- NANOG - lists.nanog.org

BGP question
by Rens 17 Sep '09

17 Sep '09

Hi all, I'm having difficulties to understand why I am not advertising a certain customer range to my upstream. I can see this range in my BGP table 3 times. show ip bgp customer_range Number of BGP Routes matching display condition : 3 Status codes: s suppressed, d damped, h history, * valid, > best, i internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *>i customer_range Local IX 110 0 XXXX YYYY i * customer_range upstream provider 100 0 AAAA BBBB XXXX YYYY i * customer_range my customer 0 120 0 YYYY YYYY i Last update to IP routing table: 0h23m34s, 1 path(s) installed: Route is not advertised to any peers customer_range = each time the same /24 But it seems to choose the set the one as local IX as best. When I disable local IX it sets the one with my upstream provider as best. Shouldn't it set the customer_range I receive from my customer as best since it's highest local pref and advertise it to my upstream provider peer? Regards, Rens

2 2

<Keepalives are temporarily in throttle due to closed TCP window>
by Michael Ruiz 17 Sep '09

17 Sep '09

I am having difficulty maintaining my BGP session from my 6509 with Sup-7203bxls to a 7206 VXR NPE-400. The session bounces every 3 minutes. I do have other IBGP sessions that are established with no problems, however, this is the only IBGP peer that is bouncing regularly. cr1.AUSTTXEE#show ip bgp neighbors 67.214.64.100 <SNIP> BGP state = Established, up for 00:02:54 Last read 00:00:53, last write 00:02:54, hold time is 180, keepalive interval is 60 seconds Keepalives are temporarily in throttle due to closed TCP window Neighbor capabilities: Route refresh: advertised and received(new) Address family IPv4 Unicast: advertised and received Message statistics: What does exactly the message mean and how do I stabilize this? Any help will be appreciated. Michael Ruiz Network Engineer Office 210-448-0040 Cell 512-744-3826 mruiz(a)telwestservices.com <mailto::mruiz@telwestservices.com> "I don't measure a man's success by how high he climbs but how high he bounces when he hits bottom." - General George S. Patton Jr. How am I doing? Please email my Director of Engineering Jared Martin with any feedback at: jmartin(a)telwestservices.com

6 15

ADMIN: List FAQ/Monthly Post.
by NANOG Mail List Committee 16 Sep '09

16 Sep '09

This 100-line document contains 62% of what you need to know to avoid annoying 10,000 people in your email to the NANOG list. It also contains pointers to another 23%. Please take 5 minutes to read it before you post [again]. General Information =================== About NANOG: http://www.nanog.org/about/ NANOG News: http://www.nanog.org/ NANOG lists and AUP: http://www.nanog.org/mailinglist/ NANOG List FAQ: http://www.nanog.org/mailinglist/listfaqs/ To Subscribe or Unsubscribe from the list: http://mailman.nanog.org/mailman/listinfo/nanog To contact the list's admins: admins(a)nanog.org Posting Policy ============== The NANOG list has over 10,000 subscribers so it is very easy for a thread to have scores of posts while being off-topic and only of interest to only a small proportion of subscribers. Please consider before each post if your email will be of interest to the majority of members or might alternatively be emailed directly the people of interest or posted to another forum. Please read the FAQ and AUP policy before posting for more details. Especially the following are discouraged: * Is a certain site down? Other Outages not affecting half the Internet. Please use http://downforeveryoneorjustme.com/ or a similar site. Please post to the Outages mailing list: http://wiki.outages.org * Spam Please use SPAM-L - http://spam-l.com/mailman/listinfo * Contacting People * http://puck.nether.net/netops/ * http://www.peeringdb.com * Please try other methods of contacting sites before you post to NANOG. Saying something like "I tried calling 213-555-3333 but no answer" shows you _have_ tried alternative methods first. * Political Issues * Topics such as ICANN policy, Government Policy or Law changes that do not have short term Operational impact should be avoided. * Operation topics with more specific lists * DNS - http://lists.oarci.net/mailman/listinfo/dns-operations * Email - http://www.mailop.org/ * NANOG Mailing list policy Please use the nanog-futures list or contact admins(a)nanog.org Please also avoid ================= * Sending posts to the list relevant to only one or two people on this list, such as tests or traceroutes in response to another post for comparison to those originally posted. * Jokes, Puns, amusing observations, spelling corrections. Other NANOG related lists ========================= * NANOG-futures - for discussion of the evolution of NANOG, including organizational structure, policies and procedures, and agendas for NANOG meetings. Such topics aren't appropriate for the main NANOG mailing list. http://mailman.nanog.org/mailman/listinfo/nanog-futures * nanog-attendee - For discussion of venue-specific issues relevant to attendees of the current NANOG physical meeting. http://mailman.nanog.org/mailman/listinfo/nanog-attendee * nanog-announce - For announcements of NANOG meetings an other Important NANOG related announcements. Low traffic and all posts are also sent to main list. http://mailman.nanog.org/mailman/listinfo/nanog-announce Other Mailing Lists =================== Information about related lists: http://www.nanog.org/mailinglist/listfaqs/otherlists.php

