Re: softlayer.com

2019-03-22 Thread Brian Rak
I've been trying to reach them regarding an abuse issue, and have similarly had no actual luck in reaching their abuse/noc contacts. On 3/21/2019 9:07 PM, and...@paolucci.ca wrote: SoftLayer was aquirred by IBM, maybe reaching out to their NOC or support would be fruitful. IBM's DNS team is ind

Microsoft SNDS contact

2019-07-03 Thread Brian Rak
We've been trying to get SNDS access for our IP space, and we keep running into issues where the SNDS site is unable to determine what emails it should use to authorize access.  SNDS support has so far been very unhelpful, they keep trying to tell us to submit the space as individual /24's, whi

Re: [EXTERNAL] Re: Microsoft SNDS contact

2019-07-03 Thread Brian Rak
On 7/3/2019 10:09 AM, Hansen, Christoffer wrote: On 03/07/2019 15:50, Hansen, Christoffer wrote: https://sendersupport.olc.protection.outlook.com/snds/addnetwork.aspx E.g. with asn 20473. Key that in. I can select the address fetched from a background WHOIS lookup by MS Smart Network Data Ser

Re: [EXTERNAL] Re: Microsoft SNDS contact

2019-07-03 Thread Brian Rak
;s a chance. Udeme Postmaster at Wish On Wed, Jul 3, 2019 at 10:14 AM Brian Rak <mailto:b...@gameservers.com>> wrote: On 7/3/2019 10:09 AM, Hansen, Christoffer wrote: > On 03/07/2019 15:50, Hansen, Christoffer wrote: >> https://sendersupport.olc.protection.out

Comcast postmaster?

2016-07-11 Thread Brian Rak
Is there anyone here that can put me in touch with a Comcast mail server administrator? It seems that they've firewalled off some of our IPv6 space, and I can't seem to find any contact information. Interestingly, I can't even fill out their blocklist removal form, because it only accepts IPv

Re: Comcast postmaster?

2016-07-12 Thread Brian Rak
Taken care of, thanks! On 7/11/2016 2:46 PM, Brian Rak wrote: Is there anyone here that can put me in touch with a Comcast mail server administrator? It seems that they've firewalled off some of our IPv6 space, and I can't seem to find any contact information. Interestingly, I

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-22 Thread Brian Rak
On 9/22/2016 8:10 AM, Baldur Norddahl wrote: On 22 September 2016 at 10:42, Alexander Maassen wrote: So you ignore/don't deal with the abuse coz it's shipped in a format you refuse to handle? And you don't even bother telling the reporter you would like it in a per ip format? Or make attemp

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-22 Thread Brian Rak
out those IPs from whatever log that they send you? And how much time would processing say 50 individual emails take compared to 50 IPs in a single email? --srs On 22-Sep-2016, at 6:58 PM, Brian Rak <mailto:b...@gameservers.com>> wrote: We've also started ignoring their abu

AltDB bouncing emails

2018-05-15 Thread Brian Rak
I've been trying to get some super old entries removed from altdb, however the db-admin email bounces: The mail system : host pobox.rubinbroadcasting.com[65.50.205.32] said: 550     5.7.1 Unable to relay (in reply to RCPT TO command) Is there another contact here? Also, if anyone from Inter

Re: ALTDB - Getting records removed

2018-05-16 Thread Brian Rak
Are you referring to auto-dbm@ email, or the db-admin@ one?  I emailed db-admin@ about 15 hours ago, and haven't heard back (although it didn't bounce this time!)  Not sure what sort of response time to expect from a free service though. On 5/16/2018 12:17 PM, mike.l...@gmail.com wrote: As s

Level3 IRR contact

2018-09-17 Thread Brian Rak
I'm trying to get some old IRR objects removed from the LEVEL3 database, and not having much luck. Their support guys silently closed my ticket and then had our account manager email us directly basically saying "we don't what you want us to do". I used to use routing@level3 to get this done

Centurylink SOC contact?

2018-03-13 Thread Brian Rak
Does anyone have a contact for the SOC at centurylink?  I've tried soc@centurylink and noc@centurylink, with no answer. For whatever reason, they're mangling IP address in abuse reports, which requires us to manually review every report.  We'd really like them to stop, and just include the IP

Re: TWC (AS11351) blocking all NTP?

