are tunnels,

Re: The great Netflix vpn debacle! (geofeeds)

2021-08-31 Thread Jeroen Massar via NANOG
On 2021-09-01 01:13, Owen DeLong via NANOG wrote: You just broke 99% of the smart television sets in people’s homes, unfortunately. If only everybody would not get a separate box, be that a AppleTV, a Playstation, a XBox, Chromecast, ... or many other options. Fun part being that it is hard

Re: What is your preferred outage tracking service? (Hurricane Ida)

2021-08-29 Thread Jeroen Massar via NANOG
On 2021-08-29 23:29, Sean Donelan wrote: Netblocks is reporting connectivity in New Orleans LA is at 72% of normal as Hurricane Ida makes landfall. https://twitter.com/netblocks/status/1432038858460442625 There are per-incident things, like the outages mailing list and downdetector.com.  And

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
[ The kicker about DNSSEC is in the dnsviz links, enjoy ;) TLDR: As long as the very big providers don't demand DNSSEC / DANE, why bother as a small network (just, be prepared to deploy when it starts affecting spam scoring or your search rankings), but small networks do benefit unlike the la

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
On 2021-06-02 15:47, Bjørn Mork wrote: Jeroen Massar via NANOG writes: For many organisations DNSSEC is 'scary' and a burden as it feels 'fragile' for them. For "many"? Can you name one that doesn't feel like that? Large organisations with 24/7 NOC te

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
> On 20210601, at 15:15, Moritz Müller via NANOG wrote: > > Hi, > > DANE for SMTP is not deployed on large scale. Together with researchers from > Seoul National University, Virginia Tech and the University of Twente, we > would like to understand which challenges operators face when deploy

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 23:03, Damian Menscher wrote: > On Tue, Oct 1, 2019 at 1:22 PM Jeroen Massar <mailto:jer...@massar.ch>> wrote: > > On 2019-10-01 21:38, Damian Menscher wrote: > > > Could someone provide a reference of Google saying they'll change the >

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 21:38, Damian Menscher wrote: > Could someone provide a reference of Google saying they'll change the default > nameserver?  Without that, I think all of Jeroen's arguments fall apart? While I stated: >> Moving only your DNS to Cloudflare or Google does not solve the security >>

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 15:22, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 12:11:32PM +0200, > Jeroen Massar wrote > a message of 101 lines which said: > >> - Using a centralized/forced-upon DNS service (be that over DoT/DoH >> or even plain old Do53 > > Yes,

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
controlling the browser bad for the Internet. - Use a VPN if you do not trust your network provider. - Use Tor if you really want 'privacy'. On 2019-10-01 11:57, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 10:35:31AM +0200, > Jeroen Massar wrote > a message of

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 10:08, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 09:55:54AM +0200, > Jeroen Massar wrote > a message of 26 lines which said: > >>> (Because this canary domain contradicts DoH's goals, by allowing >>> the very party you don&#

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 09:38, Stephane Bortzmeyer wrote: > On Mon, Sep 30, 2019 at 11:56:33PM -0400, > Brandon Martin wrote > a message of 10 lines which said: > >> It's use-application-dns.net. NXDOMAIN it, and Mozilla (at least) >> will go back to using your local DNS server list as per usual. > >

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
On 2019-09-18 12:24, Brian J. Murrell wrote: > On Wed, 2019-09-18 at 09:15 +0200, Jeroen Massar wrote: >> Hi Folks, > > Hi. > >> While in the US soon all Firefox users will *NOT* use your DNS >> Recursives configured using DHCP anymore >> (NXDOMAIN use

DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
Hi Folks, While in the US soon all Firefox users will *NOT* use your DNS Recursives configured using DHCP anymore (NXDOMAIN use-application-dns.net to avoid that[1]). Next to that, it seems some of the root operators are now creating instances in the same networks that offer these kind of servic

Re: any interesting/useful resources available to IPv6 only?

2019-05-07 Thread Jeroen Massar
On 2019-05-07 15:55, William Waites wrote: > On 05/03, Jeroen Massar wrote: >> >> IPv6 is not a darknet, you won't find something hidden and unique there. > > The Dancing Kame, surely. That Kame has been liberated and made available over IPv4 so long ago that the

Re: any interesting/useful resources available to IPv6 only?

