Re: How to track DNS resolution sources

2014-12-04 Thread Notify Me
Hi Nick and List Yes it's possible. The dud DNS response in some parts of the internet was the public IP address being used by their proxy server. I'm not sure what the proxy is, but it's a windows box. I was going to try to dig trace but by then the poisoning suddenly stopped happening. Any othe

DWDM Documentation

2014-12-04 Thread Theo Voss
Hi guys, we, a Berlin / Germany based carrier, are looking for a smart documentation (shelfs, connections, fibers) and visualization tool for our ADVA-based DWDM-enviroment. Do you have any suggestions or hints for me? We’re testing „cableScout“, the only one I found, next week but. Unfortunat

ARIN's RPKI Relying agreement

2014-12-04 Thread Andrew Gallo
Greetings: In the past few months, I've spoken with, or heard second hand, from a number of organizations that will not or cannot sign ARIN's RPKI Relying Agreement. Acceptance of this agreement is required in order to gain access to ARIN's Trust Anchor Locator (TAL). Given the size and num

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Valdis . Kletnieks
On Thu, 04 Dec 2014 09:57:05 -0500, Andrew Gallo said: > In the past few months, I've spoken with, or heard second hand, from a > number of organizations that will not or cannot sign ARIN's RPKI Relying > Agreement. Do we have a handle on *why* organizations are having issues with the agreement?

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Christopher Morrow
On Thu, Dec 4, 2014 at 10:04 AM, wrote: > On Thu, 04 Dec 2014 09:57:05 -0500, Andrew Gallo said: > >> In the past few months, I've spoken with, or heard second hand, from a >> number of organizations that will not or cannot sign ARIN's RPKI Relying >> Agreement. > > Do we have a handle on *why* o

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Christopher Morrow
On Thu, Dec 4, 2014 at 10:21 AM, Christopher Morrow wrote: > On Thu, Dec 4, 2014 at 10:04 AM, wrote: >> On Thu, 04 Dec 2014 09:57:05 -0500, Andrew Gallo said: >> >>> In the past few months, I've spoken with, or heard second hand, from a >>> number of organizations that will not or cannot sign AR

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Andrew Gallo
Honestly, that's what I'm trying to figure out as well. In my informal conversations, what I got was that lawyers read the agreement, said 'no, we wont sign it' and then dropped it. If specific legal feedback isn't making it back to ARIN, then we need to start providing it, otherwise, the agr

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
> On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: > In my informal conversations, what I got was that lawyers read the agreement, > said 'no, we wont sign it' and then dropped it. If specific legal feedback > isn't making it back to ARIN, then we need to start providing it, All the specific l

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Ca By
On Thu, Dec 4, 2014 at 7:35 AM, Andrew Gallo wrote: > Honestly, that's what I'm trying to figure out as well. In my informal > conversations, what I got was that lawyers read the agreement, said 'no, we > wont sign it' and then dropped it. If specific legal feedback isn't making > it back to AR

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Ca By
On Thu, Dec 4, 2014 at 7:51 AM, Bill Woodcock wrote: > > > On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: > > In my informal conversations, what I got was that lawyers read the > agreement, said 'no, we wont sign it' and then dropped it. If specific > legal feedback isn't making it back to ARI

Anybody at Amazon AWS?

2014-12-04 Thread Anne P. Mitchell, Esq.
Anybody have a contact at Amazon AWS? I sent in a spam complaint, and got back the below response - while I give them kudos for actually, you know, responding, I'm pretty sure that we can all agree that "sending the same canned message to email addresses scraped off websites" is the very defini

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread William Herrin
>> On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: >> In my informal conversations, what I got was that lawyers read >>the agreement, said 'no, we wont sign it' and then dropped it. If >>specific legal feedback isn't making it back to ARIN, then we >>need to start providing it, Hi Andrew, The s

Re: Anybody at Amazon AWS?