2014-02-03 Thread Brian Rak
Huh? The issue with NTP relates to the monlist command (and a few others). These are management queries, and are not critical to the operation of a NTP server. You can disable these quite easily, and still run a NTP server that provides accurate time services. On 2/3/2014 9:14 AM, TGLASSEY

Re: TWC (AS11351) blocking all NTP?

2014-02-03 Thread Brian Rak
On 2/3/2014 2:46 PM, Dobbins, Roland wrote: On Feb 4, 2014, at 12:11 AM, Brian Rak wrote: You can disable these quite easily, and still run a NTP server that provides accurate time services. Concur 100% - although it should be noted that 1:1 reflection without any amplification is also

Re: looking for a tool...

2014-02-04 Thread Brian Rak
pmacct On 2/4/2014 12:34 AM, Mike wrote: Hello, I was wondering if anyone could point me in the direction of a tool capable of sniffing (or reading pcap files), and reporting on lan station thruput in terms of bits per second. Ideally I'd like to be able to generate a sorted report of th

Re: OpenNTPProject.org

2014-02-16 Thread Brian Rak
Seriously, just fix your configuration. The part of NTP being abused is completely unrelated to actually synchronizing time. It's a management query, that has no real reason to be enabled remotely. You don't even need to resort to iptables for this, because NTPD has built in rate limiting (wh

Re: OpenNTPProject.org

2014-02-17 Thread Brian Rak
gh, you'll still see the incoming garbage for awhile, but NTPD will just discard it so it shouldn't cause problems). On 2/17/2014 2:23 AM, Pete Ashdown wrote: On 2/16/14, 7:38 PM, Brian Rak wrote: Seriously, just fix your configuration. The part of NTP being abused is co

Re: NTP DRDos Blog post

2014-02-20 Thread Brian Rak
That's not a new term. http://en.wikipedia.org/wiki/DRDOS DRDoS, a type of network attack named Distributed Reflection Denial of Service. http://en.wikipedia.org/wiki/Distributed_Reflection_Denial_of_Service#Reflected_.2F_Spoofed_attack On 2/20/2014 11:14 AM, Niels Bakker wrote: * st...@ntp.o

Re: Question for service providers regarding tenant use of public IPv4 on your infrastructure

2014-04-29 Thread Brian Rak
On 4/28/2014 4:18 PM, Cliff Bowles wrote: (accidentally sent this to nanog-request earlier, sorry if there is a double post) We are an enterprise and we do not yet have a sophisticated service-provider model yet for billing, capacity-management, or infrastructure consumption. We have a few v

Re: crave your indulgence

2014-05-27 Thread Brian Rak
This seems like a perfect use for ATLAS: https://atlas.ripe.net/ On 5/27/2014 2:28 PM, manning bill wrote: If you wouldn’t mind a quick tracerooute - Can you confirm reachability to the following: 2001:500:84::b Thanks in advance. /bill Neca eos omnes. Deus suos agnoscet.

Re: ipmi access

2014-06-02 Thread Brian Rak
The kernel is the least of your worries here. This is what you can expect from the Supermicro controllers: Linux Kernel 2.6.17.13 Lighttpd 1.4.32 pcre 8.31 pcre 8.33 msmtp 1.4.16 tree 1.5.2.2 flex 2.5.35 readline 5.2 termcap 1.3.1 BIND 9.8.1-P1 busybox 1.12.0 ntp 4.2.4p4 openssl 0.9.8h openlldp

Re: ipmi access

2014-06-02 Thread Brian Rak
They do publish it. The problem is, it's not documented, and it takes a bunch of work to get into a usable state.See ftp://ftp.supermicro.com/GPL/SMT/SDK_SMT_X9_317.tar.gz Plus, the firmware environment is pretty hostile. If you flash some bad firmware, your only option is to desolder th

Re: ipmi access

2014-06-02 Thread Brian Rak
On 6/2/2014 3:47 PM, shawn wilson wrote: On Mon, Jun 2, 2014 at 3:19 PM, Nikolay Shopik wrote: Java only used for mouting images. KVM is transfered via VNC protocol iirc. They're not re-inventing the wheel, but I think KVM is generally some VNC stream embedded in http(s) which VNC clients ca

