Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Ronald F. Guilmette
In message , Sander Steffann wrote: >Sorry, but you post this information on public mailing lists where it >can be discussed but where no action can be taken... I think that you mistake formalized centralized "action" for "action" more broadly and generally. In fact, it is my belief that "act

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Ronald F. Guilmette
In message William Herrin wrote: >What is your goal here? Primarily to inform. Forewarned is forearmed. Wouldn't you agree? >Is there some action that any particular NANOG >participant should take based on your opinion? Dropping all route announcements from the 18 fraudlent ASNs I listed,

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Rich Kulawiec
On Tue, Jan 15, 2013 at 11:36:04PM +0100, Sander Steffann wrote: > Sorry, but you post this information on public mailing lists where it > can be discussed but where no action can be taken [...] That's not exactly correct. Lots of people on this list are perfectly capable of taking a variety of a

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Todd Underwood
> I do not understand why you're so adamant about sending this information > to an organization primarily distinguished by its incompetence and > negligence. If they were actually DOING THEIR JOBS in even minimally > diligent fashion, then Ron wouldn't needed to write that note or do > the researc

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Rich Kulawiec
On Wed, Jan 16, 2013 at 10:07:40AM -0500, Todd Underwood wrote: > no one seriously believes that the RIPE NCC (which is managed by all > of its members) is primarily distinguished by their incompetence and > negligence. Really? Then why, pray tell, haven't they made it a practice to routinely (le

RE: looking glass for Level 3

2013-01-16 Thread Siegel, David
Ben, Our looking glass platform is indeed back online and now supports IPv6 traceroutes, pings and BGP lookups in the interface (although the web site itself is still only available via IPv4). If you encounter any problems, oddities, or suggestions, please feel free to contact me off list and

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Matthew Petach
I'll bet Hitler would have used his real name on the whois entries. There. Now I think we're done. Matt On Jan 16, 2013 7:09 AM, "Todd Underwood" wrote: > > I do not understand why you're so adamant about sending this information > > to an organization primarily distinguished by its incompete

Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread fredrik danerklint
From the article: "Faced with the shortage of IPv4 addresses and the failure of IPv6 to take off, British ISP PlusNet is testing carrier-grade network address translation CG-NAT, where potentially all the ISP's customers could be sharing one IP address, through a gateway. The move is controver

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Todd Underwood
it's nice that we've proceded to insult our colleagues. many thanks to mr. petach for achieving the end of this thread. thank you all for participating. On Wed, Jan 16, 2013 at 10:54 AM, Rich Kulawiec wrote: > On Wed, Jan 16, 2013 at 10:07:40AM -0500, Todd Underwood wrote: >> no one seriously

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Justin M. Streiner
On Wed, 16 Jan 2013, fredrik danerklint wrote: From the article: "Faced with the shortage of IPv4 addresses and the failure of IPv6 to take off, British ISP PlusNet is testing carrier-grade network address translation CG-NAT, where potentially all the ISP's customers could be sharing one IP

Re: Problem with email to Hawaiilink.net email

2013-01-16 Thread staticsafe
On 1/15/2013 19:19, david peahi wrote: > Does anyone know of any problems in Hawaii with email or DNS problems? > Sending from gmail.com and pacbell.net domains, I get: > > > host mail.hawaiilink.net[24.43.223.114] said: 553 > 5.1.8 emailaddr...@pacbell.net ... Domain of sender address >

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread William Herrin
On Wed, Jan 16, 2013 at 10:54 AM, Rich Kulawiec wrote: > On Wed, Jan 16, 2013 at 10:07:40AM -0500, Todd Underwood wrote: >> no one seriously believes that the RIPE NCC (which is managed by all >> of its members) is primarily distinguished by their incompetence and >> negligence. > > Really? Then

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Daniel Ankers
On 16 January 2013 16:31, Justin M. Streiner wrote: > On Wed, 16 Jan 2013, fredrik danerklint wrote: > > From the article: >> >> "Faced with the shortage of IPv4 addresses and the failure of IPv6 to >> take off, British ISP PlusNet is testing carrier-grade network address >> translation CG-NAT, w

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Suresh Ramasubramanian
There have been previous incidents in the ARIN region .. Nothing on the grand scale of what Ron is describing, and just saying, Arin does liaise with the Anti spam world rather better than this. On Wednesday, January 16, 2013, William Herrin wrote: > > Hi Rich, > > Since this is NANOG, not a forum

