- NANOG - lists.nanog.org

What happened to Cogent?
by David Coulson 25 Apr '07

25 Apr '07

About 20mins ago my connection to Cogent in Cleveland just went totally nuts. I can't even get to www.cogentco.com over their circuit: Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. v129.l3sw1.n2net.net 0.0% 1 1.1 1.1 1.1 1.1 0.0 2. v401.core1.n2net.net 0.0% 1 0.4 0.4 0.4 0.4 0.0 3. fa0-2.na01.b002352-3.cle01.atlas.cogentco.com 0.0% 1 1.5 1.5 1.5 1.5 0.0 4. g1-0-3501.core01.cle01.atlas.cogentco.com 0.0% 1 1.6 1.6 1.6 1.6 0.0 5. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 5.5 5.5 5.5 5.5 0.0 6. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 6.1 6.1 6.1 6.1 0.0 7. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 10.5 10.5 10.5 10.5 0.0 8. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 9.9 9.9 9.9 9.9 0.0 9. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 14.7 14.7 14.7 14.7 0.0 10. p6-0.core01.cle01.atlas.cogentco.com 0.0% 1 14.7 14.7 14.7 14.7 0.0 11. p6-0.core01.buf02.atlas.cogentco.com 0.0% 1 19.1 19.1 19.1 19.1 0.0

5 5

Re: What happened to Cogent?
by Joseph Nuara 25 Apr '07

25 Apr '07

I was on the phone with the NOC earlier and was informed that they were having trouble in the DC area. I am seeing problems heading out of their Philly POP into DC. Some sort of switch or software failure on a switch. No ETA although things seem to be working on and off right now.

1 0

RE: Hotmail blackholing certain IP ranges ?
by Gabriel Kuri 25 Apr '07

25 Apr '07

I've had the same issue with hotmail when email originates from 208.127.57.0/24. any mail sent from a server within that netblock is properly accepted by hotmail, given a queue id, but disappears and is never delivered. if anyone from hotmail has a clue as to what's going on, it would be appreciated. thanks much ... ----- Gabriel Kuri | Sr. Network Analyst Instructional and Information Technology Division California State Polytechnic University, Pomona http://www.csupomona.edu/~iit | +1 909 979 6363 > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Jeroen Wunnink > Sent: Wednesday, April 25, 2007 11:22 AM > To: nanog(a)merit.edu > Subject: Hotmail blackholing certain IP ranges ? > > > Does anyone have a clue why hotmail is appearantly blocking > certain IP ranges ? > > I provided a new server for a customer in his own IP subnet which is > a part of a /20 we announce, but for some reason all mail sent to > @hotmail.com addresses disappears. > > He has another server in a /24 we announce which is still part of > another network and that works like a charm. > > None of our subnets are blacklisted in any spamfilter I can find, so > i'm a bit puzzeled on what's up here. > > If any hotmail netadmin is reading this list, can you please check if > 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 > originating from AS39556) > > According to the mailserver logs all the mail is properly accepted by > the hotmail relays, never to be seen again after that. > > > > Met vriendelijke groet, > > Jeroen Wunnink, > EasyHosting B.V. Systeembeheerder > systeembeheer(a)easyhosting.nl > > telefoon:+31 (035) 6285455 Postbus 48 > fax: +31 (035) 6838242 3755 ZG Eemnes > > http://www.easyhosting.nl > http://www.easycolocate.nl > > >

1 0

RE: Hotmail blackholing certain IP ranges ?
by Stasiniewicz, Adam 25 Apr '07

25 Apr '07

Jeroen, A quick check of those IPs shows that most don't have rDNS records. Make sure the A and PTR records for the mail server match the hostname it is using in the outbound SMTP session. Hope that helps, Adam Stasiniewicz ________________________________ From: owner-nanog(a)merit.edu on behalf of Jeroen Wunnink Sent: Wed 4/25/2007 1:22 PM To: nanog(a)merit.edu Subject: Hotmail blackholing certain IP ranges ? Does anyone have a clue why hotmail is appearantly blocking certain IP ranges ? I provided a new server for a customer in his own IP subnet which is a part of a /20 we announce, but for some reason all mail sent to @hotmail.com addresses disappears. He has another server in a /24 we announce which is still part of another network and that works like a charm. None of our subnets are blacklisted in any spamfilter I can find, so i'm a bit puzzeled on what's up here. If any hotmail netadmin is reading this list, can you please check if 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 originating from AS39556) According to the mailserver logs all the mail is properly accepted by the hotmail relays, never to be seen again after that. Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer(a)easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl <http://www.easyhosting.nl/> http://www.easycolocate.nl <http://www.easycolocate.nl/>

