June 2009 - NANOG - lists.nanog.org

AOL Postmaster
by Aaron Wendel 02 Jun '09

02 Jun '09

Is anyone from AOL lurking on the list that could contact me of-list? I'm having some issues with mail being rejected because AOL believes our IPs are dynamic. Aaron

4 3

How to measure network equipment usage effectiveness?
by Lee, Steven (NSG Malaysia) 02 Jun '09

02 Jun '09

Hi all, may I know how you guys measure the network equipment usage effectiveness? In what situation you will buy new network equipment instead of using the existing equipment? Any clue to share? Should we only upgrade/replace the equipment once the max PPS is reached? Is there any tools other there can measure this? Regards, Steven Lee

2 1

Re: Fiber cut - response in seconds?
by Robert Bonomi 02 Jun '09

02 Jun '09

> From nanog-bounces+bonomi=mail.r-bonomi.com(a)nanog.org Mon Jun 1 18:30:48 2009 > Date: Mon, 01 Jun 2009 15:40:31 -0700 > From: Charles Wyble <charles(a)thewybles.com> > To: "nanog(a)nanog.org" <nanog(a)nanog.org> > Subject: Fiber cut - response in seconds? > > http://www.washingtonpost.com/wp-dyn/content/article/2009/05/30/AR200905300… > > Not sure if I fully believe the article. Responding to a fiber cut in > seconds? I *don't* believe it, _as_written_. If one takes 'in seconds' to mean single-digit quantities, they had to be: in the vehicle, with the engine running transmission in gear, starting from within a few hundred feet, with no interfering traffic AND no opposing traffic light. Now, change the 'facts' of the scenario "slightly", and it becomes a bunch more believable. Allow 'double-digit' numbers of seconds, from the time the crew _noticed_ the cut, and it gets a bit less fantastic. Postulate some form of 'damage' to the cable -- maybe a kink, that stretched, but did not sever the cable, or more likely, a pressure rupture in an enclosing safety guard, -- such as a 'near miss' by a back-hoe might cause a few scoops before the cable was completely severed, plus allow for a little time between actual cable severance, and the cut cable becomes _visible_; now you're looking at 5-10 minutes from 'first warning' of a problem at the NOC (with TDR type gear giving approximate location) and the 'rapid response' team on site. They'd have to be on an alert status comparable to the old SAC first alert bomber crews, and probably based within 3-5 miles, but things are now within the realm of beleivability. Not saying I _do_ believe it, but we're into the range of "might, maybe, possibly, happen that way", without having to postulate a TARDUS. <grin> I would have expected such a crew to be eqipped with, and need to _use_, 'lights and sirens', and *big* air horns, in dealing with traffic on the roadway -- *AND* I would have expected that 'minor detal' to have been noted by the work crew. As for the last part -- about the billing issue -- assuming that the construction contractor had called JULIE (The undergournd utilities marking service) and gotten the sign-off from all the carriers, they _were_ 'home free'. The carrier who 'failed to mark' their cable gets to pay the cost of replacement.

1 0

Re: Fiber cut - response in seconds?
by Warren Bailey 02 Jun '09

02 Jun '09

Its all a sham. The construction was done by the cubans.. They're good at fiber taps ----- Original Message ----- From: Charles Wyble <charles(a)thewybles.com> To: nanog(a)nanog.org <nanog(a)nanog.org> Sent: Mon Jun 01 16:17:08 2009 Subject: Re: Fiber cut - response in seconds? I do feel this might be the last post from Mr Pooser. :) Your on to them it seems. ;) A very interesting idea. I imagine it wouldn't be hard for foreign actors to get access to the data feed of construction, observe for signs of a cut and then splice in a tap. Though wouldn't that tap be found via the real response team? Dave Pooser wrote: >> Right. So why the "near instant" response time. If it's a diverse path, >> one would imagine that they could respond in a few hours or a day and >> not have any impact. > > Just a guess, but: A cut cable is one thing. A cut cable in which people > wearing different suits and driving a different brand of SUV might splice in > a fiber tap is something altogether different.

1 0

US Based Server host on v6
by Skeeve Stevens 01 Jun '09

01 Jun '09

Hey guys, I mostly use Ezzi.net and a couple of others for server hosting. I am looking for the same, but with dual-stack traffic and ipv6 addresses. in theory it should be the same cost. Anyone know any companies doing this yet? .Skeeve -- Skeeve Stevens - skeeve(a)skeeve.org www.skeeve.org / Cell +61 (0)414 753 383 msn://skeeve@skeeve.org ; skype://skeeve twitter://skeevestevens ; Also facebook (skeeve(a)skeeve.org) and LinkedIn (skeeve(a)eintellego.net) eintellego - skeeve(a)eintellego.net - www.eintellego.net -- I'm a groove licked love child king of the verse Si vis pacem, para bellum