2014-12-04 Thread Clayton Zekelman
Wether the addresses were gleaned using specially trained hedgehogs or by people looking at the sites to target who they're going to SPAM, targeted UCE is still UCE. Apparently AWS doesn't grok that. At 11:15 AM 04/12/2014, Anne P. Mitchell, Esq. wrote: Anybody have a contact at Amazon AWS

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Jay Ashworth
- Original Message - > From: "Ca By" > On Thu, Dec 4, 2014 at 7:51 AM, Bill Woodcock wrote: > > All the specific legal feedback I’ve heard is that this is a > > liability > > nightmare, and that everyone wants ARIN to take on all the > > liability, but > > nobody wants to pay for it. Ar

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Andrew Gallo
On 12/4/2014 11:22 AM, William Herrin wrote: On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: In my informal conversations, what I got was that lawyers read the agreement, said 'no, we wont sign it' and then dropped it. If specific legal feedback isn't making it back to ARIN, then we need to st

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Christopher Morrow
On Thu, Dec 4, 2014 at 11:22 AM, William Herrin wrote: > On Thu, Dec 4, 2014 at 10:51 AM, Bill Woodcock wrote: >> All the specific legal feedback I’ve heard is that this is a liability > nightmare, >> and that everyone wants ARIN to take on all the liability, but nobody >> wants to pay for it. A

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Carlos M. Martinez
Hello, On 12/4/2014 2:33 PM, Andrew Gallo wrote: > > On 12/4/2014 11:22 AM, William Herrin wrote: > Understood and good point. I've heard rumblings of setting up a > non-ARIN TAL, though I wonder what the value is in separating RPKI from > the registry. Wouldn't this put us in the same position

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Carlos M. Martinez
Hello, On 12/4/2014 2:33 PM, Andrew Gallo wrote: > > On 12/4/2014 11:22 AM, William Herrin wrote: > Understood and good point. I've heard rumblings of setting up a > non-ARIN TAL, though I wonder what the value is in separating RPKI from > the registry. Wouldn't this put us in the same position

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
On 12/4/14, 10:35 AM, "Andrew Gallo" wrote: >Honestly, that's what I'm trying to figure out as well. In my informal >conversations, what I got was that lawyers read the agreement, said 'no, >we wont sign it' and then dropped it. If specific legal feedback isn't >making it back to ARIN, then we

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 11:35 AM, Christopher Morrow wrote: > ... > Maybe it would be helpful for the ARIN Counsel to document in a more > public way (than the RPA) what the concerns are and how that > translates into 'different risk than the publication of whois data' ? This is apparently being discu

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 12:32 PM, George, Wes wrote: > Those are operational matters, implemented by the staff, governed by the > board, who is informed by their legal council and staff. That is part of > the reason why I brought some of the issues to the NANOG community, since > interaction with ARIN

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Jared Mauch
> On Dec 4, 2014, at 12:53 PM, John Curran wrote: > > On Dec 4, 2014, at 12:32 PM, George, Wes wrote: >> Those are operational matters, implemented by the staff, governed by the >> board, who is informed by their legal council and staff. That is part of >> the reason why I brought some of the i

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Rob Seastrom
Bill Woodcock writes: >> On Dec 4, 2014, at 7:35 AM, Andrew Gallo wrote: >> >> In my informal conversations, what I got was that lawyers read the >> agreement, said 'no, we wont sign it' and then dropped it. If >> specific legal feedback isn't making it back to ARIN, then we need >> to start p

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 1:01 PM, Jared Mauch wrote: >> I am happy to champion the change that you seek (i.e. will get it reviewed >> by legal and brought before the ARIN Board) but still need clarity on what >> change you wish to occur - >> >>A) Implicit binding to the indemnification/warrant di

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
>>On Thu, Dec 4, 2014 at 7:51 AM, Bill Woodcock wrote: > >> > All the specific legal feedback I’ve heard is that this is a >> > liability >> > nightmare, and that everyone wants ARIN to take on all the >> > liability, but >> > nobody wants to pay for it. WG] Has there been any actual discussion

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Jared Mauch
>> Comparing what you do with Time Warner cable seems like pure hyperbole and >> an attempt >> as CEO to inflame community discussion at minimum. > > Actually, it is to remind folks that such indemnification language is > sought by most ISPs, despite their services being used in a mission > crit

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Alex Band
> On 4 Dec 2014, at 18:53, John Curran wrote: > > On Dec 4, 2014, at 12:32 PM, George, Wes wrote: >> Those are operational matters, implemented by the staff, governed by the >> board, who is informed by their legal council and staff. That is part of >> the reason why I brought some of the issue