Re: where to go to understand DDoS attack vector

2014-08-26 Thread Brian Rak
On 8/26/2014 12:52 PM, me wrote: On 08/26/2014 07:58 AM, Roland Dobbins wrote: On Aug 26, 2014, at 8:37 PM, John York wrote: In this case, 17 is both the protocol and port number. Confusing coincidence :) Not in this output which the OP sent to the list: 8:33:58.482193 IP (tos 0x0, ttl 5

Re: where to go to understand DDoS attack vector

2014-08-26 Thread Brian Rak
On 8/26/2014 8:28 PM, Larry Sheldon wrote: On 8/26/2014 08:31, Roland Dobbins wrote: On Aug 26, 2014, at 8:26 PM, Stephen Satchell wrote: qotd17/udp quote No, that's the protocol number - 17 is UDP - not the port number. Really? http://en.wikipedia.org/wiki/List_o

Re: large BCP38 compliance testing

2014-10-02 Thread Brian Rak
On 10/2/2014 6:10 AM, Mikael Abrahamsson wrote: Hi, To fix a lot of the DDOS attacks going on, we need to make sure BCP38 compliance goes up. Only way to do this I can think of, is large scale BCP38 testing. One way of doing this, is to have large projects such as OpenWRT, RIPE Atlas project

Re: Reporting DDOS reflection attacks

2014-11-09 Thread Brian Rak
Also, abusix is not completely accurate (and they've never responded to my emails reporting problems). For example, any IPs from apnic and nic.ad.jp return the registry's abuse address, which doesn't do anything. Don't forget about all the providers with incorrect abuse contacts, or providers

Re: DDOS, IDS, RTBH, and Rate limiting

2014-11-22 Thread Brian Rak
On 11/22/2014 11:18 AM, Denys Fedoryshchenko wrote: On 2014-11-22 18:00, freed...@freedman.net wrote: We see a lot of Brocade for switching in hosting providers, which makes sFlow easy, of course. Oh, Brocade, recent experience with ServerIron taught me new lesson, that i can't do bonding on p

Re: Comcast residential DNS contact

2014-12-03 Thread Brian Rak
Shouldn't everyone be on IPv6 these days anyway ;) On 12/3/2014 10:28 AM, Jared Mauch wrote: So have A record queries. Do you filter those as well? Jared Mauch On Dec 3, 2014, at 9:08 AM, Stephen Satchell wrote: On 12/03/2014 04:04 AM, Niels Bakker wrote: * shortdudey...@gmail.com (Grant R

Re: EyeBall View

2015-10-26 Thread Brian Rak
So you've invented RIPE ATLAS? On 10/25/2015 3:49 PM, Dovid Bender wrote: All, I had an idea to create a product where we would have a host on every EyeBall network. Customers could then connect to these hosts and check connectivity back to their network. For instance you may want to see what

RADb Outage?

2016-01-22 Thread Brian Rak
whois.radb.net seems to have been down since sometime last night, has anyone else seen problems with this? It seems the web interface still works, but that's not very useful for scripts.

Re: Multiple vendors' IPv6 issues

2015-05-27 Thread Brian Rak
On 5/27/2015 3:20 PM, Jared Mauch wrote: On Tue, May 26, 2015 at 04:19:25PM -0700, David Sotnick wrote: Hi NANOG, The company I work for has no business case for being on the IPv6-Internet. However, I am an inquisitive person and I am always looking to learn new things, so about 3 years ago I

Microsoft SNDS contact with a clue?

2020-06-25 Thread Brian Rak via NANOG
Is there anyone around from Microsoft that can help me with a SNDS verification issue? I'm having problems where the verification system is trying to use the wrong WHOIS server, and the responses I'm getting from support don't really indicate they understand the issue. I also have a differen

Re: Microsoft SNDS contact with a clue?

2020-06-25 Thread Brian Rak via NANOG
o use it, but it's worth a shot. Udeme Postmaster at LinkedIn On Thu, Jun 25, 2020 at 12:00 PM Brian Rak via NANOG <mailto:nanog@nanog.org>> wrote: Is there anyone around from Microsoft that can help me with a SNDS verification issue? I'm having problems w