2019-05-03 Thread Jeroen Massar
On 2019-05-03 17:14, Brian J. Murrell wrote: > Hi, > > I am trying to make a case (to old fuddy-duddies, which is why I even > need to actually make a case) for IPv6 for my own selfish reasons. :-) > > I wonder if anyone has any references to interesting/useful/otherwise > resources on are only

Re: AS112 contact

2019-03-26 Thread Jeroen Massar
On 2019-03-26 08:56, Elmar K. Bins wrote: > Hi guys, > > I hope this is only slightly off-topic... > > I'm looking for the correct address for AS112, 1...@root-servers.org > keeps bouncing whatever I try. > > If anybody can drop me a line...much appreciated. You can subscribe/post to: https://

Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms

2019-03-08 Thread Jeroen Massar
On 2019-03-08 14:45, Brandon Martin wrote: > On 3/8/19 8:38 AM, Saku Ytti wrote: >> Hey, >> >>> now for UDP, I don't know yet how does things like QUIC can be handled >>> ... >> >> Unfortunately the magic answer you were hoping does not exist, what >> they do is they just send smaller packets

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 20:13, Mark Tinka wrote: > > > On 3/Mar/19 18:05, Jeroen Massar wrote: > >> IPv6 requires a minimum MTU of 1280. >> >> If you cannot transport it, then the transport (the tunnel in this case) >> needs to handle the fragmentation of packets of 1

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 11:31, Mark Tinka wrote: [..] > Across the 6-in-4 tunnel, the tested MTU is 1,232 for IPv6. IPv6 requires a minimum MTU of 1280. If you cannot transport it, then the transport (the tunnel in this case) needs to handle the fragmentation of packets of 1280 down to whatever does fit i

Re: Fixing Google geolocation screwups

2015-04-08 Thread Jeroen Massar
On 2015-04-08 13:31, Max Tulyev wrote: > We operate IPv6 tunnel broker tb.netassist.ua, so /48 from our /32 is > spread all around the world. > Google change geo of our WHOLE /32 from time to time to another cute > random place ;) One time Google decided we are in IRAN and block a lot > of content

Re: merry xmas

2014-12-24 Thread Jeroen Massar
On 2014-12-24 20:06, valdis.kletni...@vt.edu wrote: > On Wed, 24 Dec 2014 19:38:18 +0100, Jeroen Massar said: > >> Thank you for wasting IPv4 space btw, that way IPv6 has to be there >> earlier, and as you don't have IPv6 yet, good luck with your business ;) > > F

Re: merry xmas

2014-12-24 Thread Jeroen Massar
On 2014-12-24 19:27, Ken Chase wrote: > (mtr|lft|traceroute) xmas.futile.net Welcome to the end of 2014. If you are going to do a silly traceroute thing that has been done thousands of times before, at least use this new fangled thing called: IPv6 Here is the Wikipedia page for you to get star

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 15:45, Song Li wrote: > 在 2014/12/22 22:26, Nick Hilliard 写道: >> On 22/12/2014 13:50, Jeroen Massar wrote: >>> IXs themselves do not have ASNs, as they are Layer 2 providers. >> >> most modern IXPs will have an ASN for their route server, and possibly a

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 14:30, Song Li wrote: > Hi everyone, > > I'm searching for a list of IXPS which contains the information of the > ASN of the IXP. Some resources are good: > > https://prefix.pch.net/applications/ixpdir/?show_active_only=0&sort=traffic&order=desc > > https://www.telegeography.com/pr

Re: Comcast thinks it ok to install public wifi in your house

2014-12-11 Thread Jeroen Massar
On 2014-12-11 19:12, valdis.kletni...@vt.edu wrote: > On Thu, 11 Dec 2014 18:04:20 +, "Livingood, Jason" said: > >> Right, so user name & password + MAC address. As more devices support >> things like Passpoint, this will get more sophisticated. > > OK, so it *does* do .1x authentication with

