- NANOG - lists.nanog.org

Namecheap's outbound email flow compromised: valid rdns, spf, dkim and dmarc on phishes
by Eric Kuhnke 13 Feb '23

13 Feb '23

https://www.namepros.com/threads/concerning-e-mail-from-namecheap.1294946/p… https://lowendtalk.com/discussion/184391/namecheap-hacked It looks like a third party service they gave their keys to has been compromised. I got several phishes that fully pass as legit Namecheap emails. https://www.namecheap.com/status-updates/archives/74848

2 5

intuit DNS
by Daniel Sterling 12 Feb '23

12 Feb '23

Someone at Intuit please look into why your DNS for this A record hasn't been consistently resolving, this has been going on for several days if not weeks https://dnschecker.org/#A/smartlinks.intuit.com -- Dan

3 2

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 10 Feb '23

10 Feb '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 11 Feb, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 920384 Prefixes after maximum aggregation (per Origin AS): 348127 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 446226 Total ASes present in the Internet Routing Table: 74115 Prefixes per ASN: 12.42 Origin-only ASes present in the Internet Routing Table: 63573 Origin ASes announcing only one prefix: 26124 Transit ASes present in the Internet Routing Table: 10542 Transit-only ASes present in the Internet Routing Table: 443 Average AS path length visible in the Internet Routing Table: 4.2 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1056 Number of instances of unregistered ASNs: 1066 Number of 32-bit ASNs allocated by the RIRs: 41188 Number of 32-bit ASNs visible in the Routing Table: 34158 Prefixes from 32-bit ASNs in the Routing Table: 166962 Number of bogon 32-bit ASNs visible in the Routing Table: 30 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 565 Number of addresses announced to Internet: 3062784384 Equivalent to 182 /8s, 142 /16s and 97 /24s Percentage of available address space announced: 82.7 Percentage of allocated address space announced: 82.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 312525 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 241005 Total APNIC prefixes after maximum aggregation: 69026 APNIC Deaggregation factor: 3.49 Prefixes being announced from the APNIC address blocks: 235937 Unique aggregates announced from the APNIC address blocks: 97970 APNIC Region origin ASes present in the Internet Routing Table: 13286 APNIC Prefixes per ASN: 17.76 APNIC Region origin ASes announcing only one prefix: 3843 APNIC Region transit ASes present in the Internet Routing Table: 1781 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8568 Number of APNIC addresses announced to Internet: 773609984 Equivalent to 46 /8s, 28 /16s and 90 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 267451 Total ARIN prefixes after maximum aggregation: 121409 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 269443 Unique aggregates announced from the ARIN address blocks: 130373 ARIN Region origin ASes present in the Internet Routing Table: 19074 ARIN Prefixes per ASN: 14.13 ARIN Region origin ASes announcing only one prefix: 6986 ARIN Region transit ASes present in the Internet Routing Table: 1965 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4742 Number of ARIN addresses announced to Internet: 1286042368 Equivalent to 76 /8s, 167 /16s and 115 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 264443 Total RIPE prefixes after maximum aggregation: 122662 RIPE Deaggregation factor: 2.16 Prefixes being announced from the RIPE address blocks: 261014 Unique aggregates announced from the RIPE address blocks: 156354 RIPE Region origin ASes present in the Internet Routing Table: 28212 RIPE Prefixes per ASN: 9.25 RIPE Region origin ASes announcing only one prefix: 12030 RIPE Region transit ASes present in the Internet Routing Table: 3976 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11012 Number of RIPE addresses announced to Internet: 718416000 Equivalent to 42 /8s, 210 /16s