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
> On Dec 4, 2014, at 10:17 AM, George, Wes wrote: > WG] Has there been any actual discussion about how much "nobody" would > have to pay for ARIN (or another party) to fix the balance of liability > and provide a proper SLA that led to "no, I don't want to pay for that" > responses from those who

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
On 12/4/14, 1:13 PM, "John Curran" wrote: >>>I am happy to champion the change that you seek (i.e. will get it >>>reviewed >>> by legal and brought before the ARIN Board) but still need clarity on >>>what >>> change you wish to occur - >>> >>>A) Implicit binding to the indemnification/warran

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Robert Seastrom
On Dec 4, 2014, at 1:34 PM, Bill Woodcock wrote: > >> On Dec 4, 2014, at 10:17 AM, George, Wes wrote: >> WG] Has there been any actual discussion about how much "nobody" would >> have to pay for ARIN (or another party) to fix the balance of liability >> and provide a proper SLA that led to "no

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
> On Dec 4, 2014, at 11:11 AM, Robert Seastrom wrote: > I suspect you would get a similar answer if you asked people "Would you be > willing to pay ARIN for whois services" or "would you be willing to pay ARIN > for in-addr.arpa services”. Actually, since those are relatively inexpensive, I su

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Sandra Murphy
On Dec 4, 2014, at 12:39 PM, John Curran wrote: > On Dec 4, 2014, at 11:35 AM, Christopher Morrow > wrote: > > Note that the claims that could ensue from an operator failing to follow best > practices > and then third-parties suffering an major operational outage is likely to be > large

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 1:19 PM, Jared Mauch wrote: > > I (similar to Rob) have my own concerns about RPKI but do feel that > this is an ARIN specific construct/wall that has been raised without > action yet from ARIN. Jared - Please be specific - are you referring to the indemnification claus

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Valdis . Kletnieks
On Thu, 04 Dec 2014 11:17:34 -0800, Bill Woodcock said: > the RPKI costs are many orders of magnitude higher Orders of magnitude? Seriously? I can buy it costs 2x or 3x. But an additional 2 or 3 zeros on the price? pgp_PXDy5bSuP.pgp Description: PGP signature

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
> On Dec 4, 2014, at 11:21 AM, valdis.kletni...@vt.edu wrote: > > On Thu, 04 Dec 2014 11:17:34 -0800, Bill Woodcock said: >> the RPKI costs are many orders of magnitude higher > > Orders of magnitude? Seriously? I can buy it costs 2x or 3x. > But an additional 2 or 3 zeros on the price? Yep,

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Jared Mauch
> On Dec 4, 2014, at 2:19 PM, John Curran wrote: > > On Dec 4, 2014, at 1:19 PM, Jared Mauch wrote: >> >> I (similar to Rob) have my own concerns about RPKI but do feel that >> this is an ARIN specific construct/wall that has been raised without >> action yet from ARIN. > > Jared - > > P

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Andrew Gallo
Am I correct in thinking that the SIDR work going on in the IETF takes the registries out of the real-time processing of route authentication/attestation? Is RPKI a stop-gap while we wait for full path validation? Should we be focusing our energies in that area? On Thu, Dec 4, 2014 at 2:19 PM, S

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
On 12/4/14, 1:34 PM, "Bill Woodcock" wrote: >I’ve asked a lot of people, “Would you be willing to pay ARIN for RPKI >services,” and the answer has always been “no.” Until I get a “yes,” >it’s hard to put a number (other than zero) on how the market values >RPKI. WG] well, if it wasn't clear fr

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
On Dec 4, 2014, at 11:33 AM, Jared Mauch wrote: > the fact it’s taken 3 months to reach the board is of concern Jared, ARIN is now nine years in to applying thrust to this pig. The board does in fact revisit it with some frequency, since it’s expensive and the primary thing blocking other sof

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Valdis . Kletnieks
On Thu, 04 Dec 2014 11:28:42 -0800, Bill Woodcock said: > > On Dec 4, 2014, at 11:21 AM, valdis.kletni...@vt.edu wrote: > > Orders of magnitude? Seriously? I can buy it costs 2x or 3x. > > But an additional 2 or 3 zeros on the price? > Yep, thats why all this is at issue. If it were cheap, and

