- NANOG - lists.nanog.org

Re: Dutch ISPs to collaborate and take responsibility for bottedclients
by deleskie＠gmail.com 04 Oct '09

04 Oct '09

Sounds great but who cover the costs? ------Original Message------ From: Peter Beckman To: Gadi Evron Cc: NANOG Subject: Re: Dutch ISPs to collaborate and take responsibility for bottedclients Sent: Oct 3, 2009 7:18 PM On Sat, 3 Oct 2009, Gadi Evron wrote: > The story is covered by PC mag: Thanks for the article Gadi. Honestly, I wish both my personal ISP and one of my business ISPs would do this. Though I have the technical ability to monitor my outgoing connections for such things, it's not a trivial task and requires resources I've decided not to invest in, namely a Linux PC running as my gateway with yet more software (OS, monitoring tools, etc) I need to secure and keep updated. For me to be thrilled about my ISPs monitoring my connection for "bad behavior," the ISP should: * Quickly notify the customer about the problem via email and phone * Offer the ability to view the evidence of the "bad behavior," accessible on the ISP network via the web so it can be viewed whether the connection is active or blocked, to help determine which host(s) is/are responsible * Clearly classify the type of "bad behavior" and offer both free and paid alternatives to potentially rectify the problem for those less technically inclined to self-solve the issue * Provide a short period of time (3 days) after notification and before disconnect to give an opportunity to fix the issue without service interruption * Offer a simple, automated way to get the connection re-tested and unblocked immediately (within 15 minutes) using a web service accessible even if the connection is blocked This would make me happy. What would make me angry is if they: * Simply turn the connection off with little or no notice * Provide no notification of what happened or why * Offer no evidence of why they turned the connection off to help debug * Force the customer to call customer service to ask for a retest or reconnect * Have the reconnect take multiple hours/days once approved If done right, such a treaty here in the US and elsewhere thing would be a major win for the Internet. Beckman --------------------------------------------------------------------------- Peter Beckman Internet Guy beckman(a)angryox.com http://www.angryox.com/ --------------------------------------------------------------------------- Sent from my BlackBerry device on the Rogers Wireless Network

2 1

Request for Contact - Verizon AS19262
by Shawn Marck 04 Oct '09

04 Oct '09

Can admin from Verizon AS19262 contact me off-list? Changes to our AS are not reaching Verizon AS19262. Thanks, -- Shawn Marck, shawn.marck(a)blacklotus.net

1 0

Request for Contact
by Shawn Somers 03 Oct '09

03 Oct '09

Can an EchoStar admin contact Me off-list? I'm seeing a routing loop at ECHOSTAR.edge1.SaltLakeCity1.Level3.net Shawn Somers (425) 405-0263

1 0

RE: Repeated Blacklisting / IP reputation
by Shawn Somers 03 Oct '09

03 Oct '09

I'd be more than happy to see this, with the added caveat that anyone that returned address space to ARIN that was subsequently marked as 'contaminated', should undergo a review process when attempting to obtain new address space. Charge them for the review process Anyone that intentionally uses address space in a manner that they know will cause it to become contaminated should be denied on any further address space requests. Another option, is to hit them where it matters. Assign fines and fees for churning address space and returning it as contaminated. Set the fee's on a sliding scale based on the amount of contamination and churn. the more contamination, the higher the fee. Shawn Somers Michiel Klaver wrote: --------- > > Message: 3 > Date: Tue, 15 Sep 2009 11:57:58 +0200 > From: Michiel Klaver <michiel(a)klaver.it> > Subject: RE: Repeated Blacklisting / IP reputation, replaced by > registered use > To: "Azinger, Marla" <marla.azinger(a)frontiercorp.com>, John Curran > <jcurran(a)arin.net>, "nanog(a)nanog.org" <nanog(a)nanog.org> > Message-ID: <4AAF6526.9000904(a)klaver.it> > Content-Type: text/plain; charset=UTF-8; format=flowed > > I think ARIN is no party to contact all RBL's and do any cleanup of > 'contaminated' address space. The only steps ARIN might do are: > > - When requesting address space, one should be able to indicate whether > receiving previous used address space would be unwanted or not. > > - When assigning address space, ARIN should notify receivers if it's > re-used or virgin address space. > > - When address space got returned to ARIN and there is evidence of > abuse, they have to mark that address space as 'contaminated' and only > re-assign that space to new end-users who have indicated to have no > problem with that. > > > > With kind regards, > > Michiel Klaver > IT Professional

11 15

Re: Minimum IPv6 size
by Brandon Butterworth 03 Oct '09

03 Oct '09

> > It might be worth relaxing filtering within 2001::/16. The RIPE NCC > > appears to be making /48 PI assignments from within 2001:678::/29 > > (e.g. the > > RIPE Meeting next week will be using 2001:67c:64::/48) > > Why the whole /16 rather than just that /29 and a few other blocks set > aside for /48s? Indeed, and why jumble these up, there's enough space to keep different allocation types separate and have no confusion with just a few trivial filters, universally deployed, which I suggest is the only way to stop degeneration. If one ISP deviates it creates pressure on others to accept the same. Then we're heading for another v4 mess as people will continuously push the boundary. > There are a lot of /48s in a /16, so protecting > against someone accidentally deaggregating their allocated /32 into / > 48s seems legitimate. And some will deaggregate to protect against others advertising more specifics brandon

