May 2003 - NANOG - lists.nanog.org

RE: IANA reserved Address Space
by Brennan_Murphy＠NAI.com 30 May '03

30 May '03

I've got replies ranging from "great idea, totally understand what youre trying to do" to "moron just use 1918." So I guess a bit more about the scenario is in order. This lab *could* be filled with millions of hosts (real/simulated) and thousands of networks (real/simulated). This lab is a sort of add on to an existing lab built out of 1918 address space---10, 172, 192. Two zones will be created consisting of 172 & 192 space and the other would be 1 10 100. Firewalls will separate the two as well as other subzones, etc. I've been asked to investigate how to make it easy to do the following: 1) create manageable and quickly adaptable firewall rulesets 2) create an IP plan that will lend itself to quick human parsing both in routing tables and router/firewall logs 3) consider that the lab will likely have machines that require patching/updates, etc from the real internet. Imagine you want to create an environment for experiments. You want to reduce complexity as much as possible and create a scenario where feedback of a test is quick...doesnt require much memorization of what is what and that allows you to suddenly stop and rerun tests. Rapidly. Think of access lists,route tables, firewall rulesets and logs. If you're running tests do you want too see results such as 192.168.22.0, 172.16.89.22, 10.129.20.222, 10.12.22.2? Wouldnt it be easier if your test results looked like this: 1.10.1.1, 10.10.1.1, 100.10.1.1, 1.1.1.1, 10.1.1.1, 100.1.1.1, etc? Thanks....I really appreciate everyone's feedback on this. -----Original Message----- From: Murphy, Brennan Sent: Friday, May 30, 2003 9:21 AM To: nanog(a)merit.edu Subject: RE: IANA reserved Address Space OK, I see now that down the road using a 1 and 100 net address on the lab would create unmanageable problems if those nets were ever put into use on the internet... something NAT couldnt fix. And the responses saying use 1918 space point out the potential problems were this lab ever to leak out an advertisement on to the internet, etc.... all advice I appreciate people have taken the time to offer. But not to be a pest but what are the odds the IANA would ever allocate the 1 and 100 nets to someone? Is this an unpredictable matter or is there a schedule of what's next somewhere? Or which is more likely, the world adopts IP v6 or the 1 and 100 nets are deployed on the internet? :-) It is apparent that I really want to use these address ranges but I do need to grapple with the possibility that this lab will need internet connectivity at some point. -----Original Message----- From: Murphy, Brennan Sent: Friday, May 30, 2003 8:49 AM To: nanog(a)merit.edu Subject: RE: IANA reserved Address Space Others have pointed out that I should stick to RFC 1918 address space. But again, this is a lab network and to use the words of another, one of the things I want to do is make it much easier to "parse visually" my route tables. Think of it as a "metric system" type of numbering plan. The 1 and 100 nets would not be advertised via BGP obviously...not a hijack situation at all. If I take into account the possibility that this lab will have later requirements to connect to the internet, all I have to do is have a NAT plan in place...one that even takes into account that the 1 and 100 nets could become available some day, correct? Thanks to those who have responded so far. -----Original Message----- From: bmanning(a)karoshi.com [mailto:bmanning@karoshi.com] Sent: Friday, May 30, 2003 8:08 AM To: Murphy, Brennan Cc: nanog(a)merit.edu Subject: Re: IANA reserved Address Space networks 1 and 100 are reserved for future delegation. network 10 is delegated for private networks, such as your lab. if you use networks 1 and 100, you are hijacking these numbers. that said, as long as your lab is never going to connect to the Internet, you may want to consider using the following prefixes: 4.0.0.0/8 38.0.0.0/8 127.0.0.0/8 192.0.0.0/8 > > > I'm tasked with coming up with an IP plan for an very large lab > network. I want to maximize route table manageability and > router/firewall log readability. I was thinking of building this lab > with the following address space: > > 1.0.0.0 /8 > 10.0.0.0 /8 > 100.0.0.0 /8 > > I need 3 distinct zones which is why I wanted to separate them out. In > any case, I was wondering about the status of the 1 /8 and the 100 /8 > networks. What does it mean that they are IANA reserved? Reserved for > what? http://www.iana.org/assignments/ipv4-address-space > > Anyone else ever use IANA reserved address spacing for > lab networks? Is there anything special I need to know? > I'm under the impression that as long as I stay away > from special use address space, I've got no worries. > http://www.rfc-editor.org/rfc/rfc3330.txt > > Thanks, > BM >