Re: Comcast thinks it ok to install public wifi in your house

2014-12-10 Thread Jeroen Massar
On 2014-12-11 03:35, Jeroen van Aart wrote: > Grear – a paralegal – and her daughter claim the Xfinity hotspot is an > unauthorized intrusion into their private home, places a "vast" burden > on electricity bills, opens them up to attacks by hackers, and > "degrades" their bandwidth. LibertyGlobal

Re: Google contact: apps vs IPv6 issue

2014-12-03 Thread Jeroen Massar
On 2014-12-03 17:57, Max Tulyev wrote: > Hello! > > Could someone advice a good contact inside Google? n...@google.com is where this stuff has to go. They claim to read it (and mostly they do in time). > I'm operating a IPv6 tunnel broker http://tb.netassist.ua/ > > Now there are a number of co

Re: FYI, Level 3 issues in Dallas

2014-11-19 Thread Jeroen Massar
On 2014-11-19 16:13, David Hubbard wrote: > We have some customers unable to access their websites, seeing this on > the way to them: What would be the source and destination? You got a nice routing loop there. Greets, Jeroen

Re: I am about to inherit 26 miles of dark fiber. What do I do with it?

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:35, Rob Seastrom wrote: > > While short and to the point, what Fletcher said is likely to be the > best advice in this thread. > > Getting someone on staff who understands *both* outside plant > architecture and balance sheets... and can co-develop a business > model that involv

Re: Equinix Virginia - Ethernet OOB suggestions

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:20, Joe Greco wrote: >> Hey, >> >> VPN setup is not really a viable option (for us) in this scenario. >> Honestly, I'd prefer to just call it done already and have a VPN but due to >> certain restraints, we have to go down this route. > > Without explaining the "restraints," this

Fwd: [v6ops] IPv6 MTU Flow-label.... (related to draft-v6ops-pmtud-ecmp-problem-01)

2014-11-10 Thread Jeroen Massar
MTU Flow-label (related to draft-v6ops-pmtud-ecmp-problem-01) Date: Mon, 10 Nov 2014 11:31:52 +0100 From: Jeroen Massar Organization: Massar To: i...@ietf.org, v6...@ietf.org Hola folks (and folks in BCC ;), With the recent Google and Akamai outages (latter still ongoing afaik), it came to

Re: v6 cdn problems

2014-11-10 Thread Jeroen Massar
On 2014-11-10 09:10, Christopher Morrow wrote: > On Mon, Nov 10, 2014 at 12:51 AM, Jeroen Massar wrote: >> There used to be a handy ipv6@google address for reporting things. This >> nowadays bounces. > > yes, it changed to noc@ I think. Thus, in case of an IPv6 issue, conta

Re: v6 cdn problems

2014-11-09 Thread Jeroen Massar
On 2014-11-09 23:00, Christopher Morrow wrote: > On Sat, Nov 8, 2014 at 6:10 PM, Jeroen Massar wrote: >> Google does not seem to be home. Note that you skipped the rest: "Google does not seem to be home. They used to have a handy i...@google.com address, but alas, that does not

Re: v6 cdn problems

2014-11-08 Thread Jeroen Massar
On 2014-11-08 23:55, Pete Carah wrote: [..] > Symptom with akamai is that it connects immediately then data transfer > times out. > With google, symptom involves both slow connection, and data transfer > timing out. See amongst others: https://forums.he.net/index.php?topic=3281.0 https://www.sixx

HTTP 302 with multiple Location: headers?

2014-11-03 Thread Jeroen Massar
Ignoring the fact that Akamai IPv6 is broken on random nodes, thus you get either a working response or not from the same IP as some of the nodes are borked and thus just hang the connection.. (could be pmtu, hard to say without peeking inside the cluster) see amongst others: https://www.sixxs

Re: Saying goodnight to my GSR

2014-09-20 Thread Jeroen Massar
On 2014-09-20 16:18, Matthew Crocker wrote: [..] > IOS (tm) GS Software (GSR-P-M), Version 12.0(30)S3, RELEASE SOFTWARE (fc2) [..] > gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Thank you for finally taking a vulnerable system of the Internet! Greets, Jeroen

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 18:21, Ryan Shea wrote: > IRC is a good suggestion, thanks. They'll likely be helpful. > > I see no indication of any throttling from my ISP - I can blast data at > full speed to my home from my server and work (with native v6 > connections). Does that path between your $home and $