1 0

Repeated Blacklisting / IP reputation
by Tom Pipes 15 Sep '09

15 Sep '09

Greetings, We obtained a direct assigned IP block 69.197.64.0/18 from ARIN in 2008. This block has been cursed (for lack of a better word) since we obtained it. It seems like every customer we have added has had repeated issues with being blacklisted by DUL and the cable carriers. (AOL, AT&T, Charter, etc). I understand there is a process to getting removed, but it seems as if these IPs had been used and abused by the previous owner. We have done our best to ensure these blocks conform to RFC standards, including the proper use of reverse DNS pointers. I can resolve the issue very easily by moving these customers over to our other direct assigned 66.254.192.0/19 block. In the last year I have done this numerous times and have had no further issues with them. My question: Is there some way to clear the reputation of these blocks up, or start over to prevent the amount of time we are spending with each customer troubleshooting unnecessary RBL and reputation blacklisting? I have used every opportunity to use the automated removal links from the SMTP rejections, and worked with the RBL operators directly. Most of what I get are cynical responses and promises that it will be fixed. If there is any question, we perform inbound and outbound scanning of all e-mail, even though we know that this appears to be something more relating to the block itself. Does anyone have any suggestions as to how we can clear this issue up? Comments on or off list welcome. Thanks, --- Tom Pipes T6 Broadband/ Essex Telcom Inc tom.pipes(a)t6mail.com

44 80

[NANOG-announce] Lightning talks open for NANOG 47
by David Meyer 15 Sep '09

15 Sep '09

Just a reminder: Lightning talks are open for NANOG 47. Looking forward to your submissions. Dave (for the NANOG PC) _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Re: Repeated Blacklisting / IP reputation
by JC Dill 15 Sep '09

