October 2011 - NANOG - lists.nanog.org

HE.Net 6TO4 relay
by Meftah Tayeb 24 Oct '11

24 Oct '11

hello HE.NET did you drop the 6to4 delegated prefix 192.88.99.0/24 ? if yes please would you drop it from your BGP routing table anounced ? thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information from ESET NOD32 Antivirus, version of virus signature database 6573 (20111025) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

2 2

Juniper DOS/Blackhole question
by Jack Bates 23 Oct '11

23 Oct '11

Considered j-nsp, but this just feels more nanog appropriate. I'm told by one of my NSPs that I'm connected to a juniper. We were dealing with a DOS, and for some reason remote triggered DOS prevention via BGP wasn't working. The NOC said they had to enable multihop to my peering to make it work, otherwise it wouldn't accept the route. This seems strange to me. Any idea why a route would be rejected unless multihop was enabled? Also, any idea why a Juniper couldn't handle a simple 750mbit/s, 1.5Mpps DOS? Don't get me wrong, it could have been more than that. I was just receiving that much of the DOS and my lower end m120 didn't seem to think it an issue, so I'm curious why I was dropping packets on the link to begin with. Interestingly, I have an OC-12 to another NSP who was also dropping after around 1.2Mpps (last time I asked, they said the oc-12 hit a cisco 7600). Jack

4 5

Comcast security please contact me off list
by N Rauhauser 23 Oct '11

23 Oct '11

I do some protective service work, one client is the head of a Washington D.C. NGO that faced a credible death threat last month. Tonight I received information that the source of this threat traced one of the NGO's volunteers to her home address via Comcast IP, and the location is a relatively short drive away from a man who was arrested last month for criminal harassment almost five hundred miles from his home. I have some genuine concerns for the physical safety of this Comcast customer, and I'd like to talk to someone immediately. We've got an annoyed FBI agent who will confirm the back story on this Monday, but the subjects know they're under some sort of investigation and I'm afraid of what might happen if further info leaks over the weekend. This is a junk box for me - nrauhauser at gmail is the address I check regularly.

2 1

Can this bgp work?
by Deric Kwok 22 Oct '11

22 Oct '11

Hello We would like to split our network advertising with same AS no. in different our bgp routers to same or different upstream provider eg: 66.70.0.0/20 in bgpRouterA 67.170.0.0/20 in bgpRouterB 174.70.0.0/20 in bgpRouterC ls it working? Thank you

4 3

Re: Outsourcing DDOS
by Dennis 22 Oct '11

22 Oct '11

Good points Steven. I'd suggest a deep dive on the technologies implemented by the vendor today as times and attack methods have evolved. Many attacks today are not Volumetric or easily detected or mitigated by traditional methods. Stefan Fouant <sfouant(a)shortestpathfirst.net> wrote: >Although a bit dated, I did a pretty exhaustive comparison of offerings >from AT&T, Verizon, Prolexic, and a few others a while back. > >Don't forget there is also the go-it-yourself approach which is always a >fun option, guaranteed to keep you up at night and give you a few >additional gray hairs... > >Let me know if you're interested in the slides... > >Stefan Fouant >JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI >Technical Trainer, Juniper Networks > >Follow us on Twitter @JuniperEducate > >On 10/20/2011 4:43 PM, Hank Nussbacher wrote: >> At 09:13 19/10/2011 -0400, samuel.cunningham(a)wellsfargo.com wrote: >>> We are considering using Prolexic to 'defend' our Internet-facing >>> network from DDOS attacks. Anyone have any known issues or word of >>> warnings before we proceed? >> >> Things to check: >> >> - DDOS service caps >> - outage remedy credits >> - service trial period >> - monitoring - you will want some external mutually agreeable monitoring >> service like gomez/compuware. Who pays for it? >> >> Regards, >> Hank >> >> >> >>> Chris Cunningham >>> Network Engineering >>> Secure Connectivity >>> 704-427-3557 (Desk) >>> 704-701-6924 (Cell) >>> Samuel.Cunningham(a)Wellsfargo.com<mailto:Samuel.cunningham@wellsfargo.com> >>> [X] >>> >>> This e-mail, including any attached files, may contain confidential >>> and privileged information for the sole use of the intended recipient. >>> Any review, use, distribution, or disclosure by others is strictly >>> prohibited. If you are not the intended recipient (or authorized to >>> receive information for the intended recipient), please contact the >>> sender by reply e-mail and delete all copies of this message. >> >> > >

1 0

Re: Outsourcing DDOS
by Hank Nussbacher 22 Oct '11

22 Oct '11

At 09:13 19/10/2011 -0400, samuel.cunningham(a)wellsfargo.com wrote: >We are considering using Prolexic to 'defend' our Internet-facing network >from DDOS attacks. Anyone have any known issues or word of warnings >before we proceed? Things to check: - DDOS service caps - outage remedy credits - service trial period - monitoring - you will want some external mutually agreeable monitoring service like gomez/compuware. Who pays for it? Regards, Hank >Chris Cunningham >Network Engineering >Secure Connectivity >704-427-3557 (Desk) >704-701-6924 (Cell) >Samuel.Cunningham(a)Wellsfargo.com<mailto:Samuel.cunningham@wellsfargo.com> >[X] > >This e-mail, including any attached files, may contain confidential and >privileged information for the sole use of the intended recipient. Any >review, use, distribution, or disclosure by others is strictly prohibited. >If you are not the intended recipient (or authorized to receive >information for the intended recipient), please contact the sender by >reply e-mail and delete all copies of this message.

