- NANOG - lists.nanog.org

gmail issues ?
by Mike Tancsa 16 Mar '11

16 Mar '11

Anyone seeing gmail issues ? I checked at http://www.google.com/appsstatus#hl=en and it says all ok. Yet I either get an RST, or it just times out, or the 3 way handshake completes, and then just FINs my connection. I tried a number of different source IPs inside my network as well as some outside my AS. # telnet gmail-smtp-in.l.google.com 25 Trying 74.125.95.27... telnet: connect to address 74.125.95.27: Connection refused telnet: Unable to connect to remote host 17:12:29.464719 IP 64.7.153.18.19574 > 209.85.225.27.25: Flags [S], seq 688245543, win 65535, options [mss 1460,nop,wscale 3,sackOK,TS val 2436358711 ecr 0], length 0 17:12:29.496153 IP 209.85.225.27.25 > 64.7.153.18.19574: Flags [S.], seq 2208544696, ack 688245544, win 5672, options [mss 1430,sackOK,TS val 1980791251 ecr 2436358711,nop,wscale 6], length 0 17:12:29.496174 IP 64.7.153.18.19574 > 209.85.225.27.25: Flags [.], ack 1, win 8330, options [nop,nop,TS val 2436358743 ecr 1980791251], length 0 17:12:29.528117 IP 209.85.225.27.25 > 64.7.153.18.19574: Flags [F.], seq 1, ack 1, win 89, options [nop,nop,TS val 1980791283 ecr 2436358743], length 0 17:12:29.528135 IP 64.7.153.18.19574 > 209.85.225.27.25: Flags [.], ack 2, win 8330, options [nop,nop,TS val 2436358775 ecr 1980791283], length 0 17:12:29.528195 IP 64.7.153.18.19574 > 209.85.225.27.25: Flags [F.], seq 1, ack 2, win 8330, options [nop,nop,TS val 2436358775 ecr 1980791283], length 0 17:12:29.559511 IP 209.85.225.27.25 > 64.7.153.18.19574: Flags [.], ack 2, win 89, options [nop,nop,TS val 1980791314 ecr 2436358775], length 0 ---Mike -- ------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike(a)sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/

9 9

US .mil blocking in Japan
by ryanL 16 Mar '11

16 Mar '11

should i be surprised that this hasn't been discussed much? anyone care to elaborate and/or expand on the real telecom damage done in japan? re: http://on.cnn.com/h8wiYg .rL

2 1

Microsoft contact
by Andy Ringsmuth 15 Mar '11

15 Mar '11

Any chance there's someone on here from Microsoft that could reply to me off-list? Thanks in advance. --- Andy Ringsmuth andyring(a)inebraska.com

2 2

Announcement: New RIPE NCC E-Learning Module DNS Vulnerabilities
by Sandra Bras 15 Mar '11

15 Mar '11

I sent this as an official announcement to several RIPE mailing lists, and I am sending it to you because I think you would appreciate this information too. The RIPE NCC announced today the launch of "DNS vulnerabilities", the second module of our DNSSEC E-Learning course. This module explains two common DNS security problems: "Man in the Middle" and "Kaminsky Attack". It can be viewed at: http://www.ripe.net/lir-services/training/e-learning/dnssec/dns-vulnerabili… We will be releasing more modules in the coming months, including: Module 3 DNSSEC and RIPE Database Modules. The RIPE NCC E-Learning is a free service that is available to everyone. If you have any questions, please feel free to contact us at e-learning(a)ripe.net. I hope this is useful for you. Sandra Brás Trainer/E-Learning Coordinator RIPE NCC

1 0

March Madness on Demand CDN?
by Brad Fleming 15 Mar '11

15 Mar '11

Does anyone know which CDN(s) will be used for this year's March Madness On Demand?

