- NANOG - lists.nanog.org

Carrier Hotels/Well Connected locations (Phoenix, AZ)
by Deepak Jain 05 Feb '07

05 Feb '07

Would someone mind forwarding me a list of sites suitable for putting a POP in Phoenix AZ (well connected, lots of fiber carriers, availability of dark/metro fiber, etc, etc.) As a courtesy to the list, private replies please. Thanks in advance, Deepak

1 0

OFFTOPIC - Dell Latitude laptop charger
by Mattias Ahnberg 05 Feb '07

05 Feb '07

My friend Henrik Johansson at Packetfront is attending the Nanog conference but managed to leave home without his DELL Latitude laptop charger. Would someone mind to let him charge his laptop using yours? Reply in private if you can and we'll arrange something. Thanks! -- /ahnberg.

1 1

NANOG 39 BOF: Pushing the FIB limits, perspectives on pressures confronting modern routers.
by Joel Jaeggli 04 Feb '07

04 Feb '07

Just a reminder, This BOF has been scheduled for monday afternoon in the 16:00-17:30 slot in Sheraton hall B/C. If you are going to be at NANOG 39 and you have an interest in the subject or a perspective you'd like to offer please attend the BOF. If you'd like some time set aside on the agenda to share your perspective, mail me and we'll add you, otherwise see you at the microphones! Thanks joelja

1 0

RE: broken DNS proxying at public wireless hotspots
by Lasher, Donn 04 Feb '07

04 Feb '07

>If so, how do you configure your client operating system of choice to use the novel, un-proxied ports instead of using > port 53? * Set up the profile, to your house/work/etc, of your favorite SSH client to forward port 53 local to port 53 on your remote machine. * Make sure your SSH Profile connects to your house/work/etc via IP, not name * make sure there is some sort of DNS server running on the target of your SSH session * make sure your SSH server supports forwarded ports * connect to your house/work/etc. * repoint your local DNS client config to 127.0.0.1 * browse at will * (don't forget to undo this later or risk losing your sanity....) Same type of config works great for HTTP (with squid, and browser proxy settings) etc..

6 7

broken DNS proxying at public wireless hotspots
by Suresh Ramasubramanian 04 Feb '07

04 Feb '07

Right now, I'm on a swisscom eurospot wifi connection at Paris airport, and this - yet again - has a DNS proxy setup so that the first few queries for a host will return some nonsense value like 1.2.3.4, or will return the records for com instead. Some 4 or 5 minutes later, the dns server might actually return the right dns record. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25634 ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 11 ;; QUESTION SECTION: ;www.kcircle.com. IN A ;; AUTHORITY SECTION: com. 172573 IN NS j.gtld-servers.net. com. 172573 IN NS k.gtld-servers.net. [etc] ;; Query time: 1032 msec ;; SERVER: 192.168.48.1#53(192.168.48.1) ;; WHEN: Sat Feb 3 11:33:07 2007 ;; MSG SIZE rcvd: 433 They're not the first provider I've seen doing this, and the obvious workarounds (setting another NS in resolv.conf, or running a local dns caching resolver) dont work either as all dns traffic is proxied. Sure I could route dns queries out through a ssh tunnel but the latency makes this kind of thing unusable at times. I'm then reduced to hardwiring some critical work server IPs into /etc/hosts What do nanogers usually do when caught in a situation like this? thanks srs -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

7 8

Re: broken DNS proxying at public wireless hotspots
by Peter J. Cherny 04 Feb '07

04 Feb '07

At 04:58 PM 4/2/07, Trent Lloyd <lathiat(a)bur.st> wrote: >> * Set up the profile, to your house/work/etc, of your favorite SSH >> client to forward port 53 local to port 53 on your remote machine. >The flaw here is that DNS operates over 53(UDP), last time I checked >SSH doesn't do UDP port forwarding? At the risk of stating the obvious ... Whats wrong with using an OpenVPN tunnel with appropriate acls ? (It works for me !)