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
On 12/4/14, 2:34 PM, "Andrew Gallo" wrote: >Am I correct in thinking that the SIDR work going on in the IETF takes the >registries out of the real-time processing of route >authentication/attestation? WG] no, but they're at least discussing ways of making the dependencies less fragile and more s

RE: Cisco CCNA Training (Udemy Discounted Training)

2014-12-04 Thread Bacon Zombie
Anybody got codes valid for December? On 14 Nov 2014 18:07, "Wakefield, Thad M." wrote: > Since there was some interest in the Udemy CCNA training, I'll risk > forwarding these additional discounts: > > Remember that this is ONLY for the month of NOVEMBER! > *** CCNA Course is now $24 with coupon

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread George, Wes
On 12/4/14, 2:19 PM, "Sandra Murphy" wrote: >Which begs the question for me -- ARIN already operates services that >operators rely upon. Why are they different? Does ARIN run no risk of >litigation due to some perceived involvement of those services in >someone's operational outage? WG] I'm h

Re: Cisco CCNA Training (Udemy Discounted Training)

2014-12-04 Thread Eric Litvin
have some juniper but not cisco. On Thu, Dec 4, 2014 at 12:08 PM, Bacon Zombie wrote: > Anybody got codes valid for December? > On 14 Nov 2014 18:07, "Wakefield, Thad M." > wrote: > > > Since there was some interest in the Udemy CCNA training, I'll risk > > forwarding these additional discounts

Re: Cisco CCNA Training (Udemy Discounted Training)

2014-12-04 Thread Paul S.
Share them anyway? Juniper's certs have enough demand as well :) On 12/5/2014 午前 05:13, Eric Litvin wrote: have some juniper but not cisco. On Thu, Dec 4, 2014 at 12:08 PM, Bacon Zombie wrote: Anybody got codes valid for December? On 14 Nov 2014 18:07, "Wakefield, Thad M." wrote: Since th

RE: Anybody at Amazon AWS?

2014-12-04 Thread Teleric Team
> From: amitch...@isipp.com > Subject: Anybody at Amazon AWS? > Date: Thu, 4 Dec 2014 09:15:36 -0700 > To: nanog@nanog.org > > Anybody have a contact at Amazon AWS? > > I sent in a spam complaint, and got back the below response - while I give > them kudos for actually, you know, responding, I

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Bill Woodcock
This pig is less aerodynamic, and fewer people are pushing. In-addr DNS and whois are simple and well-understood protocols, with many programmer-years of software development behind them. The problem isn't the marginal cost of a single transaction, that might only be one or two orders of mag

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread Jared Mauch
> On Dec 4, 2014, at 2:41 PM, Bill Woodcock wrote: > > > On Dec 4, 2014, at 11:33 AM, Jared Mauch wrote: >> the fact it’s taken 3 months to reach the board is of concern > > Jared, ARIN is now nine years in to applying thrust to this pig. The board > does in fact revisit it with some freque

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 2:33 PM, Jared Mauch wrote: > > the fact it’s taken 3 months to reach the board is of concern to me for an > issue > that was raised (prior to the October meeting) by operators, andwhere you > were an active part of the discussion afterwards in the back of the plenary > room.

Re: DWDM Documentation

2014-12-04 Thread Roy Hirst
Replying offline to Theo. Schwer zu finden. Roy *Roy Hirst* | 425-556-5773 | 425-324-0941 cell XKL LLC | 12020 113th Ave NE, Suite 100 | Kirkland, WA 98034 | USA On 12/4/2014 5:21 AM, Theo Voss wrote: Hi guys, we, a Berlin / Germany based carrier, are looking for a smart documentation (shelfs

Re: determine relationship between the operators based on import and export statements in aut-num object?

2014-12-04 Thread Martin T
Hi, thanks! I guess one of the most exhaustive and freely-available route-views data to analyze is from RIPE Routing Information Service project? For example if I would like to analyze a certain prefix announced by a certain AS for time period from 1.11.2014 to 30.11.2014, then I should download r

Re: ARIN's RPKI Relying agreement

2014-12-04 Thread John Curran
On Dec 4, 2014, at 2:19 PM, Sandra Murphy wrote: > ... > Which begs the question for me -- ARIN already operates services that > operators rely upon. Why are they different? Does ARIN run no risk of > litigation due to some perceived involvement of those services in someone's > operational ou