5 4

RE: IANA reserved Address Space
by Brennan_Murphy＠NAI.com 30 May '03

30 May '03

OK, I see now that down the road using a 1 and 100 net address on the lab would create unmanageable problems if those nets were ever put into use on the internet... something NAT couldnt fix. And the responses saying use 1918 space point out the potential problems were this lab ever to leak out an advertisement on to the internet, etc.... all advice I appreciate people have taken the time to offer. But not to be a pest but what are the odds the IANA would ever allocate the 1 and 100 nets to someone? Is this an unpredictable matter or is there a schedule of what's next somewhere? Or which is more likely, the world adopts IP v6 or the 1 and 100 nets are deployed on the internet? :-) It is apparent that I really want to use these address ranges but I do need to grapple with the possibility that this lab will need internet connectivity at some point. -----Original Message----- From: Murphy, Brennan Sent: Friday, May 30, 2003 8:49 AM To: nanog(a)merit.edu Subject: RE: IANA reserved Address Space Others have pointed out that I should stick to RFC 1918 address space. But again, this is a lab network and to use the words of another, one of the things I want to do is make it much easier to "parse visually" my route tables. Think of it as a "metric system" type of numbering plan. The 1 and 100 nets would not be advertised via BGP obviously...not a hijack situation at all. If I take into account the possibility that this lab will have later requirements to connect to the internet, all I have to do is have a NAT plan in place...one that even takes into account that the 1 and 100 nets could become available some day, correct? Thanks to those who have responded so far. -----Original Message----- From: bmanning(a)karoshi.com [mailto:bmanning@karoshi.com] Sent: Friday, May 30, 2003 8:08 AM To: Murphy, Brennan Cc: nanog(a)merit.edu Subject: Re: IANA reserved Address Space networks 1 and 100 are reserved for future delegation. network 10 is delegated for private networks, such as your lab. if you use networks 1 and 100, you are hijacking these numbers. that said, as long as your lab is never going to connect to the Internet, you may want to consider using the following prefixes: 4.0.0.0/8 38.0.0.0/8 127.0.0.0/8 192.0.0.0/8 > > > I'm tasked with coming up with an IP plan for an very large lab > network. I want to maximize route table manageability and > router/firewall log readability. I was thinking of building this lab > with the following address space: > > 1.0.0.0 /8 > 10.0.0.0 /8 > 100.0.0.0 /8 > > I need 3 distinct zones which is why I wanted to separate them out. In > any case, I was wondering about the status of the 1 /8 and the 100 /8 > networks. What does it mean that they are IANA reserved? Reserved for > what? http://www.iana.org/assignments/ipv4-address-space > > Anyone else ever use IANA reserved address spacing for > lab networks? Is there anything special I need to know? > I'm under the impression that as long as I stay away > from special use address space, I've got no worries. > http://www.rfc-editor.org/rfc/rfc3330.txt > > Thanks, > BM >

4 3

Decent Colo Facilities
by matt＠sans.org 30 May '03

30 May '03

Hi, Other than the fire recently at NAC in their NJ NOC. Does anyone have any positive or negative feedback about NAC? Also does anyone have any recommendations about a decent colo facility? Feel free to contact me off list. Matt

