- NANOG - lists.nanog.org

Fwd: Cingular Data Network Problems
by andrew matthews 27 Apr '07

27 Apr '07

oops, i wasn't hitting reply all, apparently gmail strips out the email to nanog and sends it directly to the user. ---------- Forwarded message ---------- From: andrew matthews <exstatica(a)gmail.com> Date: Apr 27, 2007 12:13 AM Subject: Re: Cingular Data Network Problems To: Brandon Galbraith <brandon.galbraith(a)gmail.com> On 4/26/07, Brandon Galbraith <brandon.galbraith(a)gmail.com> wrote: > Is that the only IP you can't ping? Or can you not ping/traceroute in > general? I myself use T-Mobile's EDGE service in Chicago, and can ping but > cannot traceroute out in any functional way. > > -brandon > Well I can cannot ping that network. But i can ping other ips on different subnets at the same provider. But lets say i want to access www.mednor.net Its on that network. I cannot do it on the Cingular network but i can on my cable modem or other networks i use. But randomly it works sometimes. I'm not sure about traceroutes i didn't try to do much of it. But for example. redline.mednor.net i've always been able to access using my cingular network. but www.mednor.net i cannot. -andrew

1 0

Cingular Data Network Problems
by andrew matthews 27 Apr '07

27 Apr '07

I live in Los Angeles, and I'm experiencing very odd connect problems. I have both a Cingular Laptop connect card, and a Cingular 8525. Mostly i'm on edge, sometimes 3g/hsdpa. From anywhere in the world i can ping 66.102.136.161 except on my cingular network. Sometimes it works and most of the time it doesn't. It seems I can't access anything on the 66.102.128.0/20. >From what i can tell of traceroutes, its not making it past cingular's filters or firewall. Tracing route to 66.102.136.161 over a maximum of 30 hops: 1 332 ms 238 ms 239 ms 172.26.248.2 2 819 ms 340 ms 617 ms 172.26.248.2 3 * * * Request timed out. Anyone work for cingular or WDSPCo? Other networks to the same provider work just fine. I know its not filtering on the destination network. Anyone else have the same problem? Thanks Andrew

2 1

DR plan template
by Dennis Dayman 26 Apr '07

26 Apr '07

Can anyone point me to or send me a copy of a standard disaster recovery plan. -Dennis

2 1

Re: infrastructure security
by Peter Schoenmaker 26 Apr '07

26 Apr '07

There is a carriage return in the URL, try http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- security-01.txt peter On Apr 26, 2007, at 5:42 PM, Hess, DJ wrote: > The draft was not there? > > DJ Hess, CISSP, Information Security Administrator > > City of Raleigh Information Technology (CORIT) > Office Phone: (919) 890-3192 > > Cell: (919) 278-6132 > > dj.hess(a)ci.raleigh.nc.us > > > > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of > Peter Schoenmaker > Sent: Thursday, April 26, 2007 2:58 PM > To: nanog(a)merit.edu > Subject: infrastructure security > > > Hi, > > My coauthors and I are looking for more input on a draft that we > wrote on infrastructure security. The draft is intended to document > methods that providers can refer to and implement to harden their > network. The draft is broken up into several different areas, Edge > Infrastructure ACLs, Edge rewriting/remarking, Device/element > protection, and Infrastructure hiding. We are very interested in > getting more feedback from network operators. > > The draft can be found at: > http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- > security-01.txt > > Thanks > > Peter Schoenmaker > > > > > > > “E-mail correspondence to and from this address may be subject to > the North Carolina Public Records Law and may be disclosed to > third parties by an authorized City or Law Enforcement official.”

