BCP 38 addendum (was: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks)

2018-03-02 Thread Todd Crane
Question: Since we cannot count on everyone to follow BCP 38 or investigate their abuse@, I was thinking about the feasibility of using filtering to prevent spoofing from peers’ networks. With the exception of a few edge cases, would it be possible to filter inbound traffic allowing only packet

Re: backbones filtering unsanctioned sites

2017-02-16 Thread Todd Crane
I am not familiar with Cogent’s architecture but why couldn’t they just null route the IP address at their edge routers from within Spain? I am not a lawyer but from what I understand, since the Spanish government has zero say on what goes on outside of their borders, a court order that may or m

Re: colo at 111 8th ave NY?

2016-06-25 Thread Todd Crane
Ditto > On Jun 24, 2016, at 8:37 AM, Sean Watkins wrote: > > Hi, > > I'm looking for a rack or half rack at 111 8th ave NYC. > > I've tried going via sales at Equinix etc and few other carriers, it seems > to never go anywhere... > > Can anyone who is there, and wants to sell some space cont

Re: Netflix VPN detection - actual engineer needed

2016-06-05 Thread Todd Crane
Fixed it for you > On Jun 5, 2016, at 10:38 PM, joel jaeggli wrote: > > > They buy from 2 or more wholesale transit providers and in general they > opportunistically bureaucratically peer, although scale helps a lot there.

Re: craigslist.com admin

2016-06-02 Thread Todd Crane
According to bgp.he.net and ARIN, craigslist has 2620:7E::/44 which is announced on several transits. Curious as to what they use it for if not Web, MX, or DNS. —Todd > On Jun 2, 2016, at 2:00 PM, valdis.kletni...@vt.edu wrote: > > apparently Craigslist doesn't have an IPv6 presence yet

Re: GeoIP database issues and the real world consequences

2016-04-14 Thread Todd Crane
their insurance companies. Now we have people that can't think for themselves that NEED labels. It's much like the debate about trying to legislate common sense. Todd Crane > On Apr 13, 2016, at 6:25 AM, valdis.kletni...@vt.edu wrote: > > On Tue, 12 Apr 2016 22:57:42 -0700, Todd C

Re: GeoIP database issues and the real world consequences

2016-04-12 Thread Todd Crane
I like (sarcasm) how everybody here either wants to point fingers at MaxMind or offer up coordinates to random places knowing that it will never happen. What ever happened to holding people responsible for being stupid. When did it start becoming ((fill in the blank)) coffee shop’s for you burni

Re: mpls switches

2016-04-06 Thread Todd Crane
Mike, Nor sure how much you know about SDN or if you are in anywhere near being able to make the transition, but white-label switches may be a deciding factor for you. In fact you may be able to do it without SDN, but I cannot say for sure as we have ours configured in SDN mode. We use Edge-Cor

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-03-31 Thread Todd Crane
I must have missed that… my bad. > On Mar 31, 2016, at 2:01 AM, Dan Hollis wrote: > > It's right there in his email: > > "We have sent email to ab...@microsoft.com, but no answer." > > -Dan > > On Thu, 31 Mar 2016, Todd Crane wrote: >

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-03-31 Thread Todd Crane
Oh and, I’m assuming you contacted Microsoft’s abuse? If not, it’s not cool, not to mention unprofessional, to publicly call them out on such a public forum without giving them an opportunity to correct it first. > On Mar 31, 2016, at 1:15 AM, Todd Crane wrote: > > Marcel > &g

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-03-31 Thread Todd Crane
Marcel Depending on what is on those machines, I would just recommend using fail2ban. The default is that if an ip address fails ssh auth 3 times in 5 minutes, their ip gets blocked via iptables for 5 minutes. This is enough to thwart most scripted attacks, especially those from a certain gover

Re: Cogent Communications

2016-03-25 Thread Todd Crane
As a Cogent customer, I say ‘good luck’ Last time I called them on a Friday night, it was because they announcing (not originating but bad nevertheless) the IPv6 default route. The NOC “engineer” I spoke with adamantly insisted that there was nothing wrong with this. After about a half hour I g

Re: Oh dear, we've all been made redundant...

2016-03-20 Thread Todd Crane
"Eliminates media stream buffering” Well, hell… my job is done here. [drops mic, walks out] > On Mar 19, 2016, at 4:16 PM, Warren Kumari wrote: > > Found on Staple's website: > http://www.staples.com/NetReset-Automated-Power-Cycler-for-Modems-and-Routers/product_1985686 > > Fixes all issues, l

Re: Why the US Government has so many data centers

2016-03-18 Thread Todd Crane
I was trying to resist the urge to chime in on this one, but this discussion has continued for much longer than I had anticipated... So here it goes I spent 5 years in the Marines (out now) in which one of my MANY duties was to manage these "data centers" (a part of me just died as I used that w

Re: Cogent - Google - HE Fun

2016-03-14 Thread Todd Crane
> This is only tangentially related but it looks like HE has surpassed Cogent > on IPv4 adjacencies. That said the source probably suffers from a selection > bias at the very least. > > http://bgp.he.net/report/peers > > Hit reply by mistake instead of reply all. >

E911 (was CALEA Requirements)

2016-03-14 Thread Todd Crane
While we're at it, can somebody point me on the right path for E911. I'm not looking for a managed service but rather an in-house solution. Todd Crane > On Mar 14, 2016, at 2:57 PM, Scott Weeks wrote: > > > > --- lor...@hathcock.org wrote: > From: "Lorell

sFlow vs netFlow/IPFIX

2016-02-28 Thread Todd Crane
commercial offerings for the "better" protocol) Todd Crane

Re: Anonymous Threats

2016-01-10 Thread Todd Crane via NANOG
I’m pretty sure that is what TOR was designed to prevent. While your intent may be altruistic, technologically speaking, there is no difference between that and say Iran or China sniffing out traffic. > On Jan 10, 2016, at 3:59 PM, Eric Rogers wrote: > > Is there any way to sniff for that ty

Re: Binge On! - get your umbrellas out, stuff's hitting the fan.

2016-01-09 Thread Todd Crane via NANOG
At least Microsoft would get heat for unsolicited downloads. Why does Microsoft (allegedly) think they can download (unwanted or at least unsolicited) software to unsuspecting users computer, just to upsell them, at our expense? 20Gigs per household is a lot of data across a market. If it was m