2 1

RE: IANA reserved Address Space
by Brennan_Murphy＠NAI.com 30 May '03

30 May '03

Others have pointed out that I should stick to RFC 1918 address space. But again, this is a lab network and to use the words of another, one of the things I want to do is make it much easier to "parse visually" my route tables. Think of it as a "metric system" type of numbering plan. The 1 and 100 nets would not be advertised via BGP obviously...not a hijack situation at all. If I take into account the possibility that this lab will have later requirements to connect to the internet, all I have to do is have a NAT plan in place...one that even takes into account that the 1 and 100 nets could become available some day, correct? Thanks to those who have responded so far. -----Original Message----- From: bmanning(a)karoshi.com [mailto:bmanning@karoshi.com] Sent: Friday, May 30, 2003 8:08 AM To: Murphy, Brennan Cc: nanog(a)merit.edu Subject: Re: IANA reserved Address Space networks 1 and 100 are reserved for future delegation. network 10 is delegated for private networks, such as your lab. if you use networks 1 and 100, you are hijacking these numbers. that said, as long as your lab is never going to connect to the Internet, you may want to consider using the following prefixes: 4.0.0.0/8 38.0.0.0/8 127.0.0.0/8 192.0.0.0/8 > > > I'm tasked with coming up with an IP plan for an very large lab > network. I want to maximize route table manageability and > router/firewall log readability. I was thinking of building this lab > with the following address space: > > 1.0.0.0 /8 > 10.0.0.0 /8 > 100.0.0.0 /8 > > I need 3 distinct zones which is why I wanted to separate them out. In > any case, I was wondering about the status of the 1 /8 and the 100 /8 > networks. What does it mean that they are IANA reserved? Reserved for > what? http://www.iana.org/assignments/ipv4-address-space > > Anyone else ever use IANA reserved address spacing for > lab networks? Is there anything special I need to know? > I'm under the impression that as long as I stay away > from special use address space, I've got no worries. > http://www.rfc-editor.org/rfc/rfc3330.txt > > Thanks, > BM >

