May 2010 - NANOG - lists.nanog.org

Thailand Internet firewall?
by Drew Weaver 06 May '10

06 May '10

Hi, Is anyone aware whether or not Thailand has a centralized firewall on Internet access? We've had reports from several folks in Thailand that they are unable to get to some IP addresses in our network (this problem is reproducible on the traceroute.org Thailand sites as well). It seems to only be from Thailand, and only certain IPs on our network Does anyone know how to contact whoever is responsible for this firewall system to find out at the very least why this block is in place? thanks, -Drew

6 7

[NANOG-announce] NANOG 49 Call for Presentations now available
by David Meyer 05 May '10

05 May '10

Folks, After a great meeting in Austin, we're gearing up for NANOG 49. The NANOG 49 CFP is now available on http://www.nanog.org/meetings/nanog49/callforpresent.php Important dates include: Presentation Abstracts and Draft Slides Due: 09-Apr-2010 Final Slides Due: 07-May-2010 Draft Program Published: 13-May-2010 Final Agenda Published: 27-May-2010 Please submit your materials to http://pc.nanog.org Looking forward to seeing everyone in San Francisco. Dave (for the NANOG PC) _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

2 1

DNS performance...
by Donald Eastlake 05 May '10

05 May '10

Hi, There are a large number of DNS servers available. See for example http://en.wikipedia.org/wiki/Comparison_of_DNS_server_software Does anyone know of good performance comparisons, especially for high end applications with lots of data/zones and/or high query/update rates? Thanks, Donald ============================= Donald E. Eastlake 3rd +1-508-333-2270 (cell) 155 Beaver Street Milford, MA 01757 USA d3e3e3(a)gmail.com

6 8

Interesting combination of SPAM + Phishing + stupidity
by Jorge Amodio 05 May '10

05 May '10

this is obviously no news and the attachment as you all probably know is a trojan executable. The interesting part and kind of a test to determine who is more stupid, the one sending the message or the one opening and executing the attachment, the message is supposedly sent by UPS but signed as DHL Customer Service, sort of "Welcome to Wells Fargo, your Bank of America support team", duhhh. Also, almost 3 months to notify you that a package was not delivered ? Are spammers getting smarter ? or users getting dumber ? Cheers >From - Tue May 04 17:34:08 2010 >Return-Path: <anidiot(a)spamheaven.kom> >Delivery-Date: Tue, 04 May 2010 18:25:37 -0400 >From: "UPS Manager Sal Erwin" <help(a)ups.com> >To: <xyz(a)potential.moron.com> >Subject: UPS Delivery Problem NR 97981. >Date: Wed, 5 May 2010 00:25:03 +0100 >MIME-Version: 1.0 >Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0006_01CAEBD8.A43991A0" > >This is a multi-part message in MIME format. > >------=_NextPart_000_0006_01CAEBD8.A43991A0 >Content-Type: text/plain; > charset="Windows-1252" >Content-Transfer-Encoding: 7bit > >Hello! > >We failed to deliver the package you have sent on the 6th of February in time >because the recipient’s address is wrong. >Please print out the invoice copy attached and collect the package at our office. > >DHL Customer Services. > > >------=_NextPart_000_0006_01CAEBD8.A43991A0 >Content-Type: application/zip; > name="UPS_invoice_4978.zip" >Content-Transfer-Encoding: base64 >Content-Disposition: attachment; > filename="UPS_invoice_4978.zip"

2 1

Tobit software
by mkarir 05 May '10

05 May '10

Hello, We are working on a research project that is trying to identify the root cause of some stray network traffic we are seeing. If you run any software from Tobit and are willing to spare some time to help us track down the root cause of this traffic we would really appreciate your help. Please contact me offlist so that we can coordinate. Thanks -manish Network Research & Development Merit Network Inc.

1 0

Emulating ADSL bandwidth shaping
by Srikanth Sundaresan 04 May '10

04 May '10

I'm trying to model ADSL access link bandwidth shaping. With a link of 18Mbps, I'm using a token bucket filter (tc + netem) to model 10Mbps, 8Mbps and 2Mbps access plans. I have a couple of questions: - do ISPs typically use token bucket filters with large bursts to shape traffic? - what kind of burst sizes and latencies/limits are typically used for the filter? Thanks in advance, Srikanth

