June 2010 - NANOG - lists.nanog.org

Re: no you can't configure your router w/ this
by Adam LaFountain 23 Jun '10

23 Jun '10

> > sigh... where was this useful data 10 years ago! > > http://www.fcc.gov/worldtravel/ Even more entertaining is the "reboot.fcc.gov (Beta)" in the top right corner. I wonder if they have a reboot.ftc.gov link as well; that might actually be more useful.

3 3

Go Grid take two
by J. Oquendo 23 Jun '10

23 Jun '10

Thanks to all who responded, I was put in contact with someone. Apologies for the news. "We know return to our irregularly scheduled (de)programming. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 227C 5D35 7DCB 0893 95AA 4771 1DCE 1FD1 5CCD 6B5E http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E

1 0

GoGrid ... Going once... Going twice...
by J. Oquendo 23 Jun '10

23 Jun '10

After trying the usual channels (abuse@, security@) and LinkedIn, I decided to ask if anyone here has a security point of contact or network point of contact at GoGrid. Apologies for the low-level offtopic post. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 227C 5D35 7DCB 0893 95AA 4771 1DCE 1FD1 5CCD 6B5E http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E

1 0

Recommendation in Australia for ISPs to force user security?
by Gadi Evron 22 Jun '10

22 Jun '10

http://www.zdnet.com.au/make-zombie-code-mandatory-govt-report-339304001.htm "A government report into cybercrime has recommended that internet service providers (ISPs) force customers to use antivirus and firewall software or risk being disconnected. security Committee chair Belinda Neal said in her introduction to the 262-page report titled "Hackers, Fraudsters and Botnets: Tackling the Problem of Cyber Crime" that due to the exponential growth of malware and other forms of cybercrime in recent years, "the expectation that end users should or can bear the sole responsibility for their own personal online security is no longer a tenable proposition". "We need to apply the same energy and commitment given to national security and the protection of critical infrastructure to the cybercrime threats that impact on society more generally," she said."

8 7

Re: Recommendation in Australia for ISPs to force user security?
by Scott Weeks 22 Jun '10

22 Jun '10

--- ge(a)linuxbox.org wrote: From: Gadi Evron <ge(a)linuxbox.org> http://www.zdnet.com.au/make-zombie-code-mandatory-govt-report-339304001.htm "A government report into cybercrime has recommended that internet service providers (ISPs) force customers to use antivirus and firewall software or risk being disconnected. security <snip> ---------------------------------------- This is being discussed extensively on AUSNOG and is but one link in a long chain of gov't trying to control the internet there with little realization of how ineffective the proposals are. Seems to be politicians playing to a certain part of the populace so votes can be obtained. scott

1 0

ls my modem or DSL company issue? 1300 not good but 1200 is fine
by Deric Kwok 22 Jun '10

22 Jun '10

Hi It is very nice that Ina replied me about mtu help Now I am using ping to check but not sure it is my modem or DSL company issue? C:\Documents and Settings\derek>ping yahoo.com -f -l 1300 Pinging yahoo.com [98.137.149.56] with 1300 bytes of data: Packet needs to be fragmented but DF set. Packet needs to be fragmented but DF set. Packet needs to be fragmented but DF set. Packet needs to be fragmented but DF set. Ping statistics for 98.137.149.56: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), C:\Documents and Settings\derek>ping yahoo.com -f -l 1200 Pinging yahoo.com [98.137.149.56] with 1200 bytes of data: Reply from 98.137.149.56: bytes=1200 time=141ms TTL=55 Reply from 98.137.149.56: bytes=1200 time=141ms TTL=55 Reply from 98.137.149.56: bytes=1200 time=145ms TTL=55 Reply from 98.137.149.56: bytes=1200 time=141ms TTL=55 Ping statistics for 98.137.149.56: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 141ms, Maximum = 145ms, Average = 142ms Thank you for your help

2 1

A bit off topic: Video streaming/video on demand server
by Eric J Esslinger 22 Jun '10

22 Jun '10

My company has been using an online video service for certain shows on our local access channel, to stream them live over the internet and make them available as video on demand. This is stuff like city and county meetings, parades, that sort of thing. We're getting complaints because the ads had become very intrusive and annoying (budwiser swimsuit girls dancing across the screen in the middle of watching the Alderman meeting, for example). They are balking at the yearly 'subscription' cost, especially as we don't even come close to needed the amount of bandwidth/storage that provides. So I've been asked to look into setting up something locally (we have more than enough bandwidth to support what little use we're getting, with plenty of room to grow), but I really don't know where to start. So I'm looking for some help, perhaps experience with products, or someone who could consult with us on this. Also, my content creator needs an easy path to get the content online. He does his editing with a computer but trying to get him to convert formats and such is somewhat difficult. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 ________________________________ This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

3 2

Dividing up a small IPv4 block
by Steve Bertrand 22 Jun '10

22 Jun '10

Hi all, I've got a local v4 peer (ie. an ISP whom I lease fibre from to feed my clients, they peer with me directly, and we're about to provide mutual transit for one another). They (hereinafter 'client') have recently received a /22 from ARIN. The client's immediate need is to re-assign a /23 to an ISP client that they have, which effectively leaves them with one /23. The client has asked me to help design an IP addressing scheme that will suit the rest of their clients (most require /29's), their internal infrastructure, and the small server farm they have. Although this seems small-scale, the client handles sensitive-type subs. I'm at a loss on how to do this. I know that I'll eat up at least a /25 and another /26 to renumber their existing clients into. My instincts would have me reserve equivalents, but that almost doesn't seem possible given the math. Thinking that they will have to go back to ARIN for additional space relatively quickly without intervention, can anyone provide links to docs that will help prevent future renumbering or decent management? I know that I can collapse a lot of their current waste, and I know where I can scrounge, but where in the space should the clients be assigned from, and where should I reserve my p2p/32 blocks from... front or back? My current personal strategies don't apply, neither does the documentation that I've found/read on the web in the past. This feels like a nightmare ready to happen, and I need to ensure that with what they have, a sane lo/ptp and client assignment strategy is configured. They applied for too small a block. Numbering guidelines for tight v4 holdings will be very much appreciated. Cheers, Steve ps. I advised an authority figure that they should apply for their v6 immediately now that they have their v4. I've also set up a meeting for tomorrow morning to discuss how I can help them get experience with it ;)

3 2

Micro-allocation needed?
by Ask Bjørn Hansen 22 Jun '10

22 Jun '10

Hi everyone, We're going to anycast a /24 for some DNS servers (and possibly another UDP based service)[1]. I see that ARIN are listing on https://www.arin.net/knowledge/ip_blocks.html the smallest allocations from each prefix. Will we have trouble getting a /24 announced if we take it from a regular /20? Or in other words: Do we need to get a block from ARIN from one of the prefixes that they specify they allocate out in /24 chunks? - ask [1] For the NTP Pool system - http://www.pool.ntp.org/ - your network probably sent some of the 50-100,000 requests the pool members got this second. And this. And this. ... :-)

7 9

List of a useful tools for network architects
by Pavel Dimow 22 Jun '10

22 Jun '10

Hi, I am wondering what tools you consider most valuable when designing big network from scratch or perform a migration? For example I would like to know is there a tool that will perform basic sanity checks like network equipment without redundant link or without link at all... I know that the one who design a network have to consider all this issues but some automatic check will save some time for sure... Thank you.

5 6