1 0

Help: Verizon Account Manager
by Seth Mattinen 03 Oct '09

03 Oct '09

This isn't an IP-related call for help, but hopefully someone on here from Verizon is listening or knows someone who can help me. On May 5 I was in touch with account manager J from Verizon who quoted me and set me up with an Ethernet-delivered circuit. The order was placed with implementations manager N. Somewhere during the time it took them between May and July to install the fiber, N dropped off the face of the earth. I asked J WTF is going on and I was put in touch with new implementations manager B who actually managed to finish the job. Turn up time came and - guess what - someone had failed to enter the details of the order (or whatever) between May and August and I didn't get what I ordered. So I tried to call J. Surprise, J's number goes to someone totally different. Many weeks of confusing calls later I finally managed to find J's boss (which is fun because I'm not an active customer yet) and confirmed that J is not there anymore somewhere between Sept 4 and Sept 6. He gave me contact info for my supposed replacement, but they have yet to answer or return even one of my daily calls for a week. I did get a survey for my not-install, gave it horrible marks and checked "please contact me", but nobody has. I've tried every phone number and email address I can get my hands on for the last month with no results. I don't have an account manager. Can anyone help? ~Seth

3 3

[trivial] anyone at gblx with email clue?
by Henry Yen 03 Oct '09

03 Oct '09

Extract: > This is the Postfix program at host sec.phx.gblx.net. > > I'm sorry to have to inform you that your message could not > be delivered to one or more recipients. It's attached below. > > For further assistance, please send mail to <postmaster> > > If you do so, please include this problem report. You can > delete your own text from the attached returned message. > > The Postfix program > > <abuse(a)sec.phx.gblx.net>: can't create user output file > > --4F8461C0F1.1254547841/sec.phx.gblx.net > Content-Description: Delivery report > Content-Type: message/delivery-status > > Reporting-MTA: dns; sec.phx.gblx.net > X-Postfix-Queue-ID: 4F8461C0F1 > X-Postfix-Sender: rfc822; henry(a)AegisInfoSys.com > Arrival-Date: Fri, 2 Oct 2009 22:30:41 -0700 (MST) > > Final-Recipient: rfc822; abuse(a)sec.phx.gblx.net > Action: failed > Status: 5.0.0 > Diagnostic-Code: X-Postfix; can't create user output file > > --4F8461C0F1.1254547841/sec.phx.gblx.net > Content-Description: Undelivered Message > Content-Type: message/rfc822 > > Received: from smtp1.phx.gblx.net (smtp1.phx.gblx.net [64.208.25.103]) > by sec.phx.gblx.net (Postfix) with ESMTP id 4F8461C0F1 > for <abuse(a)sec.phx.gblx.net>; Fri, 2 Oct 2009 22:30:41 -0700 (MST) > Received: (from daemon@localhost) > by smtp1.phx.gblx.net (8.11.2/8.11.2) id n935Ufr02845 > for <abuse(a)gblx.net>; Sat, 3 Oct 2009 05:30:41 GMT -- Henry Yen Aegis Information Systems, Inc. Senior Systems Programmer Hicksville, New York

1 0

Cogent leaking /32s?
by ML 03 Oct '09

03 Oct '09

I received an alert from Cyclops telling me a probe in AS513 had seen a /32 that I announce to Cogent for one of our BGP sessions. Did anyone else see this?

9 11

BGP or MPLS issue AT&T in New York?
by Christopher J. Pilkington 03 Oct '09

03 Oct '09

Anyone notice anything bizarre with AT&T in New York? We had our cage at 811 10th Avenue (advertised by AS7018) unreachable from several other providers for about 20 minutes, it just recently came back. At the same time, we lost MPLS service (not link, forwarding across the cloud) at another site with AT&T. Both issues resolved simultaneously. Just curious... Chris