2 1

OT: ISPs in Brazil and Chile
by Jeff Cartier 22 Oct '11

22 Oct '11

Hi Group, A little off topic, but I was looking for a recommendation on an ISP in both Brazil and Chile. Thanks!! __________________________________________________________________ DISCLAIMER: This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail. This message has been scanned for the presence of computer viruses, Spam, and Explicit Content.

3 2

Frontier IPv6 website unavailable
by Chris Curwick 22 Oct '11

22 Oct '11

When visiting www.frontier.com using an ipv6 tunnel from HE I am getting the following result: Service Unavailable A quick poll of my peers without ipv6 shows the site rendering. It looks like this is limited just to the IPv6 side.

2 1

Did Internap lose all clue?
by bas 22 Oct '11

22 Oct '11

Recently I was contacted by an Internap sales person. The third line of the email read: "As you know well, BGP makes all routing decisions simply based on HOP COUNT" I blinked my eyes a couple of times.. Yes it really said hop count. Then I replied to the guy that if he tries to sell a technical product to technical people he should get his info straight. But he replied BGP actually makes decisions based on hop count. He even sent an URL from the internap website that states this http://www.internap.com/it-iq/route-optimization-miro/ On that page there is also this gem: "BGP relies on the premise that hops are responsible for packet loss and congestion, and therefore a route with fewer hops is inherently better. " I can imagine blatant misinformation like this from a shady startup trying to trick some sales with smoke and mirrors, but from Internap? -- Bas

15 16

The Cidr Report
by cidr-report＠potaroo.net 21 Oct '11

21 Oct '11

This report has been generated at Fri Oct 21 21:12:43 2011 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 14-10-11 379221 222617 15-10-11 379777 222482 16-10-11 379901 222767 17-10-11 380086 223026 18-10-11 380464 222994 19-10-11 380436 223071 20-10-11 380570 223243 21-10-11 384022 223763 AS Summary 39249 Number of ASes in routing system 16602 Number of ASes announcing only one prefix 3545 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 108508128 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 21Oct11 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 382825 223805 159020 41.5% All ASes AS6389 3545 223 3322 93.7% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS18566 2098 406 1692 80.6% COVAD - Covad Communications Co. AS3352 2203 578 1625 73.8% TELEFONICA-DATA-ESPANA TELEFONICA DE ESPANA AS4766 2502 982 1520 60.8% KIXS-AS-KR Korea Telecom AS22773 1462 110 1352 92.5% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4755 1535 226 1309 85.3% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS4323 1629 395 1234 75.8% TWTC - tw telecom holdings, inc. AS1785 1842 786 1056 57.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS28573 1419 363 1056 74.4% NET Servicos de Comunicao S.A. AS19262 1395 400 995 71.3% VZGNI-TRANSIT - Verizon Online LLC AS10620 1694 712 982 58.0% Telmex Colombia S.A. AS7552 1389 428 961 69.2% VIETEL-AS-AP Vietel Corporation AS7303 1229 330 899 73.1% Telecom Argentina S.A. AS18101 954 156 798 83.6% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS7029 2328 1539 789 33.9% WINDSTREAM - Windstream Communications Inc AS8151 1433 682 751 52.4% Uninet S.A. de C.V. AS4808 1082 340 742 68.6% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS30036 1395 677 718 51.5% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS7545 1611 932 679 42.1% TPG-INTERNET-AP TPG Internet Pty Ltd AS3356 1102 451 651 59.1% LEVEL3 Level 3 Communications AS17974 1886 1249 637 33.8% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS24560 966 333 633 65.5% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS4804 708 95 613 86.6% MPX-AS Microplex PTY LTD AS3549 1055 444 611 57.9% GBLX Global Crossing Ltd. AS17676 678 70 608 89.7% GIGAINFRA Softbank BB Corp. AS20115 1594 990 604 37.9% CHARTER-NET-HKY-NC - Charter Communications AS8402 1480 878 602 40.7% CORBINA-AS OJSC "Vimpelcom" AS22561 933 372 561 60.1% DIGITAL-TELEPORT - Digital Teleport Inc. AS22047 580 33 547 94.3% VTR BANDA ANCHA S.A. AS7011 1166 644 522 44.8% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. Total 44893 15824 29069 64.8% Top 30 total Possible Bogus Routes 5.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 5.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 5.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.6.80.0/24 AS13442 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 80.88.10.0/24 AS33774 DJAWEB 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 142.54.202.0/23 AS19137 EPSILON-INTERACTIVE - Epsilon Interactive LLC 172.45.1.0/24 AS29571 CITelecom-AS 172.45.2.0/24 AS29571 CITelecom-AS 172.45.3.0/24 AS29571 CITelecom-AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 185.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 185.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 185.24.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE Network Coordination Center 190.102.32.0/20 AS30058 FDCSERVERS - FDCservers.net 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.24.78.0/26 AS3549 GBLX Global Crossing Ltd. 200.24.78.64/26 AS3549 GBLX Global Crossing Ltd. 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.74.232.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.74.233.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.131.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 202.179.144.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 203.175.107.0/24 AS45595 PKTELECOM-AS-PK Pakistan Telecom Company Limited 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX Orange Business Services (formerly Equant) AS for BENELUX 205.207.148.0/23 AS812 ROGERS-CABLE - Rogers Cable Communications Inc. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.64.240.0/21 AS13871 TELEBYTE-NW - Telebyte NW 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.21.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 216.58.200.0/24 AS18530 ISOMEDIA-1 - Isomedia Inc. 216.194.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0