11 11

Re: Emulating ADSL bandwidth shaping
by Scott Weeks 04 May '10

04 May '10

--- swmike(a)swm.pp.se wrote: From: Mikael Abrahamsson <swmike(a)swm.pp.se> On Tue, 4 May 2010, Scott Weeks wrote: > "Interleaved" turned on to correct errors. This adds ~25msec between > the CPE and the nearest router. Sometimes folks ask for it to be > changed to "Fast". We explain that errors may cause resyncs to happen > and then make the change if the customer still wants it. That takes the : Never seen it cause resyncs, but that might happen, dunno. It definitely causes the DSLAM port to resync sometimes. : It is usually settable to 1,4,16 ms in each direction, so : 25ms is not a "law of nature", it's just the default 16/4 ms : downstream/upstream interleaving and then the added coding delay. We have to set it high because of the OSP. It goes through jungles. Literally. ;-) Some areas get 25-30mph winds every day with 300-400 inches of rain a year. http://www.nature.org/wherewework/northamerica/states/hawaii/preserves/art2… http://farm5.static.flickr.com/4054/4303747828_ce95aea13d.jpg scott

1 0

Re: Emulating ADSL bandwidth shaping
by Scott Weeks 04 May '10

04 May '10

--- cboyd(a)gizmopartners.com wrote: From: Chris Boyd <cboyd(a)gizmopartners.com> On May 4, 2010, at 7:27 AM, Marshall Eubanks wrote: > I am not sure what the point is in mixing in speed of light > latency. If your "typical sites" are, say, Indian cricket > blogs, you will typically have a high latency from the US. > What does that tell you about your DSL or Cable system, > except that it is somewhat removed from India ? : Most of the ADSL installations I've seen in SBC 13 state area : had interleaving turned on, which significantly increases latency. : I suspect that's why many cable MSOs in the same territory have : "cable is better for gaming" marketing campaigns running all the time. : : So the latency you see on an ADSL line is dependent on how the : carrier set up the DSLAM. In the system I work on, which is in a state with many rural areas and an OSP that goes through a lot of very wet and very windy areas, has "Interleaved" turned on to correct errors. This adds ~25msec between the CPE and the nearest router. Sometimes folks ask for it to be changed to "Fast". We explain that errors may cause resyncs to happen and then make the change if the customer still wants it. That takes the latency from ~25msec to ~3-4msec. So use both when doing your modeling. I don't know how to model the error rate, though, as that would be dependent on the quality of the OSP you're modeling... scott ps. if you're so fast in gaming that a difference of 1/5 of a second makes a difference you're good... ;-)

2 1

any "bring your own bandwidth" IPv4 over IPv4 tunnel merchants?
by Bill Bogstad 04 May '10

04 May '10

Like many people, I can't justify the expense of "commercial" IP connectivity for my residence. As a result, I deal with dynamic IP addresses; dns issues; and limitations on the services that I can host at my residence. It just struck me that in the same way that IPv6 connectivity can be done via tunneling over IPv4 (Hurricane Electric, etc.), that static IPv4 addressability could be offered in a similar fashion. Some my question is: Does anyone offer (probably bandwidth restricted) IPv4 over IPv4 tunneling (with static IPs) commercially? I realize that making use of such a service MIGHT violate Terms of Service agreements, but that is going to vary from provider to provider and doesn't make offering such a service inherently wrong. Other possible reasons such services might be desired include wanting access to Internet services which are regionally restricted. (Again TOS violation possibilities MAY or MAY NOT apply.) In the (very?) long term, IPv4 over IPv6 tunneling could end up being one way that organizations can get IPv4 connectivity when the default changes from only-IPv4 to only-IPv6. (Yeah, I know that day may never come...) Thanks, Bill Bogstad

9 10

Re: Emulating ADSL bandwidth shaping
by isabel dias 04 May '10

04 May '10

Is cable better for gamming? ----- Original Message ---- From: isabel dias <isabeldias1(a)yahoo.com> To: Chris Boyd <cboyd(a)gizmopartners.com>; NANOG <nanog(a)nanog.org> Sent: Tue, May 4, 2010 2:41:48 PM Subject: Re: Emulating ADSL bandwidth shaping same as in the HFC and QAM modulation values and so on and so forth ..... services that are requiring a connection-oriented service such as a gaming clan/cloud are highly affected when working in latency and jitter network based environments such as the ethernet based ones and SMDS ....... ----- Original Message ---- From: Chris Boyd <cboyd(a)gizmopartners.com> To: NANOG <nanog(a)nanog.org> Sent: Tue, May 4, 2010 2:19:39 PM Subject: Re: Emulating ADSL bandwidth shaping On May 4, 2010, at 7:27 AM, Marshall Eubanks wrote: > I am not sure what the point is in mixing in speed of light latency. If your "typical sites" are, say, > Indian cricket blogs, you will typically have a high latency from the US. What does that tell > you about your DSL or Cable system, except that it is somewhat removed from India ? Most of the ADSL installations I've seen in SBC 13 state area had interleaving turned on, which significantly increases latency. I suspect that's why many cable MSOs in the same territory have "cable is better for gaming" marketing campaigns running all the time. So the latency you see on an ADSL line is dependent on how the carrier set up the DSLAM. --Chris

3 2