June 2013 - NANOG - lists.nanog.org

Looking for a Twitter Engineer
by Josephson, Marcus 26 Jun '13

26 Jun '13

Can someone from Twitter contact me off list. Thanks.

1 0

Bell Aliant Contact
by Atif Abbasi 26 Jun '13

26 Jun '13

Please contact off line Thank you, Atif 416.986.6207

1 0

DNS caching issues with AT&T, Verizon (UUNET) DNS Servers
by Ilan Erenstein 26 Jun '13

26 Jun '13

Hello all, I'm writing to all of you in hopes that you're able to help me. The web site for the company I work for jobvite.com<http://jobvite.com> was hosted by GoDaddy. They dropped our record and it was able to propagate to all ISPs DNS servers. I was able to move our record on OpenSRS but not before empty records were able to propagate to several DNS servers. Now our customers aren't able to pull up our website. This is also causing rejected/deferred emails into our candidate system. This is what I'm seeing: http://www.digwebinterface.com/?hostnames=jobvite.com&type=SOA&colorize=on&… I need help with clearing the cache for AT&T and Verizon (UUNET) DNS servers to make sure they pick up the new record for our domain. Here are some of the DNS servers from the above link: 165.87.13.129 (AT&T (US)) 158.43.240.3 (UUNET (UK)) 198.6.100.25 (UUNET (US)) Any help in getting this problem resolved from the network folks in AT&T and Verizon (UUNET) would be greatly appreciated. Thanks, Ilan Erenstein Jobvite Inc. ilan(a)jobvite.com<mailto:ilan@jobvite.com> (415) 866-8738

2 2

Fwd: [Filtering of NTP-access to swisstime.ethz.ch as of July 1st, 2013]
by gall＠switch.ch 26 Jun '13

26 Jun '13

I'm forwarding this heads-up for the shutdown of the well-known NTP server swisstime.ethz.ch on behalf of the ETH Zurich. -- Alex SWITCH NOC AS559

6 6

Re: Security over SONET/SDH
by Scott Weeks 26 Jun '13

26 Jun '13

--- morrowc.lists(a)gmail.com wrote: From: Christopher Morrow <morrowc.lists(a)gmail.com> On Tue, Jun 25, 2013 at 2:02 PM, William Allen Simpson <william.allen.simpson(a)gmail.com> wrote: :: ...in addition to everything else "What security protocols :: are folks using to protect SONET/SDH? At what speeds?" : Correct. : But the answer appears to be: none. Not Google. Not any : public N/ISP. > would they say if they had? ------------------------------------------- Yes, especially in light of the current news regarding internet privacy. Could you imagine the advertising they'd be able to do to prospective customers? scott

4 5

Re: Assistance for Eavesdropping Legally on Avian Carriers (AELAC)
by Lyndon Nerenberg 26 Jun '13

26 Jun '13

On 2013-06-25, at 8:24 PM, "Caruso, Anthony" <acaruso(a)mre-consulting.com> wrote: > Yes, if you can identify the source of the grains, you know origin and flight path prior to your lawn. NSA approach's is getting the pigeon shit off of everyone's lawn... Then I am in favour of PRISM. NSA: come vacuum all the pigeon shit off my boat! Please!!!

1 0

Re: Fwd: [Filtering of NTP-access to swisstime.ethz.ch as of July 1st, 2013]
by Larry Sheldon 26 Jun '13

26 Jun '13

On 6/25/2013 9:52 AM, Anthony Williams wrote: > Also a Usenet posting (who still uses that, right?) to > comp.protocols.time.ntp will also help get the word out. There is a fair amount of on-topic traffic of recent vintage on that froup. What is it about people that makes them free-load on services like NTP chimes and DNSBLS but refuse to stay in contact with(or at least contactable by) the providers when important stuff is pending? -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

3 2

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

> --- morrowc.lists(a)gmail.com wrote: > From: Christopher Morrow <morrowc.lists(a)gmail.com> > On Tue, Jun 25, 2013 at 2:02 PM, William Allen Simpson > <william.allen.simpson(a)gmail.com> wrote: > > :: ...in addition to everything else "What security protocols > :: are folks using to protect SONET/SDH? At what speeds?" > > : Correct. > > : But the answer appears to be: none. Not Google. Not any > : public N/ISP. > > >> would they say if they had? > ------------------------------------------- > > > Yes, especially in light of the current news regarding > internet privacy. Could you imagine the advertising > they'd be able to do to prospective customers? --- sam(a)wwcandt.com wrote: The sticky problem remains for any communications carrier, we are looking for a technical solution to a legal problem. I believe that if you encrypted your links sufficiently that it was impossible to siphon the wanted data from your upstream the response would be for the tapping to move down into your data center before the crypto. With CALEA requirements and the Patriot Act they could easily compel you to give them a span port prior to the crypto. Regardless of how well built our networks are internally and externally we still must obey a court order. ------------------------------------------------------------------ I'm speaking about blocking non-court ordered (in whatever country the circuits cross) sniffing of traffic in the middle by anyone. There is no legal problem there. They do not follow the laws in this country, or in others, and we need to protect ourselves. scott

1 0

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

I hope I've gotten the quotations correct... --- joelja(a)bogus.com wrote: From: joel jaeggli <joelja(a)bogus.com> On 6/24/13 1:19 PM, Scott Weeks wrote: > ------------ joelja(a)bogus.com wrote: ------------ >> That's why I'm trying to follow up on the original question. Is >> there something similar the global public can use to secure their >> connections that is not government designed. This is even more >> important on microwave shots when security is desired. > :: plenty of standardized RF link-layers support strong encryption. > ---------------------------------------------------- > > Ah, thanks. That comment gave me the the search terms I needed, > but I keep seeing sentences like this "Due to the encryption > employed in these products, they are export controlled items and > are regulated by the Bureau of Industry and Security (BIS) of the > U.S. Department of Commerce. They may not be exported or shipped > for re-export to restricted countries..." wheee! :-) Yes, however note that the actual number of embargoed countries at this point is pretty small, and that if you are in a(n) (US) embargoed country and so inclined you can likely buy such products manufactured in China by Chinese companies. Securing the link layer however is not a replacement for an end to end solution so just because it's protecting the air interface(s) doesn't really mean somebody not looking at the traffic elsewhere. -------------------------------------------------- Yeah, but I was just thinking through what the original question asked. After reading his emails over the years, I am assuming he meant in addition to everything else "What security protocols are folks using to protect SONET/SDH? At what speeds?" I now see it quickly devolves into what various governments will allow its citizenry to do on the internet. :-( scott

5 4

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

------------ joelja(a)bogus.com wrote: ------------ From: joel jaeggli <joelja(a)bogus.com> > That's why I'm trying to follow up on the original question. Is > there something similar the global public can use to secure their > connections that is not government designed. This is even more > important on microwave shots when security is desired. :: plenty of standardized RF link-layers support strong encryption. ---------------------------------------------------- Ah, thanks. That comment gave me the the search terms I needed, but I keep seeing sentences like this "Due to the encryption employed in these products, they are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. They may not be exported or shipped for re-export to restricted countries..." wheee! :-) scott

7 7