and 40 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 117307 Total LACNIC prefixes after maximum aggregation: 28508 LACNIC Deaggregation factor: 4.11 Prefixes being announced from the LACNIC address blocks: 116532 Unique aggregates announced from the LACNIC address blocks: 49047 LACNIC Region origin ASes present in the Internet Routing Table: 10983 LACNIC Prefixes per ASN: 10.61 LACNIC Region origin ASes announcing only one prefix: 2661 LACNIC Region transit ASes present in the Internet Routing Table: 2285 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8770 Number of LACNIC addresses announced to Internet: 176338432 Equivalent to 10 /8s, 130 /16s and 182 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29122 Total AfriNIC prefixes after maximum aggregation: 5745 AfriNIC Deaggregation factor: 5.07 Prefixes being announced from the AfriNIC address blocks: 36893 Unique aggregates announced from the AfriNIC address blocks: 12033 AfriNIC Region origin ASes present in the Internet Routing Table: 1721 AfriNIC Prefixes per ASN: 21.44 AfriNIC Region origin ASes announcing only one prefix: 604 AfriNIC Region transit ASes present in the Internet Routing Table: 331 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 31 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1066 Number of AfriNIC addresses announced to Internet: 108038144 Equivalent to 6 /8s, 112 /16s and 136 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9454 8884 51 CHINAMOBILE-CN China Mobile Communicati 7545 5852 786 702 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4856 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3637 1331 21 VIETEL-AS-AP Viettel Group, VN 7713 3517 1043 65 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3381 1874 96 VNPT-AS-VN VNPT Corp, VN 9498 2750 499 238 BBIL-AP BHARTI Airtel Ltd., IN 4766 2532 11251 592 KIXS-AS-KR Korea Telecom, KR 24560 2360 842 441 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2184 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 7959 10737 2842 AMAZON-02, US 11492 4534 300 598 CABLEONE, US 7155 3899 265 33 VIASAT-SP-BACKBONE, US 22773 3652 3063 286 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3503 1320 63 SHAW, CA 16625 3309 1672 2425 AKAMAI-AS, US 749 3037 50571 2304 DNIC-AS-00749, US 396982 2601 3583 349 GOOGLE-CLOUD-PLATFORM, US 7018 2591 24127 1573 ATT-INTERNET4, US 30036 2556 366 377 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6992 1706 146 UNI2-AS, ES 9121 6089 1692 17 TTNET, TR 39891 4561 269 58 ALJAWWALSTC-AS, SA 20940 4019 3399 175 AKAMAI-ASN1, NL 8551 3893 370 37 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2949 2292 910 ROSTELECOM-AS, RU 9009 2694 256 1375 M247, RO 47331 2565 386 1935 TTNET, TR 34984 2266 359 609 TELLCOM-AS, TR 6849 2252 339 19 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11113 3348 587 Uninet S.A. de C.V., MX 10620 3476 507 862 Telmex Colombia S.A., CO 11830 2262 369 64 Instituto Costarricense de Electricidad 13999 2246 375 606 Mega Cable, S.A. de C.V., MX 28573 1351 2328 263 Claro NXT Telecomunicacoes Ltda, BR 6503 1297 339 517 Axtel, S.A.B. de C.V., MX 3816 1292 746 156 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1150 369 22 Telefonica del Peru S.A.A., PE 11664 1098 180 458 Techtel LMDS Comunicaciones Interactiva 26615 1018 2466 43 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1540 533 30 RAYA-AS, EG 24863 1501 393 21 LINKdotNET-AS, EG 36992 1348 1517 277 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 998 67 53 ORANGE-COTE-IVOIRE, CI 36935 885 520 42 Vodafone-, EG 6713 549 1861 34 IAM-AS, MA 15399 511 52 41 WANANCHI-, KE 24757 495 73 5 EthioNet-AS, ET 37342 494 32 1 MOVITEL, MZ Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11113 3348 587 Uninet S.A. de C.V., MX 9808 9454 8884 51 CHINAMOBILE-CN China Mobile Communicati 16509 7959 10737 2842 AMAZON-02, US 12479 6992 1706 146 UNI2-AS, ES 9121 6089 1692 17 TTNET, TR 7545 5852 786 702 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4856 