September 2025 - NANOG - lists.nanog.org

Re: beware: being old sucks
by Randy Bush 04 Sep '25

04 Sep '25

a fellow nanogger wrote: > I've only *just* gotten to the note from a week or more ago. > >> + tftp-server nvram:startup-config <<<<<<====== >> snmp-server community foo 98 >> snmp-server trap-source Vlan1 >> snmp-server location Ashburn VA US > > I, too, got this from a RANCID setup I built a long time ago. > >> and here is the talos report, thanks joe >> >> https://blog.talosintelligence.com/static-tundra/ >> >> set `no vstack` in config. no, that is not the default. > > I'd told the owner that I didn't think he had control of his gear > anymore, but this helped me to convince him to put a new switch in. moving this to nanog because i did not elaborate on a critical point. when you get this, presume the config of this trivial ancient devic has been snatched. did the device have any burned in users, a la username foo privilege 15 password 7 bar and that uid/pass is used on other, presumably more modern, devices, you need to change the passwords everywhere. same for other credentials, snmp, bgpmd5, ... randy

15 42

Paging Unified Layer/AS46606 in re: NET-162-240-0-0-1 (162.240.0.0/15)
by Rich Kulawiec 04 Sep '25

04 Sep '25

Who puts a quota on an abuse mailbox...and then allows that quote to be reached? > Date: Tue, 2 Sep 2025 12:38:24 +0000 > > Delivery has failed to these recipients or groups: > > abuse(a)bluehost.com<mailto:abuse@bluehost.com> > The recipient's mailbox is full and can't accept messages now. Please try r= > esending your message later, or contact the recipient directly. I've got nothin': my usual string of exasperated profanities has failed me. Anyway, y'all have attackers using various VPS instances on your network to conduct coordinated brute-force ssh attacks, and you should make that stop yesterday. Details? Logs? Yes, yes, I know, I did try to send them to you -- but see the above for the explanation covering why you didn't receive them. Also: for the love of dog, fix this nonsense. ---rsk

8 12

Google is not turning up any new peering on IXs?
by Will OBrien 04 Sep '25

04 Sep '25

We recently turned up a new IXP and I’m going through the motions of arranging the usual peers, etc. I’m extremely surprised by this one: Public Peering Google no longer accepts new peering requests at internet exchanges (IXPs). However, Google maintains dedicated connectivity to the internet exchanges (IXPs) listed in our PeeringDB entry<https://www.peeringdb.com/asn/15169>. We also maintain existing BGP sessions across internet exchanges where we are connected. For networks who do not meet our PNI requirements Google will serve those networks via indirect paths. I can only presume that someone who doesn’t pay for cross connect fees came up with this plan. This feels short sighted at the least. Considering the benefits of peering, I have to express some dismay at this disservice to the internet in general. Anyone from Google care to explain what appears to be a willful withdrawal of support for the IXP community?

9 9

LIR Portal and back end...
by Tim Požar 03 Sep '25

03 Sep '25

Does anyone have pointers to LIR portals/back ends they can recommend? eg https://lirportal.ripe.net/ Tim

2 1

Feedback invited: RPKI Best Practices and Lessons Learned
by Sofia Silva Berenguer 01 Sep '25

01 Sep '25

(Apologies for duplicates) Hi all, The NRO RPKI Program has published a page that consolidates existing sources on RPKI best practices and lessons learned (https://www.nro.net/technical-coordination/nro-rpki-program/rpki-best-pract…) We want to make sure the information included is clear and operationally relevant for those deploying and maintaining RPKI. If you see anything missing, unclear, or that needs an update, please send your input to rpki_program(a)nro.net Thanks in advance for helping us make this a stronger resource for the community! Warm regards, Sofía -- I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you. ____________________________________________________________________ Sofía Silva Berenguer NRO RPKI Program Manager e: sofia(a)apnic.net<mailto:sofia@apnic.net> ____________________________________________________________________

1 0