- NANOG - lists.nanog.org

Ixia or Spirent around?
by Jason Lixfeld 16 Apr '15

16 Apr '15

I tried the contact form on their respective websites a couple of weeks back, but have not heard back. If anyone from there is lurking about or if anyone has a sales contact that covers Toronto and could send me off-list, I'd be grateful. Thank you! Sent from my iPhone

1 0

reclaiming arin IP allocations?
by goemon＠anime.net 15 Apr '15

15 Apr '15

web.com/netsol is disavowing ownership of 209.17.115.109. NetRange: 209.17.112.0 - 209.17.127.255 CIDR: 209.17.112.0/20 NetName: WEB-COM-BLK3 NetHandle: NET-209-17-112-0-1 Parent: NET209 (NET-209-0-0-0-0) What is the process to get this netblock reclaimed? -Dan

7 11

Cisco Security Advisory: Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability
by Cisco Systems Product Security Incident Response Team 15 Apr '15

15 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability Advisory ID: cisco-sa-20150415-iosxr Revision 1.0 For Public Release 2015 April 15 16:00 UTC (GMT) Summary ======= A vulnerability in the packet-processing code of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers (ASR) could allow an unauthenticated, remote attacker to cause a lockup and eventual reload of a network processor chip and the line card that is processing traffic. Only Typhoon-based line cards on Cisco ASR 9000 Series Aggregation Services Routers are affected by this vulnerability. The vulnerability is due to improper processing of packets that are routed via the bridge-group virtual interface (BVI) when any of the following features are configured: Unicast Reverse Path Forwarding (uRPF), policy-based routing (PBR), quality of service (QoS), or access control lists (ACLs). An attacker could exploit this vulnerability by sending IPv4 packets through an affected device that is configured to route them via the BVI interface. A successful exploit could allow the attacker to cause a lockup and eventual reload of a network processor chip and the line card that is processing traffic, leading to a denial of service (DoS) condition. Cisco has released free software updates that address this vulnerability. There are no workarounds to address this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iQIcBAEBAgAGBQJVLoaBAAoJEIpI1I6i1Mx3QxoP/0l8Z+HfJhF5ipb0CZT62TIS m6gBR5TnXtkQTSLPBqvGTALoKTpXIuY49YwRjkAYRmVMei+ercsf6llE8YSmYL3Q TjaGxxhp4v9dQo36IwuzhjY8oGiMHIrLuRwWt+b8OZos2d+wQAcP76nfKyWhnGhC rBwN/js1uxBkTWpxIru149xf76moe3+1v353kjVS+PUbm33Uwe1dfAS1uETZvN1N lIIYlyzwqzokl+KRFvPKq0Iyr/qLa2cHqtfcLOwAD2VuLwGboFcno1uOlf7uEt4Z Wb1T1tAHvEHVBMpmh2jcV6EgGw3igU5Azx2C/+YeNqFTAei4qbUYi9Jhg9vuvhO1 ED5w+GaXg58opiaYEvP4GAXJ6pcq2P39Nawncodz/rA2IM5bQyTRWzCflMMfivFC AR0/g500NvwyCWluXaDVpvcZMI/MNuw8nq4MaTp7e/opYAiJFMW/ru6YAAFZOTW3 yG0Iij+vObL977hGlSHxlbJfqusfHT9m1tvARUhqRnD+LJcymvGMY9bJnndGqFr1 MQowrdz2acEX4DYF6RJgjgYSUfpH7QZd2Dh7STxmOS1y+8oUBplcr8oD4qgl/NRk NJyyuN2lLywb+v0EJGwz1+QjCBOLRJ5y3CvYM9ZsPOWJJZASDmPa4EvVQSyXloBM 8aItCdd34k/4H7gj+gYy =nnUg -----END PGP SIGNATURE-----

1 0

Re: macomnet weird dns record
by Larry Sheldon 15 Apr '15

15 Apr '15

On 4/14/2015 08:51, Colin Johnston wrote: > Get real, why make is hard for others to debug abuse issues, another > reason why blocks in place as no technical cooperation. Because "others" has a subset = "dreaded anti-spammers". -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their mistakes. Quis custodiet ipsos custodes