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4561 269 58 ALJAWWALSTC-AS, SA 11492 4534 300 598 CABLEONE, US 20940 4019 3399 175 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9454 9403 CHINAMOBILE-CN China Mobile Communications Grou 12479 6992 6846 UNI2-AS, ES 9121 6089 6072 TTNET, TR 7545 5852 5150 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 7959 5117 AMAZON-02, US 4538 4856 4781 ERX-CERNET-BKB China Education and Research Net 39891 4561 4503 ALJAWWALSTC-AS, SA 11492 4534 3936 CABLEONE, US 7155 3899 3866 VIASAT-SP-BACKBONE, US 8551 3893 3856 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 3507 UNALLOCATED 5.105.166.0/24 213035 AS-SERVERION Serverion B.V., 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 16641 UNALLOCATED 8.10.194.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.10.210.0/24 3356 LEVEL3, US 25674 UNALLOCATED 8.12.76.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.12.250.0/24 3356 LEVEL3, US 25674 UNALLOCATED 8.14.115.0/24 3356 LEVEL3, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 25674 UNALLOCATED 8.19.146.0/24 3356 LEVEL3, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.185.0/24 Origin: 174 COGENT-174, US 23.131.185.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.186.0/24 Origin: 174 COGENT-174, US 23.131.186.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.187.0/24 Origin: 174 COGENT-174, US 23.131.187.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.188.0/24 Origin: 174 COGENT-174, US 23.131.188.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.136.112.0/24 Origin: 54835 UNASSIGNED 23.136.112.0/24 Transit: 21559 OSNET, PR Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:39 /11:103 /12:299 /13:580 /14:1203 /15:2040 /16:13481 /17:8300 /18:13897 /19:25214 /20:44317 /21:52396 /22:110296 /23:98305 /24:549065 /25:820 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6057 6992 UNI2-AS, ES 9121 5267 6089 TTNET, TR 8151 5117 11113 Uninet S.A. de C.V., MX 39891 3552 4561 ALJAWWALSTC-AS, SA 11492 3449 4534 CABLEONE, US 8551 3365 3893 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3311 3503 SHAW, CA 7155 2988 3899 VIASAT-SP-BACKBONE, US 22773 2703 3652 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2213 2556 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1659 2:1238 3:168 4:5 5:4316 6:113 7:5 8:1557 9:1 11:172 12:1586 13:392 14:2348 15:290 16:79 17:366 18:401 20:244 21:4 22:188 23:6057 24:2509 25:4 27:2597 29:19 31:2510 32:105 34:8 35:106 36:1895 37:4585 38:4122 39:839 40:154 41:4038 42:1067 43:2335 44:304 45:16373 46:4166 47:382 49:1750 50:1835 51:372 52:1563 54:394 55:866 56:8 57:80 58:1741 59:1163 60:991 61:2431 62:2633 63:1932 64:5673 65:2327 66:4929 67:3045 68:1349 69:4155 70:1253 71:662 72:2987 74:2601 75:1457 76:603 77:2388 78:3886 79:3182 80:2081 81:1855 82:1483 83:1237 84:1527 85:3734 86:758 87:1960 88:2846 89:3581 90:593 91:7639 92:2014 93:2593 94:3536 95:4850 96:1331 97:347 98:1161 99:744 100:75 101:1067 102:2552 103:30931 104:4500 105:485 106:856 107:2523 108:919 109:4369 110:2088 111:3342 112:2047 113:1551 114:1615 115:2039 116:1902 117:2554 118:2290 119:1933 120:1768 121:1118 122:2594 123:2167 124:1605 125:2381 128:1316 129:1068 130:989 131:1995 132:801 133:406 134:1910 135:315 136:862 137:926 138:2546 139:1545 140:1184 141:1479 142:1425 143:1476 144:1202 145:349 146:1879 147:1557 148:2286 149:1902 150:870 151:1143 152:1828 153:481 154:3928 155:1413 156:1673 157:1296 158:1010 159:2265 160:2543 161:1411 162:3523 163:1538 164:1597 165:1665 166:846 167:1726 168:3874 169:921 170:4570 171:897 172:3513 173:2974 174:1028 175:1163 176:3710 177:4585 178:3580 179:2152 180:2372 181:3400 182:3280 183:1931 184:2340 185:20007 186:4650 187:3946 188:4114 189:3510 190:9091 191:1454 192:10961 193:8817 194:7242 195:5115 196:3057 197:2412 198:5961 199:6083 200:7755 201:5886 202:10646 203:10020 204:4606 205:3516 206:3864 207:3431 208:4084 209:4840 210:4446 211:2499 212:4109 213:3554 214:1098 215:55 216:6605 217:2652 218:1278 219:573 220:2024 221:970 222:866 223:2100 End of report

