- NANOG - lists.nanog.org

gmail dropping mesages
by Bill Blackford 27 Apr '11

27 Apr '11

I've recently observed gmail dropping messages or not forwarding all messages/posts from the nanog list. This is rather annoying. Has anyone else experienced this? Does anyone have any insight as to why? Thanks, -b -- Bill Blackford Network Engineer Logged into reality and abusing my sudo privileges.....

10 13

Barracuda Networks is at it again: Any Suggestions as to an Alternative?
by John Palmer (NANOG Acct) 27 Apr '11

27 Apr '11

OK, its been a year since my Barracuda subscription expired. The unit still stops some spam. I figured that I would go and see what they would do if I tried to renew my subscription EXACTLY one year after it expired. Would their renewal website say "Oh, you are at your anniversary date", and renew me for a year? No such luck: They want me to PAY FOR AN ENTIRE YEAR for which I did NOT receive service and then for the current (upcoming year). Sorry - I don't allow myself to be ripped off like that. Sorry Barracuda - you get no money from me and I'll tell everyone I know about this policy of yours. I posted an article about this unscrupulous practice on my blog last year at http://www.john-palmer.net/wordpress/?p=46 My question is - does anyone have any suggestions for another e-mail appliance like the Barracuda Spam Firewall that doesn't try to charge their customers for time not used. I should be able to shut off the unit for a year or whatever and simply renew from the point that I re-activate the unit instead of having to pay for back-years that I didn't use. Thanks

28 29

SIXXS contact
by Andrew Kirch 27 Apr '11

27 Apr '11

would someone at SIXXS please contact me off-list regarding an account issue?

11 17

6PE command for IOS and XR
by Vikas Sharma 27 Apr '11

27 Apr '11

Hi, I was trying command "mpls ipv6 source-interface <>" on SRE3 code, look like there is no command like that on SRE. This command is important for locally generated packets. Have someone used this command? Also what is the command on XR 4.0.1 to achieve the same? Regards, Vikas

2 2

IPv6 Prefix announcing
by Nick Olsen 26 Apr '11

26 Apr '11

Greetings NANOG, I've always been under the impression its best practice to only announce prefixes of a /24 and above when it comes to IPv4 and BGP. I was wondering if something similar had been agreed upon regarding IPv6. And if That's the case, What's the magic number? /32? /48? /64? Nick Olsen Network Operations (855) FLSPEED x106

9 8

Multi-site, multi-path to Internet - customer question - off topic ?
by Steve Benoit 26 Apr '11

26 Apr '11

Good day I have a question from a customer point of view. We currently have a multi-site WAN with all our Internet connectivity at one site consisting of 3 ISP type connections, full BGP, including our own ASN with IPv4 and v6 addressing space. All up and running. I am now looking to add Internet connectivity from a second site on our WAN for fail over in the event of a site 1 failure. My initial thoughts are towards another full BGP session at site 2, and perhaps something like Cisco's Global Site Selector, or F5's GTM to direct traffic. I'm thinking of phasing this in over a couple of years since the "server" folks will not have full hot fail-over at that site for that period. Of course, in a failure situation, the site will be expected to be live and operational immediately. Any suggestions on where I should start looking ? Any good white papers or case studies you have seen? And technologies we should look at or stay away from ? Thanks Steve Benoit

1 0

best of breed nowadays in DPI space?
by Rogelio 26 Apr '11

26 Apr '11

I have been recently researching DPI for several projects I am working on, and I recently came across this "shoot out" between several vendors in 2009 http://www.internetevolution.com/document.asp?doc_id=178633&page_number=1 Procera (at that time) emerged "the winner" for its ability to process P2P traffic (out of 15 participants), and I was wondering what new players, features, or products others might point me to. I am looking for something that does reporting *and* DPI in a distributed environment. That means, I might have several DPI gateways around the country that need to roll up their reporting into one main one. (I also have some other requirements as far as measuring churn reduction and cellular offloading, but I'm not sure that any of the DPI solutions can really do that well.) If anyone has any good contacts in this space, please let me know and I might discuss with them in more detail these opportunities that I'm looking for. -- Also on LinkedIn? Feel free to connect if you too are an open networker: scubacuda(a)gmail.com