1 0

Major ARIN Online system changes on 19 March 2010
by John Curran 15 Mar '11

15 Mar '11

NANOG Folks - Apologies for the cross post from ARIN-Announce, but I believe there is a potential for indirect operational impact for networks otherwise unaware. Thanks! /John John Curran President and CEO ARIN To: ARIN-Announce Posted: Wed, 9 March 2011 On 19 March, ARIN will deploy the biggest system update in the history of ARIN Online along with launching our new RESTful Provisioning system. This deployment will change the way all customers do business with ARIN, and we want to take this opportunity to remind you of what is in store. It is critical to note that all initial and additional requests for Internet number resources (IPv4, IPv6, and ASNs) will only be processed through ARIN Online. This means you will be able to complete your request via an online form, upload any required documentation, and all subsequent communication, excluding securing officer attestation, will be tracked directly in the ticket history for the request. ARIN Online can also be used to submit IPv4 and IPv6 network modifications, ASN modifications, and for all types of POC and Org management. Because there are a number of actions that customers prefer to automate, ARIN is also releasing updated templates (Version 5). This template set includes POCs, Orgs, reassignments, reallocations, and Network Modifications. The nameserver fields are being removed from the Version 5 templates; nameservers will be managed using the ARIN Online delegation management system. The new templates are available for preview at: https://www.arin.net/features/template_changes.html All templates will require the inclusion of an API key for added security and authentication. Details on API keys are available at: https://www.arin.net/features/api_keys.html All of the transactions that are available using the Version 5 templates can also be automated using the RESTful Provisioning system which will also be released at this time. Documentation on ARIN’s RESTful methods and payloads can be found at: https://www.arin.net/resources/restful-interfaces.html We have created a chart to help you visualize which actions can be performed via ARIN Online, RESTful Provisioning, and Version 5 templates. The guide, Interacting with ARIN’s Registration Services, is available for preview at: https://www.arin.net/resources/interacting.html ARIN is also releasing the previously mentioned ARIN Online delegation management system. We have created a flash tutorial on the new DNS management interface. We encourage you to view the tutorial which demonstrates how to use ARIN Online for delegation management along with new DNSSEC functionality. https://www.arin.net/knowledge/dnssec/ If you have further questions about these template changes or other upcoming features, please email hostmaster(a)arin.net<mailto:hostmaster@arin.net>. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN)

1 0

Re: Internet Edge Router replacement - IPv6 route table size considerations
by tsison＠gmail.com 14 Mar '11

14 Mar '11

have you looked into juniper networks? ----- Reply message ----- From: "Chris Enger" <chrise(a)ci.hillsboro.or.us> Date: Tue, Mar 8, 2011 5:15 pm Subject: Internet Edge Router replacement - IPv6 route table size considerations To: "'nanog(a)nanog.org'" <nanog(a)nanog.org> Greetings, I am researching possible replacements for our Internet edge routers, and wanted to see what people could recommend for a smaller chassis or fixed router that can handle current IPv4 routes and transition into IPv6. Currently we have Brocade NetIron 4802s pulling full IPv4 routes plus a default route. I've looked at Extreme, Brocade, Cisco, and a few others. Most range from 256k - 500k IPv4 and 4k - 16k IPv6 routes when CAM space is allocated for both. The only exception I've found so far is the Cisco ASR 1002, which can do 125k v6 along with 500k v4 routes at once. I'm curious if any other vendors have comparable products. My concern is trying to find a router (within our budget) that has room for growth in the IPv6 routing space. When compared to the live table sizes that the CIDR report and routeviews show, some can't handle current routing tables, let alone years of growth. BGP tweaks may keep us going but I can't see how 16k or fewer IPv6 routes on a router is going to be viable a few years from now. Thank you, Chris Enger

29 59

Why does abuse handling take so long ?
by Alexander Maassen 14 Mar '11

14 Mar '11

Dear nanog members, As current maintainer of DroneBL I happen to receive a lot of unwanted packets in the form of DDoS attacks, now the DDoS itself is not the real problem, dealing with it the fast way is. Now most of you would think: Just filter it, put a big firewall in front of it, bla bla bla bla. But what I'm really talking about is the ignorance most providers show when it comes to handling the abuse when it gets reported. The issue in there being, it's way too slow, and my hoster needs to temporary nullroute my ip range in order to protect his network. We both mail all the involved providers and sometimes need to wait days before hostings act upon the mail. In most cases the only thing the abuse@ contacts do as hoster, is relay the mail to the client but do not dare to do anything themself, even if you provide them with a shitload of logs, even if you call them and say that the attack from their source is still continueing, they refuse to look into it and shutdown the source. And that pisses me off badly. Why o why are isp's and hosters so ignorant in dealing with such issues and act like they do not care? Kind regards, Alexander Maassen Maintainer DroneBL

18 28

need help about switch montior
by Deric Kwok 14 Mar '11

14 Mar '11

Hi ls there any program/way to monitor the switch port/switch status when it reaches to certain bandwidth? Thank you so much

6 6

estimation of number of DFZ IPv4 routes at peak in the future
by Mikael Abrahamsson 14 Mar '11

14 Mar '11

Hi. We had an interesting discussion the other day at work. We were speculating on how many DFZ IPv4 routes there would be at peak in the future before it starts to decline again due to less IPv4 usage. The current number is around 350k, and my personal estimation is that it would grow by at least 100k more due to the the last 5 /8s being carved up at around /22 meaning each /8 ending up with 16k routes, plus the last allocations being seen in the remaining RIR "normal allocations" would be smaller than before plus de-aggregation of space as people "sell" or "lease" subspace of their allocations. My guess therefore is a peak around 450-500k IPv4 DFZ routes and that this would happen in around 3-5 years. I wanted to record this for posterity. What is your guess, any why? -- Mikael Abrahamsson email: swmike(a)swm.pp.se

17 37