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread William Herrin
On Wed, Jan 16, 2013 at 11:31 AM, Justin M. Streiner wrote: > I would hope that PlusNet has valid, well-thought-out reasons for deploying > CGN instead of IPv6. Not knowing those, I can only jugde their position on > its face: foolish and short-sighted. Move along, nothing to see here. Barring a

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Carlos M. Martinez
Please, please someone go to http://meemsy.com/videos/add/24 and create 'Hitler reacts to the fraudulent Romanian ASNs' After that we can move on. :=) ~C. On 1/16/13 2:01 PM, Matthew Petach wrote: > I'll bet Hitler would have used his real name on the whois entries. > > There. Now I think we'

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Mikael Abrahamsson
On Wed, 16 Jan 2013, Daniel Ankers wrote: In other words, it makes sense to be able to support customers who won't move to IPv6 in the short-medium term, even though in the long term it's inevitable. I agree, IPv6 isn't an answer to "we're out of IPv4 addresses" right now. So CGNAT44 i combi

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread fredrik danerklint
I would hope that PlusNet has valid, well-thought-out reasons for deploying CGN instead of IPv6. Not knowing those, I can only jugde their position on its face: foolish and short-sighted. Move along, nothing to see here. Barring a few fanatics, everyone here has known for several years now that

Re: Dreamhost hijacking my prefix...

2013-01-16 Thread john
On 1/11/13 8:28 PM, Scott Weeks wrote: > > > --- andree+na...@toonk.nl wrote: > From: Andree Toonk > > Here's some more data showing an announcement for > 150.182.208.0/20 originated by 26347 > > http://www.ris.ripe.net/mt/rissearch-result.html?aspref=150.182.208.0%2F20&preftype=EMATCH&rrc_id=

Re: Notice: Fradulent RIPE ASNs

2013-01-16 Thread Steven G. Huter
ni lar has requested to add someone, and so has kanchana, so i think our group reservation is full will try to check this morning to confirm On Wed, 16 Jan 2013, Matthew Petach wrote: I'll bet Hitler would have used his real name on the whois entries. There. Now I think we're done. Matt On

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread William Herrin
On Wed, Jan 16, 2013 at 12:09 PM, fredrik danerklint wrote: >> Barring a few fanatics, everyone here >> has known for several years now that CGN would be required for >> continuing IPv4 support regardless of the progress of IPv6. >> >> If you spin it right, it's a "Free network-based firewall to b

Re: RIPE cookies [was]: Dreamhost hijacking my prefix...

2013-01-16 Thread Scott Weeks
--- jb...@ripe.net wrote: From: john - On 1/11/13 8:28 PM, Scott Weeks wrote: - > RIPE needs to fix on their web site: > "Please turn on the cookies on your browser to view this site." > It doesn't have to be this way... - I took a look at this site

Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-16 Thread Shrdlu
On 1/16/2013 9:40 AM, john wrote: I took a look at this site and unfortunately the use of cookies is very ingrained into the code. Removing the requirement breaks all functionality of www.ris.ripe.net and changing the functionality would require a rewrite of the site. Sooner or later, you'll

Leasenet Dallas outage yesterday

2013-01-16 Thread Tim Connolly (FC)
Did anyone else have an outage using LeaseNet in Dallas, TX yesterday? Cleared up at 9:30am local. Equipment is hosted at Equinix/Infomart.

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread fredrik danerklint
Even tough you have very good arguments, my suggestion would be to have a class A network (I got that right, right?) for all the users and only having 6rd as service on that network. ARIN and IETF cooperated last year to allocate 100.64.0.0/10 for CGN use. See RFC 6598. This makes it possible to

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Sander Steffann
Hi, > If I have calculated the netmasks right that would mean to set aside: > > 2001:0DB8:6440::/42 > > for the use of 6rd service: > > 2001:0DB8:6440:::/64 = 100.64.0.0 > > 2001:0DB8:647F:::/64 = 100.127.255.255 You probably should add a few extra bits for subnetting behind the 6

Intermittent incorrect DNS resolution?