2 1

NPE needed
by Randy Bush 04 Feb '07

04 Feb '07

anyone in toronto area, or arriving sunday morning, can loan us an NPE 400 or G1 or G2 with 512MB? thanks randy

1 0

RE: broken DNS proxying at public wireless hotspots
by John van Oppen 03 Feb '07

03 Feb '07

My experience with swisscom's "eurospot" hotspots ended up involving my tunneling everything over my VPN. John -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Suresh Ramasubramanian Sent: Friday, February 02, 2007 10:08 PM To: nanog list Subject: broken DNS proxying at public wireless hotspots Right now, I'm on a swisscom eurospot wifi connection at Paris airport, and this - yet again - has a DNS proxy setup so that the first few queries for a host will return some nonsense value like 1.2.3.4, or will return the records for com instead. Some 4 or 5 minutes later, the dns server might actually return the right dns record. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25634 ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 11 ;; QUESTION SECTION: ;www.kcircle.com. IN A ;; AUTHORITY SECTION: com. 172573 IN NS j.gtld-servers.net. com. 172573 IN NS k.gtld-servers.net. [etc] ;; Query time: 1032 msec ;; SERVER: 192.168.48.1#53(192.168.48.1) ;; WHEN: Sat Feb 3 11:33:07 2007 ;; MSG SIZE rcvd: 433 They're not the first provider I've seen doing this, and the obvious workarounds (setting another NS in resolv.conf, or running a local dns caching resolver) dont work either as all dns traffic is proxied. Sure I could route dns queries out through a ssh tunnel but the latency makes this kind of thing unusable at times. I'm then reduced to hardwiring some critical work server IPs into /etc/hosts What do nanogers usually do when caught in a situation like this? thanks srs -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

1 0

Re: broken DNS proxying at public wireless hotspots
by Fergie 03 Feb '07

03 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Use OpenDNS? - - ferg - -- "Suresh Ramasubramanian" <ops.lists(a)gmail.com> wrote: Right now, I'm on a swisscom eurospot wifi connection at Paris airport, and this - yet again - has a DNS proxy setup so that the first few queries for a host will return some nonsense value like 1.2.3.4, or will return the records for com instead. Some 4 or 5 minutes later, the dns server might actually return the right dns record. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25634 ;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 11 ;; QUESTION SECTION: ;www.kcircle.com. IN A ;; AUTHORITY SECTION: com. 172573 IN NS j.gtld-servers.net. com. 172573 IN NS k.gtld-servers.net. [etc] ;; Query time: 1032 msec ;; SERVER: 192.168.48.1#53(192.168.48.1) ;; WHEN: Sat Feb 3 11:33:07 2007 ;; MSG SIZE rcvd: 433 They're not the first provider I've seen doing this, and the obvious workarounds (setting another NS in resolv.conf, or running a local dns caching resolver) dont work either as all dns traffic is proxied. Sure I could route dns queries out through a ssh tunnel but the latency makes this kind of thing unusable at times. I'm then reduced to hardwiring some critical work server IPs into /etc/hosts What do nanogers usually do when caught in a situation like this? thanks srs - -- Suresh Ramasubramanian (ops.lists(a)gmail.com) -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.3 (Build 5003) wj8DBQFFxCmJq1pz9mNUZTMRAhCBAKCpmCoKnQ09hCF+uwAfnF/Ht5VQ8wCfXykH ATEHEAwCnErNlgbZHYAmF+M= =V8Zf -----END PGP SIGNATURE-----

4 3

Re: broken DNS proxying at public wireless hotspots
by Fergie 03 Feb '07

03 Feb '07

Yes, then he's screwed. :-) As we all are in a similar situation. Mea culpa. - ferg -- Joe Abley <jabley(a)ca.afilias.info> wrote: On 3-Feb-2007, at 06:20, Fergie wrote: > Use OpenDNS? OpenDNS provides service on other than 53/tcp and 53/udp? If so, how do you configure your client operating system of choice to use the novel, un-proxied ports instead of using port 53? Joe

1 0