7 7

BGP Update Report
by cidr-report＠potaroo.net 02 Oct '09

02 Oct '09

BGP Update Report Interval: 24-Sep-09 -to- 01-Oct-09 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9198 45161 3.3% 118.2 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 2 - AS9531 28945 2.1% 5789.0 -- GEDU-AS-KR Kwangju City Office Of Education 3 - AS6298 27085 2.0% 49.5 -- ASN-CXA-PH-6298-CBS - Cox Communications Inc. 4 - AS35805 19455 1.4% 44.2 -- UTG-AS United Telecom AS 5 - AS8452 13685 1.0% 13.8 -- TEDATA TEDATA 6 - AS1659 11291 0.8% 34.4 -- ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center 7 - AS17488 9677 0.7% 6.4 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 8 - AS6389 8046 0.6% 1.9 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 9 - AS4323 7738 0.6% 1.8 -- TWTC - tw telecom holdings, inc. 10 - AS24863 7552 0.6% 8.0 -- LINKdotNET-AS 11 - AS29049 7334 0.5% 24.1 -- DELTA-TELECOM-AS Delta Telecom LTD. 12 - AS9829 6764 0.5% 8.3 -- BSNL-NIB National Internet Backbone 13 - AS17819 6609 0.5% 48.6 -- ASN-EQUINIX-AP Equinix Asia Pacific 14 - AS7552 6291 0.5% 20.4 -- VIETEL-AS-AP Vietel Corporation 15 - AS5050 6165 0.5% 362.6 -- PSC-EXT - Pittsburgh Supercomputing Center 16 - AS12479 6025 0.4% 13.5 -- UNI2-AS Uni2 Autonomous System 17 - AS8151 5935 0.4% 4.0 -- Uninet S.A. de C.V. 18 - AS7018 5913 0.4% 3.9 -- ATT-INTERNET4 - AT&T WorldNet Services 19 - AS680 5664 0.4% 20.8 -- DFN-IP service X-WiN 20 - AS4249 5620 0.4% 30.9 -- LILLY-AS - Eli Lilly and Company TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9531 28945 2.1% 5789.0 -- GEDU-AS-KR Kwangju City Office Of Education 2 - AS48728 4236 0.3% 1059.0 -- VODAFONEQATAR Vodafone Qatar Q.S.C. 3 - AS49517 1615 0.1% 807.5 -- TEIKHOS-AS Teikhos 4 - AS43880 787 0.1% 787.0 -- LITECH-AS Laboratory of Information Technologies LLC 5 - AS26414 535 0.0% 535.0 -- LVCINT - LVC International, LLC 6 - AS3 472 0.0% 143.0 -- MINDSPEED-AS Mindspeed Technologies Ukraine LLC 7 - AS44194 471 0.0% 471.0 -- FREIFUNK-BERLIN-AS Freifunk Berlin 8 - AS38467 390 0.0% 390.0 -- DBAMOYLAN-TRANSIT-AS-AP DBA Moylan 9 - AS8668 2572 0.2% 367.4 -- TELONE-AS TelOne Zimbabwe P/L 10 - AS5050 6165 0.5% 362.6 -- PSC-EXT - Pittsburgh Supercomputing Center 11 - AS30969 5332 0.4% 333.2 -- TAN-NET TransAfrica Networks 12 - AS37077 312 0.0% 312.0 -- AAUN-NG 13 - AS48106 284 0.0% 284.0 -- VLAN-AS SPD Kirichok 14 - AS16309 266 0.0% 266.0 -- EEA-AS SPD Efendeev AS 15 - AS32666 1058 0.1% 264.5 -- CWRU-AS-1 - Case Western Reserve University 16 - AS43864 252 0.0% 252.0 -- INTEGRA-MEDIA-AS Integra-Media Ltd 17 - AS36239 249 0.0% 249.0 -- EXIGEN-CANADA - Exigen Canada 18 - AS36979 223 0.0% 223.0 -- FBN-AS 19 - AS38510 223 0.0% 223.0 -- DEPTAN-AS-ID DEPARTEMEN PERTANIAN REPUBLIK INDONESIA 20 - AS22917 1278 0.1% 213.0 -- INFOCHANNEL - InfoChannel Ltd. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 72.23.246.0/24 6115 0.4% AS5050 -- PSC-EXT - Pittsburgh Supercomputing Center 2 - 210.218.64.0/19 5789 0.4% AS9531 -- GEDU-AS-KR Kwangju City Office Of Education 3 - 211.253.68.0/22 5789 0.4% AS9531 -- GEDU-AS-KR Kwangju City Office Of Education 4 - 211.253.72.0/21 5789 0.4% AS9531 -- GEDU-AS-KR Kwangju City Office Of Education 5 - 210.217.224.0/19 5789 0.4% AS9531 -- GEDU-AS-KR Kwangju City Office Of Education 6 - 210.218.0.0/18 5789 0.4% AS9531 -- GEDU-AS-KR Kwangju City Office Of Education 7 - 88.204.221.0/24 5005 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 8 - 95.59.1.0/24 4967 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 9 - 89.218.218.0/23 4873 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 10 - 89.218.220.0/23 4869 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 11 - 95.59.2.0/23 4865 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 12 - 95.59.4.0/22 4861 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 13 - 92.46.244.0/23 4860 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 14 - 95.59.3.0/24 4856 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 15 - 95.59.8.0/23 4855 0.3% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 16 - 84.1.45.0/24 3066 0.2% AS41313 -- NOVATEL-AS Novatel Bulgaria 17 - 192.12.120.0/24 2520 0.2% AS5691 -- MITRE-AS-5 - The MITRE Corporation 18 - 85.60.208.0/21 2445 0.2% AS12479 -- UNI2-AS Uni2 Autonomous System 19 - 202.177.223.0/24 2323 0.2% AS17819 -- ASN-EQUINIX-AP Equinix Asia Pacific 20 - 85.60.208.0/22 2316 0.2% AS12479 -- UNI2-AS Uni2 Autonomous System Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0