1 0

Comcast blocking all Gmail!
by William Allen Simpson 25 Apr '07

25 Apr '07

Heads up on operational problem! ==== Subject: Delivery Status Notification (Failure) Date: Wed, 25 Apr 2007 06:56:24 -0700 (PDT) From: Mail Delivery Subsystem <mailer-daemon(a)googlemail.com> To: William.Allen.Simpson(a)gmail.com This is an automatically generated Delivery Status Notification Delivery to the following recipient failed permanently: XXXXXXXX(a)comcast.net Technical details of permanent failure: PERM_FAILURE: SMTP Error (state 8): 550 72.14.246.249 blocked by ldap:ou=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please see http://www.comcast.net/help/faq/index.jsp?faq=SecurityMail_Policy18628 ==== Mail to Comcast is rejected and is returned with an error message containing the code BL004. What does this mean? Our filters have determined that email from your mail server has been sent in patterns which are characteristic of spam. In an effort to protect subscribers, your mail server has been blocked from sending email to the Comcast network. Mail servers are typically shared by many users so it may be the case that another party using your mail server has sent spam, even if you have not. ....

3 2

BGP cost community
by Yi Wang 24 Apr '07

24 Apr '07

Hello, I know Cisco routers has the "BGP cost community" feature. Could anyone tell me whether Juniper and other router vendors offer same/similar feature? Thanks, Yi

1 0

Re: IP Block 99/8 (DHS insanity - offtopic)
by Scott Weeks 24 Apr '07

24 Apr '07

-------------Marcus H. Sachs wrote:------------ > Mr. Oquendo (I presume "Mr." but if it's "Ms." please accept my > apologies...), it appears that there is little common ground between you and > me. So, rather than stringing this out for the next several days and boring > everybody else to tears, I will say thanks for the "chat" and I look forward > to continuing this in person over a beer or other libation at some future > gathering. -------------------------------------------------- --- leigh.porter(a)ukbroadband.com wrote: : Don't forget to post to the list where you will do this so : I can come and watch ;-) ------------------------------------------------ Same here. Original challenge; challenge accepted; challenger backs out quickly. I want to see the answers. Not sure about the AUP, but this'd seem to affect all network operators, so if others here agree how about we continue the show here? >;-) scott

1 0

IP Block 99/8
by Shai Balasingham 24 Apr '07

24 Apr '07

Hi, I am Shai from Rogers Cable Inc. ISP in Canada. We have IP block 99.x.x.x assigned to our customers. Which happened to be bogons block in the past and was given to ARIN in Oct 2006. As we have recently started using this block, we are getting complains from our customers who are unable to surf some web site. After investigation we found that there are still some prefix lists/acls blocks this IP block. We own the following blocks: 99.224.0.0/12 99.240.0.0/13 99.248.0.0/14 99.252.0.0/16 99.253.128.0/19 Please update your bogons list. Shai. end

19 38

New AS Number Block allocated to the RIPE NCC
by Alex Le Heux 24 Apr '07

24 Apr '07

Dear Colleagues, The RIPE NCC received the AS Number Block 43008 - 44031 from the IANA in April 2007. You may want to update your records accordingly. Best regards, Alex Le Heux RIPE NCC

1 0

UK ISP threatens security researcher
by Gadi Evron 24 Apr '07

24 Apr '07

http://www.theregister.com/2007/04/17/hackers_service_terminated/ "A 21-year-old college student in London had his internet service terminated and was threatened with legal action after publishing details of a critical vulnerability that can compromise the security of the ISP's subscribers." I happen to know the guy, and I am saddened by this. Gadi.

19 31