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 17:28, Ryan Shea wrote: > I was attempting to determine the lowest-time-cost path to "happy wife". Does your wife care it is IPv4 or IPv6 or just "funny cat videos"? I think your answer should be clear from that perspective. As somebody eager to post on NANOG though one would think

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 16:55, Ryan Shea wrote: > Just one man's experience, but my YouTube performance over my Hurricane > Electric tunnel has been strikingly poor lately Instead of saying that something is "poor", you might want to do the operational/technical[1] thing and include things like: - IPv4 tra

Re: Applications that break when not using /64

2014-06-18 Thread Jeroen Massar
On 2014-06-18 12:31, Grzegorz Janoszka wrote: > On 17/06/14 23:13 , Jeroen Massar wrote: >> Thus, can you please identify these applications so that we can hammer >> on the developers of those applications and fix that problem? > > I haven't done extensive testing. I h

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-18 00:02, Matthew Petach wrote: [..] > I tried to configure my FreeBSD box at home to > use a /120 subnet mask. It consistently crashed > with a kernel panic. Where is the bug report? I am fairly confident that that really should not be an issue, with the BSD stack being one of the ol

Re: Ars Technica on IPv4 exhaustion

2014-06-17 Thread Jeroen Massar
On 2014-06-17 23:48, Jared Mauch wrote: > > On Jun 17, 2014, at 5:41 PM, Lee Howard wrote: [..] >> Can't tech news sites *please* run dual stack while they're >> spouting end-of-IPv4 stories? > > > > I would love to see a few more properties do IPv6 by default, such as > ARS, Twitter and a few

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-17 22:36, Grzegorz Janoszka wrote: > On 2014-06-17 22:13, David Conrad wrote: >> On Jun 17, 2014, at 12:55 PM, Grzegorz Janoszka >> wrote: >>> There are still applications that break with subnet smaller than /64, >>> so all VPS providers probably have to use /64 addressing. >> >> Wouldn

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 21:54, Brian Rak wrote: > > On 6/2/2014 3:47 PM, shawn wilson wrote: >> On Mon, Jun 2, 2014 at 3:19 PM, Nikolay Shopik wrote: >> >>> Java only used for mouting images. KVM is transfered via VNC protocol >>> iirc. >> They're not re-inventing the wheel, but I think KVM is generally so

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 19:32, Nikolay Shopik wrote: > > On 02/06/14 20:56, Christopher Morrow wrote: >> so... as per usual: >>1) embedded devices suck rocks >>2) no updates or sanity expected anytime soon in same >>3) protect yourself, or suffer the consequences >> >> seems normal. > > So I wo

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:23, Paul S. wrote: [..] > On most ATEN chip based BMC boards from Supermicro, it includes a UI to > iptables that works in the same way. > > You could put it on a public net, allow your stuff and DROP 0.0.0.0/0. > > But unless you have servers with those, I think the best way to

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:10, Randy Bush wrote: > so how to folk protect yet access ipmi? it is pretty vulnerable, so 99% > of the time i want it blocked off. but that other 1%, i want kvm > console, remote media, and dim sum. > > currently, i just block the ip address chunk into which i put ipmi at > th

Re: oss netflow collector/trending/analysis

2014-05-02 Thread Jeroen Massar
On 2014-05-02 16:36, Matthew Galgoci wrote: [..] > Is there anything else I've missed? A few folks here really seem to like > nfsen/nfdump. For OSS that is pretty much it that really matters (maybe you could add Argus if you really want though). For a long long list, check out Simon Leinen's site

Re: The FCC is planning new net neutrality rules. And they could enshrine pay-for-play. - The Washington Post

2014-04-25 Thread Jeroen Massar
On 2014-04-25 15:23 , Patrick W. Gilmore wrote: [..] > While it is probably true that the gov't had a hand in the fact I > have exactly one BB provider at my home, I am not even closed to > convinced that a purely open market would not have resulted in the > same problem. But thanx for pointing out

