- NANOG - lists.nanog.org

Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?
by Erik Fichtner 15 Jun '09

15 Jun '09

Brandon Galbraith wrote: >> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-p… > You sure it's their network, and not Twitter's core/edge? They're blaming it on their upstream.

2 1

Apple SSL CA cert Fail (MacOS 10.5.7)
by Robert E. Seastrom 15 Jun '09

15 Jun '09

Hi foks, Ordinarily I wouldn't send reports of operating system bugs that pose no security risk to this list, but I'm making an exception in this case due to the following conditions: 1) There are a lot of Mac users in the NANOG community. 2) There is a preponderance of folks here who run their own CAs 3) CA software, particularly OpenSSL, is byzantine enough that upon running into a problem, one is likely to think he is the faulty party. 4) I just burned three evenings last week chasing this bug. I don't have sufficient extra hair to be spending my evenings tearing it out and you might not either. Summary: MacOSX's keychain access application mishandles importing root CA certs. This only happens under 10.5.7; other versions are fine. There is a workaround using command line tools. Details at http://support.apple.com/kb/TS2747 -r

1 0

spamhaus drop list
by Quinn Mahoney 15 Jun '09

15 Jun '09

I'm looking to implement the Spamhaus drop list. http://www.spamhaus.org/drop/index.lasso On their FAQ they have a script that looks like it grabs the lists text file and connects to a given router, and tells you what has changed in the list, and what your router is null routing. I'm not sure if it then removes the null routes if a list entry has been removed. I haven't found much documentation on the net regarding this. In the future it looks like you will be able to peer with them and null route traffic from a private AS, which will be routes from the drop list. Right now though, it looks like you'd have to update an ACL manually for any changes to the list. Or use this script which null routes the traffic (I guess it's not a big deal getting the syn packets, as long as the mail won't send because of the null route). I am not sure if this script updates the null routes automatically, or how to use it, I can't find to much documentation. Any documentation on this script or another script available. What are your suggestions? thanks

3 2

GoDaddy DNS Contact
by Curtis Maurand 15 Jun '09

15 Jun '09

Would a GoDaddy DNS registration rep contact me off list, please? Thanks in advance, Curtis Maurand 207-252-7748

1 0

Tom, get closer to the mike !!!!
by Jorge Amodio 15 Jun '09

15 Jun '09

ouch

1 0

Re: for the DNS inclined
by bmanning＠vacation.karoshi.com 15 Jun '09

15 Jun '09

On Mon, Jun 15, 2009 at 01:39:53PM +0200, Stefan Schmidt wrote: > Hi Bill, > > On Sat, Jun 13, 2009 at 09:51:45AM +0000, bmanning(a)vacation.karoshi.com wrote: > > There is a public mailing list: root-scaling(a)icann.org > > I fear from the ICANN Website it's not apparent how to subscribe to this > list, can you give me or nanog/dnsop a hint? > > Stefan > -- > Truman's Law: If you can't convince them, confuse them. i am sorry for the confusion. Threw me for a loop as well... i wrote: There is a public mailing list: root-scaling(a)icann.org and There is a comment site: +http://www.icann.org/en/public-comment/public-comment-200907.html#root-scaling which in ICANN parlance is: send mail to <root-scaling(a)icann.org> and your mail shows up on the ICANN website at: http://www.icann.org/en/public-comment/public-comment-200907.html#root-scal… so its not really a forum or format for discussion, its more of a forum where one can vent. not the cleanest design, but that's ICANN view of gaining public inputs. i suspect if you sent mail to any of the members of the study team, inputs would be considered, but it would not be public. --bill

1 0

RE: [inquiry] Internet/cell in Teheran down?
by bobbyjim＠gmail.com 15 Jun '09

15 Jun '09

So what's the update. Has iran gone back? -----Original Message----- From: Eric Brunner-Williams <brunner(a)nic-naa.net> Sent: Saturday, June 13, 2009 8:28 PM To: Steve Pirk <orion(a)pirk.com> Cc: nanog(a)nanog.org Subject: Re: [inquiry] Internet/cell in Teheran down? I exchanged notes with someone in Tehran shortly after 6am EDT this morning. NPR is at least partially incorrect. Steve Pirk wrote: > Npr (All things considered) is reporting that cell phones and Internet > access in at least Teheran if not all of Iran is down. Reporters are > unable to connect out. > > Anyone hear of anything? > -steve > > >

4 3

[inquiry] Internet/cell in Teheran down?
by Steve Pirk 14 Jun '09

14 Jun '09

Npr (All things considered) is reporting that cell phones and Internet access in at least Teheran if not all of Iran is down. Reporters are unable to connect out. Anyone hear of anything? -steve

10 9

RIPE NCC interview about IPv6 deployment with Randy Bush
by Arno Meulenkamp 14 Jun '09

14 Jun '09

As part of our IPv6 training project, that consists of face to face training and on-line learning modules and testimonials, we are proud to announce the second in a series of interviews. Randy Bush (IIJ) discusses IPv6 deployment: http://www.youtube.com/watch?v=QCcigLJJbvU So far, we have interviewed 22 people from the community about their experiences and are very busy editing all the video material. In the coming months, you will be able to enjoy the rest of the interviews here: http://www.youtube.com/user/RIPENCC These interviews will also be published on our e-learning page and on our IPv6 Act Now website: http://ripe.net/training/e-learning/ http://www.ipv6actnow.org/ Cheers, Arno Meulenkamp RIPE NCC

8 10

Traffic billing - L2 encap to include or not?
by Weber, Markus 13 Jun '09

13 Jun '09

We all have our billing systems for traffic (bought, downloaded or home made, volume based or usage). We all got hit by fancy SNMP bugs of various vendors and we all suffer from the fact, that SNMP counters do not carry a time stamp, when they had been taken from the ASICs, causing a slight derivation. [...] Most systems (not the xflow based ones) do use IF-MIB::InOctets and IF-MIB::OutOctets or their HC counter parts to retrieve the number of transmitted bytes and do their calculation based on these numbers. What would you expect these counters to return, esp. on Ethernet? RFC2683 states ifXxxOctets The definitions of ifInOctets and ifOutOctets (and similarly, ifHCInOctets and ifHCOutOctets) specify that their values include framing characters. The media-specific MIB designer MUST specify any special conditions of the media concerning the inclusion of framing characters, especially with respect to frames with errors. The total number of octets transmitted out of/received on the interface, including framing characters." So, is L2 encapsulation (e.g. Ethernet) considered as framing characters or not? Cisco does count them (looks like they also count the FCS), while Juniper does not (at least not on their routers) with above MIBs. So who's right? Which brings me to the question: How do others handle this? Do your customers have to pay for the L2 encapsulation overhead or not? Does your (special) G T&C address this? Does your system adjust the numbers by adding/subtracting L2 enc overhead * number of transmitted packets? Or do you just live with it as it is (and hope, your provider uses J-counters to do their billing). Oh, it's Friday ... Markus PS1: And what about padding? IP packets could be smaller then the min ethernet frame size ... (think of some kind of DOS attacks) ... PS2: Oh, maybe someone could check on J switches - would be nice to know ... -- [E] Markus Weber <fvd(a)kpn.DE> [IRC] FvD [T] +49 69 96874-298 [F] -289 [KPN Eurorings B.V. Darmstädter Landstraße 184 D-60598 Frankfurt] [HRB56874 Amtsgericht Frankfurt Carolien Nijhuis+Louis Rustenhoven]

2 1