15 Sep '09

John Curran wrote: > On Sep 8, 2009, at 2:18 PM, JC Dill wrote: > > > It seems simple and obvious that ARIN, RIPE, et. al. should > > determine the blacklist state of a reclaimed IP group and ensure > > that the IP group is usable before re-allocating it. > > > > When IPs are reclaimed, first check to see if the reclaimed IPs are > > on any readily checked RBL or private blacklist of major ISPs, > > corporations, universities, etc. If so, work with those groups to > > get the blocks removed *prior* to reissuing the IPs to a new > > entity. Before releasing the IPs to a new entity, double check that > > they are not being blocked (that any promises to remove them from > > a blacklist were actually fulfilled). Hold the IPs until you have > > determined that they aren't overly encumbered with prior blacklist > > blocks due to poor behavior of the previous entity. (The same > > should be done before allocating out of a new IP block, such as > > when you release the first set of IPs in a new /8.) > > In this case, it's not the RBL's that are the issue; the address > block in question isn't on them. It's the ISP's and other firms > using manual copies rather than actually following best practices. It's not that hard to make a list of the major ISPs, corporations, universities (entities with a large number of users), find willing contacts inside each organization (individual or role addresses you can email, and see if the email bounces, and who will reply if the email is received) and run some automated tests to see if the IPs are being blocked. In your follow-up email to me, you said you check "dozens" of RBLs - that is clearly insufficient - probably by an order of magnitude - of the entities you should check with. The number should be "hundreds". A reasonably cluefull intern can provide you with a suitable list in short order, probably less than 1 day, and find suitable contacts inside each organization in a similar time frame - it might take a week total to build a list of ~500 entities and associated email addresses. Because of employee turn-over the list will need to be updated, ~1-10 old addresses purged and replaced with new ones on a monthly basis. > > Why isn't this being done now? > > > > Issuing reclaimed IPs is a lot like selling a used car, except that > > the buyer has no way to "examine" the state of the IPs you will > > issue them beforehand. Therefore it's up to you (ARIN, RIPE, et. > > al.) to ensure that they are "just as good" as any other IP block. > > It is shoddy business to take someone's money and then sneakily > > give them tainted (used) goods and expect them to deal with > > cleaning up the mess that the prior owner made, especially when you > > charge the same rate for untainted goods! > > Not applicable in this case, as noted above. What do you mean, "not applicable"? You take the money and issue IPs. There is no way for the "buyer" to know before hand if the IPs are "tainted" (used) or new. It is up to you (ARIN) to ensure that the goods (IPs) are suitable for the intended use. My analogy is entirely applicable, and I'm amazed you think otherwise. > So, back to the question: could someone explain why they've got > copies of the RBL's in their network which don't get updated on any > reasonable refresh interval? (weekly? monthly?) The "why" really isn't at issue - it happens and it's going to keep happening. The question is what are you (ARIN) going to do about it? Give me the serenity to accept the things I cannot change, The courage to change the things I can, And the wisdom to know the difference. You (ARIN et. al.) don't have any ability to change the why. What you can change is how you go about determining if an IP block is suitable for reallocation or not, and what steps you take to repair IP blocks that aren't suitable for reallocation. jc - posted to NANOG since John indicated that he thought his reply to me was going to NANOG as well.

13 15

Dedicated Route Reflectors
by Serge Vautour 15 Sep '09

15 Sep '09

Hello, We're in the process of planning for an MPLS network that will use BGP for signaling between PEs. This will be a BGP free Core (i.e. no BGP on the P routers). What are folks doing for iBGP in this case? Full Mesh? Full Mesh the Main POP PEs and Route Reflect to some outlining PEs? Are folks using dedicated/centralized Route Reflectors (redundant of course)? What about using some of the P routers as the Centralized Route Reflectors? The boxes aren't doing much from a Control Plane perspective, why not use them as Route Reflectors. Any comments would be appreciated. Thanks, Serge __________________________________________________________________ Looking for the perfect gift? Give the gift of Flickr! http://www.flickr.com/gift/

5 4

Verizon Wireless (AS22394) network engineering contact needed
by David Ulevitch 14 Sep '09

14 Sep '09

I'm having some trouble reaching a capable network engineer who runs Verizon Wireless (AS22394). The contact on the ARIN address space I have issues with does indeed pick up the phone but is not someone who is aware of what BGP is. Additionally, VZW is not listed on the NOC contacts page hosted by our friend Jared. If someone could put me in touch with a warm body, I'd be much obliged. Thanks, David

2 1

[NANOG-announce] NANOG SC Nominations
by Betty Burke 14 Sep '09

14 Sep '09

Last Call!! SC Candidate nominations close midnight EST 9-14-09 Current Candidates posted at http://nanog.org/governance/elections/2009elections/2009sc_candidates.php Send those additional nominations to nominations(a)nanog.org! Look forward to seeing you in Dearborn, Michigan, October 18-21, 2009 for NANOG47!!! Betty Merit Network Inc. NANOG Community Project Manager NANOG47 Sponsorship opportunities still available, information found at http://nanog.org/meetings/nanog47/sponsorships.php _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Rack Space in Chicago area
by John Palmer 14 Sep '09

14 Sep '09

I may be in need of rack space in the Chicago area - the closer to downtown, the better. I have need for about 24U of space and enough AC for 4 - 2U servers, 3 - 1U servers, 2 hubs and a 3640 router. Would need connectivity (100MB ethernet) and someone that can do a BGP session with us for 3 network blocks. Timeframe would be end of year, early January. Please contact me off-list at this address. Thanks John Palmer American Webmasters, Inc.

1 0