Re: nanong list spam filtering

2014-04-24 Thread Jeroen Massar
On 2014-04-24 10:29 , Michael DeMan wrote: > Hi All, > > Sorry being a bit off-topic and having a boring subject, but we really should > clean up whatever has been going on with so much spam hitting this mailing > list. > > > NO - I am complaining about people who post things I disagree with o

Re: 59.229.189.0/24

2014-03-24 Thread Jeroen Massar
On 2014-03-24 13:49, greg whynott wrote: [..] > 4 1 ms 1 ms 1 ms 58.229.66.9 > 5 2 ms 1 ms 1 ms 58.229.66.105 > 6 7 ms 5 ms 3 ms 58.229.119.149 Seems you mean 58 instead of 59. Greets, Jeroen

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Jeroen Massar
On 2014-01-16 23:11, Nick Hilliard wrote: > On 16/01/2014 21:22, Jon Lewis wrote: >> Also, at least of the ones I've dealt with, there is no verification of >> records as they're entered. > > on the RIPE IRRDB, there is validation, so you can't just go in and > register route: objects for someone

Deadline TOMORROW to Apply to Represent the "Technical Community" at the Brazil Meeting and in 1Net

2014-01-09 Thread Jeroen Massar
For everybody who wants to dabble in politics that people on this list actually care about ;) Greets, Jeroen Original Message Subject:Deadline TOMORROW to Apply to Represent the "Technical Community" at the Brazil Meeting and in 1Net Date: Thu, 09 Jan 2014 16:04:01 -0

Re: Help me make sense of these traceroutes please

2013-12-24 Thread Jeroen Massar
On 2013-12-25 00:16, Sam Moats wrote: > Hello Nanog community, > I would like to enlist your help with understanding this latency I'm > seeing. You are likely seeing the effects of asymmetric routing. [..] > Tracing route to xxx.yyy.ie [193.1.x.x] www.heanet.ie by chance? :) Though you could us

Re: IPv6 /48 advertisements

2013-12-18 Thread Jeroen Massar
On 2013-12-18 17:11 , Cliff Bowles wrote: > I accidentally sent this to nanog-request yesterday. I could use some > feedback from anyone that can help, please. > > Question: will carriers accept IPv6 advertisements smaller than /48? > > Our org was approved a /36 based on number of locations. I

Re: Automatic abuse reports

2013-11-12 Thread Jeroen Massar
On 2013-11-12 16:58, Jonas Björklund wrote: > Hello, > > We got often abuse reports on hosts that has been involved in DDOS attacks. > We contact the owner of the host help them fix the problem. > > I also would like to start send these abuse report to the ISP of the > source. > > Are there any

Re: ipv6 and geolocation

2013-10-22 Thread Jeroen Massar
On 2013-10-22 21:16, Blair Trosper wrote: > Everyone loves IPv6, and it's a fantastic technology. However, I've been > pondering a few quirks of v6, including the low priority of PTR, but I have > a question I want to throw out there: > > Do you think IPv6 geolocatoin (GeoIP) will ever be viable?

Re: iOS 7 update traffic

2013-09-23 Thread Jeroen Massar
On 2013-09-23 15:41 , Glen Kent wrote: > BTW Linux distributions are available to download via bittorrent, I am very sure that you will be happy to see your customer's UPSTREAM links filled with that traffic... next to you having a shiny CDN and then having to do traffic to ISPs who do not have on

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 17:54 , Jamie Bowden wrote: >> From: Jeroen Massar [mailto:jer...@massar.ch] >> On 2013-07-02 16:51 , Steven Bellovin wrote: >>> http://www.wired.com/threatlevel/2013/07/ipmi/ >>> >>> Capsule summary: watch out! >> >> Indeed! But it

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 16:51 , Steven Bellovin wrote: > http://www.wired.com/threatlevel/2013/07/ipmi/ > > Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access right? :) Anybody not putting them behind a properly restricted firewall and/or VLAN is aski

Re: SixXS Contact

2013-07-01 Thread Jeroen Massar
[several replies in one (hence cc's) to not clutter the list with non-really-nanog stuff, but it kinda deserves a reply, reply-to set to where these things should be going in the first place] [TLDR: contact = i...@sixxs.net, mail queue is long, human time is limited, if you have lots of users some