2013-01-16 Thread Erik Levinson
Hi everyone, I'm having an unusual DNS problem and would appreciate feedback. For the zones in question, primary DNS is provided by GoDaddy and secondary DNS by DNS Made Easy. Over a week ago we made changes to several A records (including wildcards on two different zones), all already having a

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread George Herbert
On Wed, Jan 16, 2013 at 2:00 PM, Erik Levinson wrote: > Hi everyone, > > I'm having an unusual DNS problem and would appreciate feedback. > > For the zones in question, primary DNS is provided by GoDaddy and > secondary DNS by DNS Made Easy. Over a week ago we made changes to > several A records (

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Christopher Morrow
On Wed, Jan 16, 2013 at 5:00 PM, Erik Levinson wrote: > Any ideas? Can folks try resolving eriktest.uberflip.com and post > here with details only if it resolves to an IP starting with 76.9 (old IPs)? > for d in $(seq 1 1000); do dig @pdns01.domaincontrol.com. eriktest.uberflip.com >> /tmp/tst

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread RijilV
Also client programs don't always honor TTLs either. For example, JAVA defaults to ignoring TTLs and holding IPs forever. *networkaddress.cache.ttl (default: -1)* Indicates the caching policy for successful name lookups from the name service. The value is specified as as integer to indicate the n

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread William Herrin
On Wed, Jan 16, 2013 at 2:53 PM, fredrik danerklint wrote: >> ARIN and IETF cooperated last year to allocate 100.64.0.0/10 for CGN >> use. See RFC 6598. This makes it possible to implement a CGN while >> conflicting with neither the user's RFC1918 activity nor the general >> Internet's use of assi

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Christopher Morrow
On Wed, Jan 16, 2013 at 5:24 PM, Erik Levinson wrote: > Yes, though I tried way less than 1000 in the loop. > :) given a large list of recursives you could even test resolution through a bunch of recursive servers...

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Erik Levinson
Yes, though I tried way less than 1000 in the loop. On 16/01/13 05:13 PM, Christopher Morrow wrote: On Wed, Jan 16, 2013 at 5:00 PM, Erik Levinson wrote: Any ideas? Can folks try resolving eriktest.uberflip.com and post here with details only if it resolves to an IP starting with 76.9 (old IP

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Erik Levinson
Good point. While I haven't checked the distribution of source IPs yet, I briefly grepped for the User-Agent headers in the tcpdump output, and there's a higher than expected bot presence, particularly Baidu. That said, there are also "normal" UAs (whatever that means, with every device/soft

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Erik Levinson
True...I did try 4.2.2.2 / 8.8.8.8 and some local ones here. All looked fine. With anycast / DB and other backend clusters / load balancing / whatever else behind the scenes, it's hard to get a good idea of what's actually happening. Might be stuck with running this infra for a while longer

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread William Herrin
On Wed, Jan 16, 2013 at 5:00 PM, Erik Levinson wrote: > I suspect that somewhere, one of their servers has the wrong data, or > some resolver is misbehaving, but based on the > pattern/traffic/volume/randomization of hostnames, the resolver theory is > less likely. I haven't analyzed the source IP

Anyone from google networking on this list?

2013-01-16 Thread tglassey
If there is anyone from Google Networking here on the list can you contact me offlist please. I want to talk about 60 Hudson. Todd Glassey -- Regards TSG "Ex-Cruce-Leo" //Confidential Mailing - Please destroy this if you are not the intended recipient.

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Jean-Francois Mezei
Consider the possibility that some end users (or even corp networks) may have hardcoded your hosts' translation into their hosts files or perhaps corporate proxy firewalls that allow access onto to whitelisted web sites. They will continue to point to the old IP addresses until you shutdown the se

Netflow Nfsen Server Hardware

2013-01-16 Thread Tim Calvin
We are looking to purchase a new server for Netflow exports. This will mainly be used to evaluate our transit bandwidth for potential peering opportunities. A long data retention is not a high priority. Our combined transit bandwidth is around 6 Gbps and increasing all the time. Looking to get

Symantec / Message Labs contact?