1 0

Re: macomnet weird dns record
by Larry Sheldon 15 Apr '15

15 Apr '15

On 4/14/2015 08:26, Colin Johnston wrote: > Because looks strange especially if the traffic is 100% bad Best > practice says avoid such info in records as does not aid debug since > mix of dec and hex Which is precisely why spammers have been doing it for years. -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their mistakes. Quis custodiet ipsos custodes

1 0

Cisco/Level3 takedown
by Sameer Khosla 14 Apr '15

14 Apr '15

Was just reading http://blogs.cisco.com/security/talos/sshpsychos then checking my routing tables. Looks like the two /23's they mention are now being advertised as /24's, and I'm also not sure why cisco published the ssh attack dictionary. It seems to me that this is something that if they want to do, they should be working with entire service provider community, not just one provider. Thanks Sameer Khosla Managing Director Neutral Data Centers Corp. Twitter: @skhoslaTO

30 49

Nonprofits - Office 365
by Ryan Finnesey 14 Apr '15

14 Apr '15

I apologize for the somewhat off topic post but I would assume some of you might get asked for tech advice from your favorite nonprofits or charity's. I am looking for nonprofits that would be able to make use of free Office 365 licenses and discounted Office 365 Pro Plus licenses at $2 each. This donation would also come with free consulting services to setup Office 365 and migrate any data. Cheers Ryan

2 2

NANOG Mailman upgrade - Saturday, April 18th
by Larry J. Blunk 14 Apr '15

14 Apr '15

The NANOG Mailman version will be upgraded on Saturday, April 18th at 7:00AM EDT. The new version supports wrapping emails which have strict DMARC enforcement set in order to prevent the emails from bouncing and causing members to be unsubscribed. We anticipate the upgrade to take no more than 15 minutes, during which time the NANOG mail server will not accept new messages. Any messages sent at this time should be queued and delivered after the server upgrade. Regards, Larry Blunk NANOG Communications Committee

1 0

About the thread "Cisco Routers Vulnerability"
by Dario Ciccarone 13 Apr '15

13 Apr '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rashed, NANOG members: Hi there. My name is Dario Ciccarone and I work as an Incident Manager on the Cisco PSIRT - the Product Security Incident Response Team. We saw your email to the NANOG list, with the subject "Cisco Routers Vulnerability". At this time, we're not aware of any attempts to exploit either a known or previously unknown vulnerability on any Cisco devices running Cisco IOS, Cisco IOS XE, Cisco IOS XR, Cisco NX-OS or any other Cisco operating systems. We invite you to follow-up with us directly by emailing the PSIRT alias, or by using any of the mechanisms listed at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy… Thanks, Dario Dario Ciccarone Incident Manager - CCIE #10395 Product Security Incident Response Team (PSIRT) Cisco Systems, Inc. PGP Key ID: 0xBA1AE0F0 http://www.cisco.com/go/psirt -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org iEYEARECAAYFAlUsRjcACgkQjJUYH7oa4PD5WwCcCk0l6bxnLEuBu4q0rwb7CLMU jXQAnjgvDscnF8hHBhRWB5o8iHALDmsu =dg/d -----END PGP SIGNATURE-----

1 0

Multi-gigabit edge devices as CPE
by Daniel Rohan 12 Apr '15

12 Apr '15

I work at a state REN and we are seeking a lead for a new edge device for on prem deployment at customer sites. We currently deploy two classes of routers-- a high end and a low end. Both the high end and the low end use some of the standard edge features: MPLS-TE, MBGP, flowspec, vrf, PIM, etc. We deliver full tables over these devices to the customers that need them. We recently finished a new ethernet procurement and have a large number of sites (~200) moving from <1Gbps in bandwidth to 1-10Gb in bandwidth. Our currently deployed low-end router can't handle these speeds and we can't afford to place our high end router at 200+ sites. So, we're looking for a middle tier router to deploy. Something with 2+ SFP+ ports, software that can handle the aforementioned features, and something with an API that we can leverage for programmatic management. So far we've not found anything that checks all the boxes. Layer 3 switches seem like obvious choices, but lack some of the features and RIB/FIB we need at the edge. Other devices like the Juniper MX5/10 certainly meet the requirements, but are priced way beyond what we can afford. Any suggestions for devices we might have overlooked? Preferably in the less than 10K per unit price point. If such a magical device exists. -Dan

14 28