Re: gTLDs opened up

2013-06-19 Thread Jeroen Massar
On 2013-06-19 12:14, Owen DeLong wrote: > You are, of course, free to criticize as you wish, but ideally, you > should at least direct your criticism at those responsible. Indeed, you should point out the simple fact that anybody with a budget can simply buy their time to sound like they belong so

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 14:28, david peahi wrote: > > Last I heard NANOG stands for North American Network Operators Group. > Anti-American comments are not welcome here.. (IMHO there was nothing 'anti-american' about my statement, though I guess it completely depends on what the definition of that would b

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 13:01, david peahi wrote: > Apologies for making what could be construed as an off topic, political > comment, but doesn't everyone in the USA know by now that the PRC > represents a dagger aimed at the economic and national security of America? > A military invasion in slow motion as

PGP/SSL/TLS really as secure as one thinks?

2013-06-07 Thread Jeroen Massar
On 2013-06-07 06:50, Dan White wrote: [..] A nice 'it is Friday' kind of thought > OpenPGP and other end-to-end protocols protect against all nefarious > actors, including state entities. If you can't trust the entities where your data is flowing through because you are unsure if and where t

Re: Network Research

2013-05-25 Thread Jeroen Massar
On 2013-05-25 14:09, James Bensley wrote: > Hello everyone, > > I am performing some research on networking at present and want the > input of the community and industry at large. I have created a small > on-line survey and would be very grateful to anyone that could give 3 > minutes to fill it ou

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 17:03 , fredrik danerklint wrote: >> You really think people did not have problems with the 1mbit links they >> had back then? > > Yes, I do. > >> And you really think that we won't have problems with >> Zillion-HD or whatever they will call it in another 20 years? > > I think that

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 16:13 , fredrik danerklint wrote: > to watch the latest Quad-HD movie "Multicast" >>> -I'm afraid it has to be unicast so that people can pause/resume anytime >>> they need to go... well you know what I mean >> >> Works fine too with multicast, for instance with FuzzyCast: >>

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 15:39 , Adam Vitkovsky wrote: >>> to watch the latest Quad-HD movie >> "Multicast" > -I'm afraid it has to be unicast so that people can pause/resume anytime > they need to go... well you know what I mean Works fine too with multicast, for instance with FuzzyCast: https://marcel.wa

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:53 , Shahab Vahabzadeh wrote: > Those ip addresses I send were only sample, its 5 page :D and not only > those addresses. > And you are looking to target 128.141.X.Y its mine 128.141.0.0/16 is CERN in Switzerland. Thus not yours, but "owned"(*) by n...@cern.ch. (unless you work t

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:04 , Shahab Vahabzadeh wrote: > Hi everybody, > Last two days I was under an interesting attack which comes from multiple > sources to three of my ADSL users destination. You say that it comes from multiple sources to 3 of your DSL users. The below source/dest though shows that t

Re: Six Strike Rule (Was: William was raided...)

2012-12-04 Thread Jeroen Massar
On 2012-12-04 11:51, Nick B wrote: > In a related note, I wonder if the six-strike rule would violate the ISP's > safe harbor, as it's clearly content inspection. As performed in France, what happens is that some copyright owner contacts the ISP that IP address a.b.c.d had accessed/served copyrigh

securelogin.arubanetworks.com AAAA ::1 <--- someone from Aruba who can fix that?

2012-12-04 Thread Jeroen Massar
Hi folks, For quite a few folks here on the list travel is a common thing, going into foreign wireless networks is too. Likely your laptop/tablet comes with IPv6 enabled per default, it is 2012 after all almost going 2013. And then you get to a silly hotspot and it does not work as the connection

Remaining IPv6 hurdles (Was: Programmers...)