1 3

Ongoing ASN and IP Space Hijacks: Update (TimeWarner/Level3/Tiscali)
by Ronald F. Guilmette 25 Apr '11

25 Apr '11

Eleven days ago, I reported here the following highly probable hijacks: AS8143 AS29987 AS11756 AS47024 AS27906 198.23.32.0/20 - NET-198-23-32-0-1 198.57.64.0/20 - NET-198-57-64-0-1 199.88.32.0/20 - NET-199-88-32-0-1 199.192.16.0/20 - NET-199-192-16-0-1 199.196.192.0/19 - NET-199-196-192-0-1 200.107.216.0/21 - GT-AGSA1-LACNIC 204.147.240.0/20 - NET-204-147-240-0-1 207.22.224.0/19 - (NET-207-22-192-0-1 Routing to a few of the above IP blocks has now been terminated, however at present I find that several of them are still very much alive and well, in particular: 199.88.32.0/20 - NET-199-88-32-0-1 199.196.192.0/19 - NET-199-196-192-0-1 200.107.216.0/21 - GT-AGSA1-LACNIC 204.147.240.0/20 - NET-204-147-240-0-1 As I previously mentioned, these are being used by high-end snowshoe spamming operations. Simple question: Does anybody give a damn? Regards, rfg P.S. Routing for the still-live hijacked blocks is as follows: 199.88.32.0/20 hijacked via AS29987 (hijacked ASN) via AS3257 (tiscali.net) 199.196.192.0/19 hijacked via AS8143 (hijacked ASN) via AS19844 (gorack.com) via AS4323/TimeWarner & AS3356/Level3 200.107.216.0/21 hijacked via AS8143 (hijacked ASN) via AS19844 (gorack.com) via AS4323/TimeWarner & AS3356/Level3 204.147.240.0/20 hijacked via AS47024 (hijacked ASN) via AS3257 (tiscali.net) P.P.S. As I also mentioned previously, GoRack seems to have some non-trivial connection to another South Florida company, Joytel Wireless, which itself was caught red-handed performing a sizable number of rather brazen IP block hijackings back in October: http://mailman.nanog.org/pipermail/nanog/2010-October/025997.html Given that Joytel/GoRack are clearly not at all bashful about what they are up to, it seems to me that it is incumbant upon TimeWarner and Level3 to take some action here. Otherwise, these hijackings are obviously just going to go on and on and on. As for Tiscali, and its obvious part in all this... well... if anyone is aware of any concious entity @ Tiscali who might actually give a damn about anything other than short-term profits, please do let me know. The people I've talked to, and the evidence above all indicates that Tiscali is, quite simply, ready, willing, and able to whore itself out to just about anybody.

2 2

riverbed steelhead
by harbor235 25 Apr '11

25 Apr '11

Anyone out there have experience with Riverbed Steelhead products? Do they improve TCP performance over WAN links? is it worth the price? mike

8 8

Outage Management/Log Book
by Payam Poursaied 25 Apr '11

25 Apr '11

Hi all May I have your recommendation regarding any outage management software and NOC log book(preferably open source) . I want to get fresh ideas about available software in this area. The below scenario may explain what I am looking for: One of the sites gets down, monitoring team would log it. Technical staffs follow it, they find there is something wrong in the site. Someone gets to the site and find there is a power failure. Make it correct. Monitoring team again see that site UP and update their log book put the recovery time and the reason (i.e. power failure) One of the simplest report from this system would be downtime per site/per reason. The ability to record group outage - manually or automatically based on network topology - (i.e. failure of a core router in a city which would be caused several sites failure) would be also useful. Best Regards Payam Poursaied

4 4