1 0

Zisa GPON Config understanding
by Margi Varia 10 Feb '23

10 Feb '23

software platform : Broadband Network Platform Software software version : GPON CASSETTE OLT V100R001B01D001P008SP6 copyright : Copyright (C) 2001-2017 compiled time : Apr 10 2018 09:00:00 processor : CORTEX-A9 MP, 1GHz SDRAM(bytes) : 1G flash memory(bytes) : 32M MAC address : 00:0a:5a:94:1e:de product serial no. : 0122003400121807010008001 hardware version : V1.0 bootrom version : V2.1 EPLD version : V1.1 Anyone familiar with this? can I put all Gpon ports on untagged vlan 60? only have CLI access, GUI is not working either. TIA

1 0

Can I do this in EVPN? (Multihome to more different CEs)
by Simon Lockhart 10 Feb '23

10 Feb '23

All, I have a bit of a networking design challenge, and I thing EVPN is the right answer, but despite spending the last week reading loads of resources about it, I can't quite get my head around one aspect. I'm trying to genericise the design a bit here, but what I've got is... I have multiple layer two broadcast domains that I need to link together over a layer 3 network. The broadcast domains consist of multiple switches carrying multiple vlans spanning multiple locations (think of it like a customer campus network). I need to interconnect with each broadcast domain in two different locations. (so two PEs to two CEs), and link it back to a datacentre in another city. In the simple case, using EVPN, I see that I can run active-standby multihoming, configuring one ESI for the customer campus network. If one of my PEs fails, or one of the customer CEs fails, then EVPN will fail over to the other link. However, the failure scenario I need to deal with is if a layer two link fails between two locations within the customer campus, the two halves of the now split broadcast domain still need to be able to communicate with the datacentre (but do not need to be able to communicate with each other). Every example I can see for EVPN shows multihoming to a single CE, and I can't find anywhere an example which deals with a "split" ES. Is there a solution to this problem? Many thanks in advance, Simon

5 5

Monday's N87 Keynote will ft. Elad Nafshi from Comcast + Road Less Traveled: Alex Latzko + More
by Nanog News 09 Feb '23

09 Feb '23

*Monday's Keynote will ft. Elad Nafshi from Comcast* *Presenting "The Future is Now: Delivering the Next Generation Brilliant Network"* Elad Nafshi will share how 10G network technologies are evolving connected experiences in real-time, even as they continue to get smarter, faster, more reliable, and more secure for future generations. Elad's Keynote is scheduled for 10:15 am EST on Monday, 13 Feb., during NANOG 87. *SEE AGENDA* <https://nanog.org/events/nanog-87/agenda/> *Road Less Traveled: Alex Latzko* *"Behind the Scenes" Look at a Career Before Tech* Principal Network Architect at Deft, Alex Latzko, first attended a NANOG meeting in 2013. Theatre, however, was Alex's first passion. "I didn't choose theatre. Theatre chose me," he said with a smile. Alex graduated with a B.A. in Theatre from Rutgers University in 1983. He describes himself as a theatre geek in high school. However, it was not the stage that caught his eye, but what went on behind it. *READ NOW* <https://www.nanog.org/stories/road-less-traveled-alex-latzko/> *NANOG Board Leadership Changes and Elects New Official * *Check Out New Board Leadership Team* We are pleased to announce NANOG's new board leadership team. Thank you for your service in helping to build the Internet of tomorrow. * MORE INFO <https://www.nanog.org/about/who-we-are/board-staff/>* *NANOG 87 will Officially Load Monday! * *Only Four More Days Until NANOG 87 in Atlanta, GA.* We cannot wait to gather again for what is sure to be another incredible event of community, education, empowerment, and inspiration! Stay updated with information regarding NANOG 87 via the daily announcements sent to your inbox each morning. See you soon, friends! *NANOG 87* <https://nanog.org/events/nanog-87/>