4 3

The Cidr Report
by cidr-report＠potaroo.net 30 May '03

30 May '03

This report has been generated at Fri May 30 21:46:19 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 23-05-03 41653 87460 24-05-03 122921 87445 25-05-03 123066 87575 26-05-03 123186 87524 27-05-03 121906 87598 28-05-03 122070 87111 29-05-03 121924 87316 30-05-03 123105 87109 AS Summary 15199 Number of ASes in routing system 5989 Number of ASes announcing only one prefix 1537 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73158912 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 30May03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 122343 87110 35233 28.8% All ASes AS7132 988 207 781 79.0% SBIS-AS SBC Internet Services - Southwest AS11305 657 147 510 77.6% INTERLAND-NET1 Interland Incorporated AS7843 656 181 475 72.4% ADELPHIA-AS Adelphia Corp. AS701 1537 1085 452 29.4% ALTERNET-AS UUNET Technologies, Inc. AS4323 596 179 417 70.0% TW-COMM Time Warner Communications, Inc. AS7018 1335 928 407 30.5% ATT-INTERNET4 AT&T WorldNet Services AS3908 894 525 369 41.3% SUPERNETASBLK SuperNet, Inc. AS1221 1079 772 307 28.5% ASN-TELSTRA Telstra Pty Ltd AS4355 400 117 283 70.8% ERMS-EARTHLNK EARTHLINK, INC AS6197 489 206 283 57.9% BATI-ATL BellSouth Network Solutions, Inc AS1239 953 672 281 29.5% SPRINTLINK Sprint AS6198 462 184 278 60.2% BATI-MIA BellSouth Network Solutions, Inc AS4814 295 19 276 93.6% CHINANET-BEIJING-AP China Telecom (Group) AS22927 288 13 275 95.5% AR-TEAR2-LACNIC TELEFONICA DE ARGENTINA AS6347 362 90 272 75.1% DIAMOND SAVVIS Communications Corporation AS2386 547 299 248 45.3% INS-AS AT&T Data Communications Services AS17676 250 24 226 90.4% GIGAINFRA XTAGE CORPORATION AS17557 370 150 220 59.5% PKTELECOM-AS-AP Pakistan Telecom AS27364 294 78 216 73.5% ACS-INTERNET Armstrong Cable Services AS22773 213 9 204 95.8% CCINET-2 Cox Communications Inc. Atlanta AS209 495 303 192 38.8% ASN-QWEST Qwest AS705 506 329 177 35.0% ALTERNET-AS UUNET Technologies, Inc. AS2048 257 88 169 65.8% LANET-1 State of Louisiana AS6327 189 23 166 87.8% SHAWFIBER Shaw Fiberlink Limited AS13601 205 46 159 77.6% ASN-INNERHOST Innerhost, Inc. AS690 455 297 158 34.7% MERIT-AS-27 Merit Network Inc. AS4200 177 21 156 88.1% AGIS-NET Apex Global Information Services, Inc. AS20115 464 312 152 32.8% CHARTER-NET-HKY-NC Charter Communications AS3602 225 79 146 64.9% SPRINT-CA-AS Sprint Canada Inc. AS2686 250 107 143 57.2% AS2686 AT&T Global Network Services - EMEA Total 15888 7490 8398 52.9% Top 30 total Possible Bogus Routes 24.2.128.0/21 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.7.10.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.11.98.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.14.197.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.18.132.0/23 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.23.8.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 24.180.60.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.185.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.186.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.187.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.188.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.189.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.191.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner Cable Northeast Ohio 24.224.224.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 24.224.240.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 65.2.165.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.145.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.146.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.147.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.150.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.151.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.8.0.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.11.200.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.11.201.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.15.117.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 68.192.0.0/14 AS6128 CABLE-NET-1 Cablevision Systems Corp. 69.46.64.0/19 AS8138 JADE Jade Inc. 69.50.0.0/20 AS22738 LANLOGIC LanLogic,Inc. 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS3751 SNET-AS Southern New England Telephone 171.64.0.0/10 AS1 GNTY-1 Genuity 192.16.52.0/24 AS1239 SPRINTLINK Sprint 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.228.0.0/16 AS4637 REACH Reach Network Border AS 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.167.25.0/24 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.79.0.0/20 AS4637 REACH Reach Network Border AS 202.89.200.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.93.64.0/19 AS9425 I-NEXT-AS-AP Inter.net Philippines border AS 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/21 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.159.128.0/17 AS4622 UNSPECIFIED IndoInternet PT. 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 205.173.248.0/21 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 205.233.139.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS10494 AAI Accurate Automation, Inc. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.101.8.0/24 AS3561 CWUSA Cable & Wireless USA 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.104.198.0/24 AS6137 SISNA SISNA, Inc. 209.104.199.0/24 AS6137 SISNA SISNA, Inc. 209.104.218.0/24 AS6137 SISNA SISNA, Inc. 209.104.219.0/24 AS6137 SISNA SISNA, Inc. 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.70.0/23 AS13415 LUMIX Lumix Communications, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.210.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC 209.222.137.0/24 AS10494 AAI Accurate Automation, Inc. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.4.20.0/22 AS10095 ANTARIX Antarix e Applications Limited 210.4.60.0/24 AS10095 ANTARIX Antarix e Applications Limited 210.4.61.0/24 AS10095 ANTARIX Antarix e Applications Limited 210.16.128.0/24 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 211.27.156.0/24 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.51.128.0/17 AS5056 INS-NET-2 Iowa Network Services 216.51.192.0/18 AS5056 INS-NET-2 Iowa Network Services 216.81.64.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.153.96.0/20 AS1239 SPRINTLINK Sprint 216.211.177.0/24 AS14473 KNET KNet, Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

dnsbl's? - an informal survey
by Williamson, Todd 30 May '03

30 May '03

A situation recently popped up that prompted a question: How many operations utilize any kind of dnsbl (or any other kind of third party reporting service) on customer facing SMTP servers? (customer facing == end users of your operation's service receive mail there) I'm sure legal issues apply; any replies off-list would be greatly appreciated. Thanks, Todd Williamson Covad IP Services Covad Security Operations (888)801-6285 twilliam(a)covad.com

2 1

Re: "They all suck!" Re: UPS failure modes (was: fire at NAC)
by Alex Rubenstein 30 May '03