2012-11-30 Thread Jeroen Massar
On 2012-12-01 00:00, Dobbins, Roland wrote: > > On Nov 29, 2012, at 12:27 PM, Owen DeLong wrote: > >> 60% of the world's population still isn't on the internet and I >> expect a significant fraction of that will be coming on in the next >> 2-4 years. > > I live and work in a part of the world wh

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Jeroen Massar
On 2012-11-30 13:51 , Joakim Aronius wrote: > * Will Hargrave (w...@harg.net) wrote: >> >> On 29 Nov 2012, at 20:53, George Herbert >> wrote: >> >>> The assertion being made here, that it's somehow illegal (or >>> immoral, or scary) for there to be not-completely-traceable >>> internet access in

Re: "Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-29 Thread Jeroen Massar
On 2012-11-29 13:53 , . wrote: > On 29 November 2012 12:48, Dobbins, Roland wrote: >> >> On Nov 29, 2012, at 6:47 PM, Bjørn Mork wrote: >> >>> What's the proper term for software which happens to access the network? >> >> Just about anything, these days. >> >> ;> >> >> 'Network-enabled' or 'netwo

Re: "Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-28 Thread Jeroen Massar
On 2012-11-28 18:26, Michael Thomas wrote: > On 11/28/2012 09:00 AM, Jeroen Massar wrote: >> >> And still, if you as a proper engineer where not able to test/add IPv6 >> code in the last 10++ years, then you did something very very wrong in >> your job, the least of wh

Re: "Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-28 Thread Jeroen Massar
On 2012-11-28 17:30 , david raistrick wrote: > On Wed, 28 Nov 2012, Bjørn Mork wrote: > >> Do you really want to run netowrking software written by someone >> incapable of setting up a test network? This doesn't have anything with >> tunnel brokers or native access to do at all. > > So the softw

"Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

2012-11-27 Thread Jeroen Massar
On 2012-11-27 20:21, mike wrote: > On 11/26/12 9:32 PM, Mikael Abrahamsson wrote: >> >> The main problem with IPv6 only is that most app developers (most >> programmers totally) do not really have access to this, so no testing >> is being done. >> > This is a point that is probably more significant

IPv6 is really there when "SEO"-style spammers want to start using it ;)

2012-11-09 Thread Jeroen Massar
Hi, As it is http://www.youtube.com/watch?v=kfVsfOSbJY0 ... (don't look if you have a video and audio enabled terminal ;) I just came across the following: 8<-- I want to use IPv6 to test if my Marketing Referral System will work with this protocol. Since IPv4s are running low, it takes

Re: MTU issues s0.wp.com

2012-11-06 Thread Jeroen Massar
On 2012-11-06 13:33, Seth Mos wrote: > Hi, > > Since about a week or so it's become impossible to reach wp.com content > over IPv6. > > IPv4 content does work fine, using the IPv6 literal returns a 404 which > is small enough to fit in a smaller 1480 byte MTU. > > I have another test site that h

Re: IP tunnel MTU

2012-10-30 Thread Jeroen Massar
On 2012-10-30 11:19, Sander Steffann wrote: > Hi, > Certainly fixing all the buggy host stacks, firewall and compliance devices to realize that ICMP isn't bad won't be hard. >>> >>> Wait till you get started on "fixing" the "security" consultants. >> >> Ack. I've yet to come across a *

Re: www.ipv6.facebook.com not loading)

2012-10-25 Thread Jeroen Massar
On 2012-10-25 09:45, Dobbins, Roland wrote: [..] > ;; ANSWER SECTION: > www.facebook.com. 49 IN CNAME www.c10r.facebook.com. > www.c10r.facebook.com.39 IN > 2a03:2880:2110:9f01:face:b00c:: Interresting, I was just now getting responses pointing www.facebo

Re: www.ipv6.facebook.com not loading)

2012-10-25 Thread Jeroen Massar
On 2012-10-25 09:18, Frank Bulk wrote: > Since Wednesday at 1:48 pm Central www.ipv6.facebook.com has not been > loading (though it's pingable). Does anyone know if this has been formally > deprecated? I am getting NXDOMAIN for www.ipv6.facebook.com thus it likely is fully gone now: 8<-

Re: Is a /48 still the smallest thing you can route independently?

2012-10-11 Thread Jeroen Massar
On 2012-10-11 23:02 , Jo Rhett wrote: > I've finally convinced $DAYJOB to deploy IPv6. Justification for the > IP space is easy, however the truth is that a /64 is more than we > need in all locations. However the last I heard was that you can't > effectively announce anything smaller than a /48.

  1   2   3   4   >