September 2025 - NANOG - lists.nanog.org

Re: beware: being old sucks
by Randy Bush 05 Sep '25

05 Sep '25

a fellow nanogger wrote: > I've only *just* gotten to the note from a week or more ago. > >> + tftp-server nvram:startup-config <<<<<<====== >> snmp-server community foo 98 >> snmp-server trap-source Vlan1 >> snmp-server location Ashburn VA US > > I, too, got this from a RANCID setup I built a long time ago. > >> and here is the talos report, thanks joe >> >> https://blog.talosintelligence.com/static-tundra/ >> >> set `no vstack` in config. no, that is not the default. > > I'd told the owner that I didn't think he had control of his gear > anymore, but this helped me to convince him to put a new switch in. moving this to nanog because i did not elaborate on a critical point. when you get this, presume the config of this trivial ancient devic has been snatched. did the device have any burned in users, a la username foo privilege 15 password 7 bar and that uid/pass is used on other, presumably more modern, devices, you need to change the passwords everywhere. same for other credentials, snmp, bgpmd5, ... randy

17 47

BGP Outputs Wanted
by James Bensley 05 Sep '25

05 Sep '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi All, is anyone receiving a full BGP table from any of the below ASNs and would be able to send me your equivalent of "show bgp neighbor xyx received-routes" ? I am doing some BGP research and can't get the data for these ASNs from RouteViews/RIPE RIS/PCH collectors. 701 - Verizon/UUNET 1239 - T-Mobile/Sprint 1273 - Vodafone 2635 - Automattic 7473 - Singapore Telecommunications 9498 - Bharti Airtel 12389 - Rostelecom 13335 - Cloudflare 20473 - The Constant Company / Vultr 23911 - China Next Generation Internet Beijing 37721 - Virtual Technologies & Solutions 38255 - China Education and Research Network 57463 - NetIX Communications Happy to put a credit to you when I present my findings. Any help here would be greatly appreciated. With kind regards, James. -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsG5BAEBCgBtBYJouow1CZCoEx+igX+A+0UUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3Jn2S0PKJhMU+E5dt+0pVXI7S3v8BEgcU4opZP7 YPZvSMkWIQQ+k2NZBObfK8Tl7sKoEx+igX+A+wAAr3MP/i+y8+5eyLZzGG7G 5gB6KaGCu+XzAQ8W2StL/HyE5YMFYmbHDWv4pp6fmb73/K9mV/7o85cPlLMO 8WRCpz/vREZfwU4LJsb9qct44z8piFyYeqf2/2e4xHDL7Pu3QEADPoGaGiCq TbZUw9Y+g08LnMt14suI93/LHPEykDLledBImv1T92Z2EkCTZmkgLK10rmv+ OyPxEld38quZbjHBKQJmZjzmowzjY3LPGe1Yi2IjXHT1mVsQvoRQqVux9qxD 0sH2prJcqoAtgJLXVVdxPE0DEcYjhoaoPEDLHMWOqhrBiIz7K0SV67UKAg0l U3EFuT7zJA7AeIIj5ctukGukYNgwCfG51y8pmODKqTDQZ5vT6MR++xCj9QwT SA/DJPLVvV+3VD5zVXZy6OSyPj5Oxuw1s8xjmgrCCXR8se65J9cpm0es81ZE /d0nQt46Nhy+CocgU9CF99+Y5WIQRUTemMsqrg0ZwmyEF9Oe5EqVSmYc6ogF zHLkRQBeDmv1+7gcZ6DHlBnfvraASaif7fP2c6AiWVxnL4Ps9nDUx2NcIm6a BT3aoNRkoSagzpsliS0pg0Pa4MJ78EKGsjqOG+r5ctlpjd2D1vPS8r9v5V7U nZOfqz6YrFxynYckKpIf87zmmRJnuYUq+H8y33/Ycx2oaQcF/YGFD97VVr4O lXOXRE8I =+evX -----END PGP SIGNATURE-----

2 2

Paging Unified Layer/AS46606 in re: NET-162-240-0-0-1 (162.240.0.0/15)
by Rich Kulawiec 04 Sep '25

04 Sep '25

Who puts a quota on an abuse mailbox...and then allows that quote to be reached? > Date: Tue, 2 Sep 2025 12:38:24 +0000 > > Delivery has failed to these recipients or groups: > > abuse(a)bluehost.com<mailto:abuse@bluehost.com> > The recipient's mailbox is full and can't accept messages now. Please try r= > esending your message later, or contact the recipient directly. I've got nothin': my usual string of exasperated profanities has failed me. Anyway, y'all have attackers using various VPS instances on your network to conduct coordinated brute-force ssh attacks, and you should make that stop yesterday. Details? Logs? Yes, yes, I know, I did try to send them to you -- but see the above for the explanation covering why you didn't receive them. Also: for the love of dog, fix this nonsense. ---rsk

8 12

Google is not turning up any new peering on IXs?
by Will OBrien 04 Sep '25

04 Sep '25

We recently turned up a new IXP and I’m going through the motions of arranging the usual peers, etc. I’m extremely surprised by this one: Public Peering Google no longer accepts new peering requests at internet exchanges (IXPs). However, Google maintains dedicated connectivity to the internet exchanges (IXPs) listed in our PeeringDB entry<https://www.peeringdb.com/asn/15169>. We also maintain existing BGP sessions across internet exchanges where we are connected. For networks who do not meet our PNI requirements Google will serve those networks via indirect paths. I can only presume that someone who doesn’t pay for cross connect fees came up with this plan. This feels short sighted at the least. Considering the benefits of peering, I have to express some dismay at this disservice to the internet in general. Anyone from Google care to explain what appears to be a willful withdrawal of support for the IXP community?

9 9

LIR Portal and back end...
by Tim Požar 03 Sep '25

03 Sep '25

Does anyone have pointers to LIR portals/back ends they can recommend? eg https://lirportal.ripe.net/ Tim

2 1

Feedback invited: RPKI Best Practices and Lessons Learned
by Sofia Silva Berenguer 01 Sep '25

01 Sep '25

(Apologies for duplicates) Hi all, The NRO RPKI Program has published a page that consolidates existing sources on RPKI best practices and lessons learned (https://www.nro.net/technical-coordination/nro-rpki-program/rpki-best-pract…) We want to make sure the information included is clear and operationally relevant for those deploying and maintaining RPKI. If you see anything missing, unclear, or that needs an update, please send your input to rpki_program(a)nro.net Thanks in advance for helping us make this a stronger resource for the community! Warm regards, Sofía -- I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you. ____________________________________________________________________ Sofía Silva Berenguer NRO RPKI Program Manager e: sofia(a)apnic.net<mailto:sofia@apnic.net> ____________________________________________________________________

1 0