1 0

Looking for contacts at Hot-Net AS12849
by Bottiger 09 Feb '23

09 Feb '23

Looking for contacts at Hot-Net AS12849 to fix a routing issue. Contacts listed on RIPE are unresponsive.

1 0

(IETF I-D): Implications of IPv6 Addressing on Security Operations (Fwd: New Version Notification for draft-gont-opsec-ipv6-addressing-00.txt)
by Fernando Gont 09 Feb '23

09 Feb '23

Hi, All, Recently, I happened to participate in an IPv6 deployment meeting with some large content provider, and said meeting included a discussion about how to mitigate some attacks using block-lists. These folks argued that they ban offending IPv6 addresses as /128s, following IPv4 practices. So it seemed to me that some of the implications arising from the increased IPv6 address space were non-obvious to them. -- that has been the motivation for the publication of this document. * TXT: https://www.ietf.org/archive/id/draft-gont-opsec-ipv6-addressing-00.txt * HTML: https://www.ietf.org/archive/id/draft-gont-opsec-ipv6-addressing-00.html Comments welcome! P.S.: The document is targeted at the IETF opsec wg (https://www.ietf.org/mailman/listinfo/opsec) but I'll be happy to discuss it on this mailing-list, off-list, or at the opsec wg mailing-list... Thanks! Regards, Fernando -------- Forwarded Message -------- Subject: New Version Notification for draft-gont-opsec-ipv6-addressing-00.txt Date: Thu, 02 Feb 2023 19:48:40 -0800 From: internet-drafts(a)ietf.org To: Fernando Gont <fgont(a)si6networks.com>, Guillermo Gont <ggont(a)si6networks.com> A new version of I-D, draft-gont-opsec-ipv6-addressing-00.txt has been successfully submitted by Fernando Gont and posted to the IETF repository. Name: draft-gont-opsec-ipv6-addressing Revision: 00 Title: Implications of IPv6 Addressing on Security Operations Document date: 2023-02-02 Group: Individual Submission Pages: 8 URL: https://www.ietf.org/archive/id/draft-gont-opsec-ipv6-addressing-00.txt Status: https://datatracker.ietf.org/doc/draft-gont-opsec-ipv6-addressing/ Htmlized: https://datatracker.ietf.org/doc/html/draft-gont-opsec-ipv6-addressing Abstract: The increased address availability provided by IPv6 has concrete implications on security operations. This document discusses such implications, and sheds some light on how existing security operations techniques and procedures might need to be modified accommodate the increased IPv6 address availability. The IETF Secretariat

5 12

Yondoo provided router, has "password" as admin pw, won't let us change it
by typhoon.notice_0a＠icloud.com 09 Feb '23