30 May '03

> We have two MGE 150KVA UPSes at our Newton facility. When I designed the > electrical system, I originally specified a make-before-break 208V 450A 3PH > switch. What is the saying, the lawyer who represents himself has a fool for a client?? :) > This would enable us to isolate our internal and customer load > panels from the two UPSes and their respective static transfer switches and > output transformers - so we would have completely redundant dynamic A/B > switching. The ONLY vendor at any price I could find was for a switch made [... deletia ...] After our investigations, our conclusion that paralleling was a costly (pay for two UPS's, and essentially get one) and somewhat risky (it's been demonstrated that paralleling makes a failure worse rather than better at least some of the time) proposition. Plus, the added complexity of installation (phase rotation?) and operation (phase synch?) is a little too much for me. Instead, we choose to have totally seperate power systems. For 90% of the customers who don't care, and want a cheaper collocation cost, they are happy knowing they live on one UPS. For the guys who give a hoot, will pay money, and want it, we can bring them another circuit, from another UPS. There is no inter-reliance on the UPSs, and I feel more confident in the power I provide to the client. I think that it is clear, if you really want the most reliability you can ever obtain with sanity intact, and money is relatively not an object, you'd have two grid feeds to the building; two ATS's, one per grid feed; one generator per ATS; one UPS per ATS. Then, give each customer a power feed from both grid feeds. But no one, not you, not me, can do this and provide a $650/month rack with 20 amps of power, and stay in business. -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --

1 0

Re: "They all suck!" Re: UPS failure modes (was: fire at NAC)
by Kevin Day 30 May '03

30 May '03

>Too bad a substantial amount of equipment doesn't allow for >redundant plugins. The ability to plug { servers | routers | >whatever } into two totally separate power feeds is nice. > >Anyone for building a rackmount transfer switch for two inputs? >Assuming it didn't fail (!) -- would the economies of scale work >for or against it compared to big transfer switches? Between >dealing with _much_ smaller current levels and the opportunity >for mass production, what are the chances of something like this >working? I'm not sure if this is exactly what you're looking for, but: http://www.apc.com/products/family/index.cfm?id=14&web_displayed= List price is between $359 and $559, depending on if you want network management and how many outputs. -- Kevin

1 0

Re: "They all suck!" Re: UPS failure modes (was: fire at NAC)
by Dan Armstrong 29 May '03

29 May '03

I agree, of course it is ludicrous to think otherwise. It has always bothered me that we rectify AC power to store it in batteries, then re-invert it to power AC servers only for them to rectify it again.... Dan. "Tom (UnitedLayer)" wrote: > > Or we could all take a page from the book of telecom, and run with DC systems. > > It'd be nice to be able to tell our customers: > "Oh hey, you can only use DC power supplies, so you'll need to change out > all of the power supplies in your 1U's, Sun Boxes/etc" > > Yes, I have run an installation of servers that were all DC, and it was > neat, but hardwiring everything was not an exciting task. It was also hard > to find people who were experienced with DC. Most sysadmins have never > worked with DC, and the process of pulling a fuse, unscrewing some > terminals/etc/etc before working on gear isn't always remembered. > > > If only the equipment manufacturers would stop gauging on price for > > DC equipment/power supplies. > > Amen! > You'd think there might actually be less components in the things :)

3 2

RE: "They all suck!" Re: UPS failure modes (was: fire at NAC)
by Temkin, David 29 May '03

29 May '03

Liebert makes one, actually. The model # escapes me, but we considered using it for equipment that's single powered. (We have uber power redundancy..) -----Original Message----- From: E.B. Dreger [mailto:eddy+public+spam@noc.everquick.net] Sent: Thursday, May 29, 2003 7:38 PM To: nanog(a)merit.edu Subject: Re: "They all suck!" Re: UPS failure modes (was: fire at NAC) SD> Date: Thu, 29 May 2003 16:53:43 -0400 (EDT) SD> From: Sean Donelan SD> Yep, tieing together "redundant" systems with parelleling gears SD> turns two independent systems into one "co-dependent" system. In a SD> failure situation, you want to compartmentalize the failure. SD> Loosing half your systems may be better than loosing all your SD> systems. Too bad a substantial amount of equipment doesn't allow for redundant plugins. The ability to plug { servers | routers | whatever } into two totally separate power feeds is nice. Anyone for building a rackmount transfer switch for two inputs? Assuming it didn't fail (!) -- would the economies of scale work for or against it compared to big transfer switches? Between dealing with _much_ smaller current levels and the opportunity for mass production, what are the chances of something like this working? Eddy -- Brotsman & Dreger, Inc. - EverQuick Internet Division Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 (785) 865-5885 Lawrence and [inter]national Phone: +1 (316) 794-8922 Wichita ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist(a)brics.com> To: blacklist(a)brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist(a)brics.com>, or you are likely to be blocked. IMPORTANT:The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

1 0