April 2014 - NANOG - lists.nanog.org

Requirements for IPv6 Firewalls
by Fernando Gont 22 Apr '14

22 Apr '14

Folks, A few months ago we published an IETF I-D with requirements for IPv6 firewalls. Based on the feedback received since then, we've published a revision of the I-D: <http://www.ietf.org/internet-drafts/draft-gont-opsec-ipv6-firewall-reqs-01.…> If you have any feedback/thoughts, please do let us know (please CC <draft-gont-opsec-ipv6-firewall-reqs(a)tools.ietf.org>, such that all co-authors receive your feedback). FWIW, this I-D is being discussed on the IETF opsec wg list (<opsec(a)ietf.org>, <https://www.ietf.org/mailman/listinfo/opsec>). Thanks! Best regards, -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

38 105

Comcast transit problems?
by Blair Trosper 22 Apr '14

22 Apr '14

I'm being inundated with reports from Comcast customers in various markets about their inability to reach anything on AWS. For example, we have a few people in Atlanta that are all having this issue. What's more, they're having weird issues reaching things like Twitter or RingCentral (while other sites like Google and CNN work fine). (RingCentral's support department apparently knows about this and is telling their customers that use Comcast that they're aware of the issue but don't know what's going on at the present time.) Calls to the Comcast customer support just yield the "everything's fine, you're crazy" response from the staff. Can anyone from Comcast give me some help (or information) off list? -bt

5 5

Prefix problem on full routing table
by Marco Paesani 22 Apr '14

22 Apr '14

Hi, do you know more news about prefix today ? Regards, Marco [image: Immagine in linea 1]

1 0

AT&T / Verizon DNS Flush?
by Steven Briggs 22 Apr '14

22 Apr '14

Hello, Not sure where to point this... I was wondering if anybody knows an inroad to reach AT&T and Verizon systems people to flush their caches for " proofpoint.com"? Any help is greatly appreciated! Steven Briggs ᐧ

8 8

OT: Re: [[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years]
by Scott Weeks 22 Apr '14

22 Apr '14

:: There being no cable between the Hawaiian Islands :: and the mainland at the time Wait...what? https://en.wikipedia.org/wiki/Submarine_communications_cable#Submarine_cabl… "The first trans-pacific cables were completed in 1902-03, linking the US mainland to Hawaii in 1902 and Guam to the Philippines in 1903. Canada, Australia, New Zealand and Fiji were also linked in 1902. scott --- mikea(a)mikea.ath.cx wrote: From: Mike A <mikea(a)mikea.ath.cx> On Mon, Apr 14, 2014 at 10:09:14PM +0000, Matthew Black wrote: > IIRC, the message was sent via courier instead of cable or telephone to > prevent interception. Did the military not even trust its own cryptographic > methods? Or did they not think withdrawal of the Japanese ambassador was not > very critical? The message was sent by Western Union. There being no cable between the Hawaiian Islands and the mainland at the time, the message went by commercial radio, in plaintext, and thence by civilian bicycle messenger (of Japanese ancestry, as it happened) to Fort Shafter, where it was read while the attack was in progress. David Kahn's fine book, _The Codebreakers_, discusses this in rather more detail. I recommend the original version; the paperback and later hardback editions contain rather less meat. -- Mike Andrews, W5EGO mikea(a)mikea.ath.cx Tired old sysadmin

3 2

Re: OT:[Infowarrior] - NSA Said to Have Used Heartbleed Bug for Years
by Scott Weeks 21 Apr '14

21 Apr '14

--- mikea(a)mikea.ath.cx wrote: From: Mike A <mikea(a)mikea.ath.cx> On Fri, Apr 18, 2014 at 03:47:25PM -0700, Scott Weeks wrote: > > :: There being no cable between the Hawaiian Islands > :: and the mainland at the time > > Wait...what? > > https://en.wikipedia.org/wiki/Submarine_communications_cable#Submarine_cabl… > > "The first trans-pacific cables were completed in 1902-03, linking the > US mainland to Hawaii in 1902 and Guam to the Philippines in 1903. > Canada, Australia, New Zealand and Fiji were also linked in 1902. Thanks! I slouch (really comfy chair) corrected. But the War Dept. didn't have the cable sent by cable. And I really am grateful for the information. ----------------------------------------------- No problem and no biggie. I have a picture of the guys in the ceremony for the first official message sent to the US mainland on my wall here because I have always been interested in the history of communications here in Hawaii since I first found out about ALOHAnet. :-) http://atlantic-cable.com//Article/1902-JournElec/1902-CPC-08.jpg http://atlantic-cable.com//Article/1902-JournElec scott