1 0

Someone from roadrunner please contact me off list.
by Greg Schwimer 26 Apr '07

26 Apr '07

-- Greg Schwimer GoDaddy.com gschwimer(a)godaddy.com tel. 480-366-3636

2 1

infrastructure security
by Peter Schoenmaker 26 Apr '07

26 Apr '07

Hi, My coauthors and I are looking for more input on a draft that we wrote on infrastructure security. The draft is intended to document methods that providers can refer to and implement to harden their network. The draft is broken up into several different areas, Edge Infrastructure ACLs, Edge rewriting/remarking, Device/element protection, and Infrastructure hiding. We are very interested in getting more feedback from network operators. The draft can be found at: http://www.ietf.org/internet-drafts/draft-ietf-opsec-infrastructure- security-01.txt Thanks Peter Schoenmaker

1 0

Hotmail blackholing certain IP ranges ?
by Jeroen Wunnink 26 Apr '07

26 Apr '07

Does anyone have a clue why hotmail is appearantly blocking certain IP ranges ? I provided a new server for a customer in his own IP subnet which is a part of a /20 we announce, but for some reason all mail sent to @hotmail.com addresses disappears. He has another server in a /24 we announce which is still part of another network and that works like a charm. None of our subnets are blacklisted in any spamfilter I can find, so i'm a bit puzzeled on what's up here. If any hotmail netadmin is reading this list, can you please check if 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 originating from AS39556) According to the mailserver logs all the mail is properly accepted by the hotmail relays, never to be seen again after that. Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer(a)easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl http://www.easycolocate.nl

9 12

Re: www.cnn.com
by Brandon Butterworth 26 Apr '07

26 Apr '07

> As to what CNN are doing with their DNS, I've no idea, but I don't think it > concerns Nanog Other news sites are available regards, brandon http://news.bbc.co.uk/

2 1

Re: www.cnn.com
by Stefan Schmidt 26 Apr '07

26 Apr '07

On Thu, Apr 26, 2007 at 10:06:32AM +0100, Randy Bush wrote: > roam.psg.com:/usr/home/randy> doc -p -w www.cnn.com. > Doc-2.2.3: doc -p -w www.cnn.com. > Doc-2.2.3: Starting test of www.cnn.com. parent is cnn.com. > Doc-2.2.3: Test date - Thu Apr 26 09:04:52 GMT 2007 > DIGERR (NOT_AUTHORIZED): dig @dmtns01.turner.com. for SOA of www.cnn.com. failed > DIGERR (NOT_AUTHORIZED): dig @dmtns02.turner.com. for SOA of www.cnn.com. failed I think your debugging tool is faulty, as a dig ns cnn.com @a.gtld-servers.net gives: cnn.com. 172800 IN NS twdns-01.ns.aol.com. cnn.com. 172800 IN NS twdns-02.ns.aol.com. cnn.com. 172800 IN NS twdns-03.ns.aol.com. cnn.com. 172800 IN NS twdns-04.ns.aol.com. twdns-01.ns.aol.com. 172800 IN A 149.174.213.151 twdns-02.ns.aol.com. 172800 IN A 152.163.239.216 twdns-03.ns.aol.com. 172800 IN A 207.200.73.85 twdns-04.ns.aol.com. 172800 IN A 64.12.147.120 All of the above answer to me and have the same serial for cnn.com. I guess your tool probably asks a faulty caching nameserver for the NS records of cnn.com - there are several misguided implementations that cache for a longer period than the TTL of the record states. Having said that and beeing a hostmaster for a large german broadband ISP i am indeed quite thankful for Microsoft ignoring low TTLs in most Windows XP installations especially as todays drones do no seem to care about asking proper IN MX questions. ;-) Stefan -- My software never has bugs. It just develops random features.

4 4

www.cnn.com
by Randy Bush 26 Apr '07

26 Apr '07

excuse posting to such an august north american list from humble nigeria, but we think you have a problem over there and it's not very easy to deal from here. roam.psg.com:/usr/home/randy> doc -p -w www.cnn.com. Doc-2.2.3: doc -p -w www.cnn.com. Doc-2.2.3: Starting test of www.cnn.com. parent is cnn.com. Doc-2.2.3: Test date - Thu Apr 26 09:04:52 GMT 2007 DIGERR (NOT_AUTHORIZED): dig @dmtns01.turner.com. for SOA of www.cnn.com. failed DIGERR (NOT_AUTHORIZED): dig @dmtns02.turner.com. for SOA of www.cnn.com. failed SYSerr: No servers for www.cnn.com. returned SOAs ... Summary: YIKES: doc aborted while testing www.cnn.com. parent cnn.com. Incomplete test for www.cnn.com. (3) Done testing www.cnn.com. Thu Apr 26 09:05:13 GMT 2007 randy

1 0