2013-01-16 Thread Robert Glover
Hello, We are having a really hard time getting a hold of Symantec / Message Labs regarding one of our mail servers getting a "Connection Refused" when trying to send to any domains hosted with Symantec / Message Labs. Can someone please contact me? Sincerely, Bobby Glover Director of Inform

DNS resolver addresses for Sprint PCS/3G/4G

2013-01-16 Thread Jay Ashworth
I've noticed, for quite some time, that there seems to be a specific category of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both their 3G and 4G networks, and I wonder if it isn't because the defined resolvers are 8.8.4.4 and 8.8.8.8, which aren't *on* Sprint's networks. Doe

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Jay Ashworth
- Original Message - > From: "Erik Levinson" > I'm having an unusual DNS problem and would appreciate feedback. > > For the zones in question, primary DNS is provided by GoDaddy and > secondary DNS by DNS Made Easy. Over a week ago we made changes to > several A records (including wildca

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Stephen D. Strowes
On 16/01/2013 08:31, Justin M. Streiner wrote: On Wed, 16 Jan 2013, fredrik danerklint wrote: From the article: "Faced with the shortage of IPv4 addresses and the failure of IPv6 to take off, British ISP PlusNet is testing carrier-grade network address translation CG-NAT, where potentially all

How are operators using IRR?

2013-01-16 Thread ML
How are operators using the data available in the various IRRs? Using an example: AS1 is your customer AS1 has AS2, AS3 and AS4 described as customers in an IRR Also assume AS2 has IRR data describing AS1000 and AS2000 as it's customers. Are operators building AS path regexes such as the follow

GPS attack vector

2013-01-16 Thread Jay Ashworth
Do you use GPS to provide any mission critical services (like time of day) in your network? Have you already see this? (I hadn't) http://arstechnica.com/security/2012/12/how-to-bring-down-mission-critical-gps-networks-with-2500/ Cheers, -- jra -- Jay R. Ashworth Baylink

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Robert Bonomi
> From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Wed Jan 16 18:21:21 > 2013 > Date: Wed, 16 Jan 2013 19:16:57 -0500 (EST) > From: Jay Ashworth > To: NANOG > Subject: Re: Intermittent incorrect DNS resolution? > > I'm a touch surprised to find that no one has mentioned the facet of > Win

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Joe Abley
On 2013-01-16, at 14:33, Erik Levinson wrote: > True...I did try 4.2.2.2 / 8.8.8.8 and some local ones here. All looked fine. I sent queries from 270+ different locations for the domains you mentioned off-list and I didn't see any inconsistencies. The persistent host-caching/browser-caching t

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-16 Thread Mark Andrews
In message <50f70524.4020...@fredan.se>, fredrik danerklint writes: > >> Even tough you have very good arguments, my suggestion would be to have a > >> class A network (I got that right, right?) for all the users and only havi > ng > >> 6rd as service on that network. > > > > ARIN and IETF coopera

Re: DNS resolver addresses for Sprint PCS/3G/4G

2013-01-16 Thread Christopher Morrow
On Wed, Jan 16, 2013 at 7:13 PM, Jay Ashworth wrote: > I've noticed, for quite some time, that there seems to be a specific category > of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both > their 3G and 4G networks, and I wonder if it isn't because the defined > resolvers are

Re: Intermittent incorrect DNS resolution?

2013-01-16 Thread Erik Levinson
Thanks Joe and thanks everyone else for the on and off-list replies. Quite insightful. I think we've reached the consensus that the problem is the ignoring of TTLs as opposed to misbehaving/stale authoritative servers. So for now I shall wait. To give an idea of the scale of the problem right n

Re: GPS attack vector

2013-01-16 Thread Tom Morris
This could also be a big show stopper for cellular and radio networks. Many use a 10.000 MHz timebase distributed from a GPS disciplined local oscillator for precise time and frequency synchronization. Without this tight frequency stabilization from a GPS receiver, major drama will occur on the

Re: DNS resolver addresses for Sprint PCS/3G/4G

2013-01-16 Thread Jay Ashworth
- Original Message - > From: "Christopher Morrow" > On Wed, Jan 16, 2013 at 7:13 PM, Jay Ashworth wrote: > > I've noticed, for quite some time, that there seems to be a specific > > category > > of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on > > both > > their 3G an

Re: How are operators using IRR?

2013-01-16 Thread Dan Luedtke
Hi, On Wed, 16 Jan 2013 19:55:44 -0500 ML wrote: > Is this > being paired with some AS path filtering? I am a huge fan of path filtering, but I have so very little paths to maintain that I can say so. I guess most operators to not filter paths, and building prefix lists is more or less current p