1 0

Call for Presenations: NANOG 61 Data Center Track
by Martin Hannigan 21 Apr '14

21 Apr '14

Hi Everyone, We are soliciting presentation proposals for a 30m time slot during the Data Center Track being held at NANOG 61 in Bellevue, WA. See http://bit.ly/1rg4eyn for dates/location. The topics that we'd like to hear from you on are: - Data Center Infrastructure Management "DCIM" (use cases, design, benefits) - Medium Voltage (use, requirements, distribution technology, substations, benefits) - High Power and Dense Deployments (examples, u's, kW metrics, challenges, benefits) Presenter should be the subject matter expert related to the topic that you are submitting for consideration i.e. designer, developer, implementer, operator. We will be selecting one presentation. In order to be considered, we need your proposal and completed abstract no later than May 1, 2014. Contact us with your proposal or questions at: - Dan Golding <dgolding(a)gmail.com> - Martin Hannigan <hannigan(a)gmail.com> Best Regards, -M<

1 0

DMARC -> CERT?
by Miles Fidelman 21 Apr '14

21 Apr '14

Just a thought. I keep thinking that Yahoo's publishing of their "p=reject" policy, and the subsequent massive denial of service to lost of list traffic might be viewed as a "computer security" incident. Anybody think that reporting via CERT channels might be an appropriate response? (I do, and probably will - but curious what others think.) Miles Fidelman -- In theory, there is no difference between theory and practice. In practice, there is. .... Yogi Berra

17 50

Re: Whois Database
by Grant Ridder 20 Apr '14

20 Apr '14

Anyone else get an email like this? Headers: Delivered-To: shortdudey123(a)gmail.com Received: by 10.76.100.232 with SMTP id fb8csp151578oab; Sun, 20 Apr 2014 09:45:10 -0700 (PDT) X-Received: by 10.68.137.136 with SMTP id qi8mr33622066pbb.79.1398012309733; Sun, 20 Apr 2014 09:45:09 -0700 (PDT) Return-Path: <whois(a)whois.directory.com> Received: from whois.directory.com ([198.143.157.226]) by mx.google.com with ESMTPS id ck1si5595778pad.204.2014.04.20.09.45.09 for <shortdudey123(a)gmail.com> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 20 Apr 2014 09:45:09 -0700 (PDT) Received-SPF: temperror (google.com: error in processing during lookup of whois(a)whois.directory.com: DNS timeout) client-ip=198.143.157.226; Authentication-Results: mx.google.com; spf=temperror (google.com: error in processing during lookup of whois(a)whois.directory.com: DNS timeout) smtp.mail=whois(a)whois.directory.com Received: from whois by whois.directory.com with local (Exim 4.82) (envelope-from <whois(a)whois.directory.com>) id 1WaDge-0007ww-NN for shortdudey123(a)gmail.com; Tue, 15 Apr 2014 19:26:49 -0500 To: shortdudey123(a)gmail.com Subject: Whois Database Message-Id: <E1WaDge-0007ww-NN(a)whois.directory.com> From: whois(a)whois.directory.com Date: Tue, 15 Apr 2014 19:26:48 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - whois.directory.com X-AntiAbuse: Original Domain - gmail.com X-AntiAbuse: Originator/Caller UID/GID - [517 514] / [47 12] X-AntiAbuse: Sender Address Domain - whois.directory.com X-Get-Message-Sender-Via: whois.directory.com: authenticated_id: whois/primary_hostname/system user If you need access to the domain WHOIS database, email whoisdataapi(a)gmail.com. -Grant On Tue, Apr 15, 2014 at 5:26 PM, <whois(a)whois.directory.com> wrote: > If you need access to the domain WHOIS database, email > whoisdataapi(a)gmail.com. >

1 0

AT&T Wireless
by Neil Davidson 20 Apr '14

20 Apr '14

Can someone from AT&T Wireless contact me off-list? ... thanks ... n

1 0