09 Feb '23

Hi, Long time lurker, first time poster. Sorry in advance if this is the wrong forum for something like this. My mom's ISP (Yondoo) seems to be providing DOCSIS 3.1 CPE (Customer Premises Equipment) with a built-in router, without providing the ability to change the admin password from "password" on it. Their customer service rep said that this is not only WAI, but also wanted to charge her $50 to have a tech come out and change it. Which is obviously less than ideal. That aside, this seems like a pretty egregious security standard which, from my understanding, can have fairly dire security implications... e.g., DNS server settings can be pointed at whatever someone wants here. My mom is elderly and had already fallen victim to a call center scammer a couple years ago. They briefly took control over her laptop before she called for backup. So I'm just a little concerned that we have no control over changing this router's admin password — from “password” — in a pinch, without waiting for a truck roll && shelling out $50. I've sent her a DOCSIS 3.1 modem that doesn't have a router built-in, in hopes that they'll let us bring our own. She does have Google Wifi, but we can't even put their router into bridge mode. So she would be double NATed and have no control over changing the admin password on the first router. Anyone have any experience with Yondoo? I've tried reaching out to them on multiple fronts, but have yet to hear back from them on this. A tech is scheduled to come out tomorrow, so the plan is to beg (bribe?) them to let us use our own modem and then take it from there. Thanks, Todd

8 8

Yondoo provided router, has "password" as admin pw, won't let us change it
by typhoon.notice_0a＠icloud.com 08 Feb '23

08 Feb '23

Apparently iCloud’s hide my email implementation can only be used with one recipient, so here was my reply to Josh (apologies to him for the spam), for posterity: Hi, Thanks for your reply. Double NAT tends to break things like ZeroTier. But even if that wasn’t a problem for us, I think the more pressing concern here is that the default admin password for the router is “password”, and you can’t change it without a tech coming out to change it for you, and shelling out $50. Who knows how many residential routers are in their fleet that are “password” protected; seems like a disaster waiting to happen. The model was an Evolution Digital EVO3000GW — thankfully they were able to swap it out with a non-router modem that I had sent to her over the weekend, but not without making a few phone calls, first. It didn’t seem like they could provision the new modem remotely. If anyone has a more security-focused forum they could recommend for a post like this, I’ll be happy to take my inquiry elsewhere. Cheers, Todd > On Feb 8, 2023, at 8:06 AM, Josh Luthman <josh(a)imaginenetworksllc.com <mailto:josh@imaginenetworksllc.com>> wrote: > > What's the problem with double NAT? I can't imagine an elderly mom trying to host Xbox games - which is 95% of the problem with double NAT these days (the other 5% being Ubiquiti bros having to access their Unifi router from anywhere). > > Your screenshots didn't come through, I suspect it's stripped via the mailing list, but there's no model number specified anywhere. > > NANOG really isn't the best place for this, but I don't know where else you would be able to go besides what you've already done: Yondoo support. > > On Tue, Feb 7, 2023 at 9:17 AM TACACS Macaque via NANOG <nanog(a)nanog.org <mailto:nanog@nanog.org>> wrote: >> Hi, >> >> Long time lurker, first time poster. Sorry in advance if this is the wrong forum for something like this. >> >> My mom's ISP (Yondoo) seems to be providing DOCSIS 3.1 CPE (Customer Premises Equipment) with a built-in router, without providing the ability to change the admin password from "password" on it. >> >> >> >> >> >> Their customer service rep said that this is not only WAI, but also wanted to charge her $50 to have a tech come out and change it. Which is obviously less than ideal. >> >> That aside, this seems like a pretty egregious security standard which, from my understanding, can have fairly dire security implications... e.g., DNS server settings can be pointed at whatever someone wants here. >> >> My mom is elderly and had already fallen victim to a call center scammer a couple years ago. They briefly took control over her laptop before she called for backup. So I'm just a little concerned that we have no control over changing this router's admin password — from “password” — in a pinch, without waiting for a truck roll && shelling out $50. >> >> I've sent her a DOCSIS 3.1 modem that doesn't have a router built-in, in hopes that they'll let us bring our own. She does have Google Wifi, but we can't even put their router into bridge mode. So she would be double NATed and have no control over changing the admin password on the first router. >> >> Anyone have any experience with Yondoo? I've tried reaching out to them on multiple fronts, but have yet to hear back from them on this. A tech is scheduled to come out tomorrow, so the plan is to beg (bribe?) them to let us use our own modem and then take it from there. >> >> Thanks, >> Todd

1 0