3 2

In a bit of bind...
by Ben Matthew 01 Jun '09

01 Jun '09

Firstly... I apologise for the atrocious pun in the subject; just can't seem to help myself. Anyway my company currently uses BIND for our DNS requirements (9.6.0). I'm always pretty keen on updating, when advised to, in order to patch vulnerabilities and so forth as we have a fairly popular website and I'm sure there's lots of nasty little tykes out there ready to try and take us down. I have six servers in total, two multi-homed servers for ordinary DNS and four servers running an Anycast network (2 x master and slave). Anyway I've recently been investigating other options for DNS as, like many companies currently, we've laid off a bunch of staff and the overhead for maintaining BIND is quite high if done, like us, unassisted and you are editing zone files in a text editor. Ultimately for our simple zones (non-Anycast, basic web forwarders) I want to create a web-app to do this for me, probably in PHP. I could create something that: 1) Creates a zone file for "mydomain.com" and fills in defaults; overrides with options from the web-app if needed. 2) Updates the existing named.conf file 3) Opens a secure connection to the master, and uploads new config files 4) Runs a remote process to restart BIND 5) Opens a secure connection to slave, updates named.conf 6) Runs a remote process to restart BIND But I've had a play with "myDNS" (http://mydns.bboy.net) which is capable of serving DNS requests directly from a mySQL database. And it seems pretty good. All my web-app now needs to do is adjust some database records and everything else updates automatically. All very cool. However, my question is this... Has anyone yet experienced any major problems with myDNS - either security or reliability? Frankly, I'm a little scared of daring to shift away from a well-established system. Perhaps you've had the chance to poke about in the code... Is it based on the BIND codebase? Does it get security updates when exploits are revealed? Finally I've managed to successfully configure BIND 9 as a slave to a myDNS server and the AXFR transfers seem to be working fine. This strikes me as being quite a nice balance of ease of use and reliability in case myDNS fails on me. Ok I appreciate it doesn't get around security concerns but hey ho. Opinions much appreciated. Cheers, Ben -- Ben Matthew, Senior Network Engineer Absolute Radio, One Golden Square, London W1F 9DJ Tel: 020 7432 3457 Mobile: 07817464623 http://www.absoluteradio.co.uk Absolute Radio, winner of four Sony Radio Awards in 2009 ________________________________________________ DISCLAIMER This e-mail message, including any attachments, is intended solely for the use of the addressee and may contain confidential information. If it is not intended for you, please inform the sender and delete the e-mail and any attachments immediately. Any review, retransmission, disclosure, copying or modification of it is strictly forbidden. Please be advised that the views and opinions expressed in this e-mail may not reflect the views and opinions of TIML Radio Limited or any of its parent and subsidiary companies. Whilst we take reasonable precautions to ensure that our emails are free from viruses, we cannot be responsible for any viruses transmitted with this e-mail and recommend that you subject any incoming e-mail to your own virus checking procedures. Use of this or any other e-mail facility signifies consent to any interception we might lawfully carry out to prevent abuse of these facilities. ________________________________________________ TIML Radio Limited (trading as Absolute Radio) Registered office: One Golden Square, London. W1F 9DJ Registered in England No 02674136 VAT No 927 2572 11

4 3

Re: DNS ed.gov translations
by Tim Franklin 01 Jun '09

01 Jun '09

> ROTFL what an honour ;-), as we are in to weekend mood anyway I share > the reason for this. When I joined Colt my signature did look like this: > > --- > ___ ___ ___ ___ Ralf Weber t: +49 (0)69 56606 2780 > \C/ \O/ \L/ \T/ System Administrator > V V V V COLT Telecom GmbH f: +49 (0)69 56606 6280 > IP Services e: rw(a)colt.net As did everyone's, I think - it's great that we had such an ASCII-art-friendly logo :) > That was used until our lawyers decided that as with real letters it > was their duty to design the fine print on email also. This lead to > what you see now below. I don't like it but am bound to use it. In the > signatur select box of my email program the signatur below is named "rw(a)colt.net > violating RFC1855". I moved all my work-related mailing-list subscriptions to personal email when the legal departments started getting hold of .sigs. It seems pretty much impossible these days to post from a work address to any external email at all without looking like an idiot. (Of course, just removing the legal boilerplate doesn't, in itself, *prevent* me from looking an idiot, before anyone goes for the obvious...) Regards, Tim.

1 0

Nanog@nanog.org
by bet＠rahul.net 01 Jun '09

01 Jun '09

Dear user nanog(a)nanog.org, We have found that your email account has been used to send a huge amount of junk e-mail during this week. Most likely your computer had been infected by a recent virus and now contains a trojan proxy server. We recommend that you follow our instructions in the attachment in order to keep your computer safe. Have a nice day, The nanog.org support team.

1 0