- NANOG - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 31 Mar '06

31 Mar '06

This report has been generated at Fri Mar 31 21:48:55 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 25-03-06 181028 119484 26-03-06 181082 119580 26-03-06 181055 119436 27-03-06 180958 119546 28-03-06 181057 119597 29-03-06 181152 119695 30-03-06 181294 119765 31-03-06 181480 120229 AS Summary 21776 Number of ASes in routing system 9067 Number of ASes announcing only one prefix 1498 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91435520 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 31Mar06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 182353 120253 62100 34.1% All ASes AS4323 1246 252 994 79.8% TWTC - Time Warner Telecom, Inc. AS18566 925 9 916 99.0% COVAD - Covad Communications Co. AS4134 1005 275 730 72.6% CHINANET-BACKBONE No.31,Jin-rong Street AS721 1008 311 697 69.1% DLA-ASNBLOCK-AS - DoD Network Information Center AS22773 640 48 592 92.5% CCINET-2 - Cox Communications Inc. AS7018 1498 967 531 35.4% ATT-INTERNET4 - AT&T WorldNet Services AS6197 1006 485 521 51.8% BATI-ATL - BellSouth Network Solutions, Inc AS8151 1266 745 521 41.2% Uninet S.A. de C.V. AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS855 546 64 482 88.3% CANET-ASN-4 - Aliant Telecom AS7757 473 19 454 96.0% CCCH-AS4 - Comcast Cable Communications Holdings, Inc AS17488 502 51 451 89.8% HATHWAY-NET-AP Hathway IP Over Cable Internet AS3602 540 109 431 79.8% AS3602-RTI - Rogers Telecom Inc. AS812 438 28 410 93.6% ROGERS-CABLE - Rogers Cable Inc. AS9498 563 155 408 72.5% BBIL-AP BHARTI BT INTERNET LTD. AS4755 735 329 406 55.2% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS17676 484 107 377 77.9% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS11492 627 275 352 56.1% CABLEONE - CABLE ONE AS15270 388 36 352 90.7% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS6198 583 239 344 59.0% BATI-MIA - BellSouth Network Solutions, Inc AS4766 644 304 340 52.8% KIXS-AS-KR Korea Telecom AS6467 388 49 339 87.4% ESPIRECOMM - Xspedius Communications Co. AS22047 386 72 314 81.3% VTR BANDA ANCHA S.A. AS18101 324 27 297 91.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS14654 302 14 288 95.4% WAYPORT - Wayport AS19262 619 339 280 45.2% VZGNI-TRANSIT - Verizon Internet Services Inc. AS6167 342 64 278 81.3% CELLCO-PART - Cellco Partnership AS3352 307 31 276 89.9% TELEFONICA-DATA-ESPANA Internet Access Network of TDE AS5668 531 256 275 51.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS9583 877 612 265 30.2% SIFY-AS-IN Sify Limited Total 19756 6337 13419 67.9% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.90.128.0/20 AS6971 ESCH - Eschelon Telecommunications, Inc. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.0.0/19 AS33104 FUZION-COLO - FUZION COLO 66.117.0.0/21 AS30033 NHI-NETWORKS - NHI Networks 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.117.23.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.25.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.26.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.27.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.31.151.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 162.168.200.0/24 AS3301 TELIANET-SWEDEN TeliaNet Sweden 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 183.206.196.0/24 AS2188 FR-RENATER-ASTER Reseau Regional ASTER 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.72.0.0/16 AS4780 SEEDNET Digital United Inc. 192.72.0.0/18 AS4780 SEEDNET Digital United Inc. 192.72.192.0/18 AS4780 SEEDNET Digital United Inc. 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 AFRINIC African Network Information Center 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP DFN-IP service X-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.168.255.255/32 AS4637 REACH Reach Network Border AS 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.93.116.0/22 AS24872 MAGNUS-AS Magnus ISP autonomous system 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS3542 ITSDN-U5 - DISA/UNRRA 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.45.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.29.185.0/24 AS7268 ATHENET - Athenet Internet Services 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

"Bad bgp identifier"
by Joe Maimon 31 Mar '06

31 Mar '06

4271 specifies that bgp identifier must be a valid unicast ip address So what is the larget 32 bit value expressed as a dotted quad that meets this requirement? Is it the last address in class c? class e? Can 255.x.x.x be used? Do all vendors implement this? I understand that draft-ietf-idr-bgp-identifier-06.txt does away with the above requirements. Is this something I should ask vendors if they will support it? Thanks, Joe

3 2

Rate-Limiting.
by Robert Sherrard 31 Mar '06

31 Mar '06

I've got a situation in which I'd like to rate limit a few servers that hang off of my 6590's... it appears that this can only be done on a layer 3 interface. These servers however aren't, they simply on a switch port / access. Aside from hard setting the l2 interface to 10mbit, can anyone think of another creative way to do this? Is one option moving these servers into a separate VLAN, then rate-limiting from there? Rob

2 4

Peering Issues with Global Crossing and SBC?
by Elijah Savage 31 Mar '06

31 Mar '06

All, I have well over 150 vpn customers but this past week I have had 7 customers ipsec tunnels constantly bouncing all day. The common ground for all 7 of these customers are traversing the SBC and Global Crossing links you see below, the ultimate common ground being 64.208.110.29. 9 151.164.191.134 16 msec 16 msec 16 msec 10 64.208.110.29 16 msec 16 msec 16 msec 9 151.164.40.49 16 msec 16 msec 16 msec 10 64.208.110.29 12 msec 20 msec 12 msec When tracing to these 7 customers all 7 hit one or the other of the trace's you see above. I have opened a ticket with SBC but no answer from them yet. All of the other customers have been very stable and of course non of the other customers traverse either of these links either. Anyone from Global Crossing or SBC that could contact me off list or lend a hand it would greatly appreciate it. Thank you -- ---------------------------------------------------------------------- Elijah Savage | AOL IM:layer3rules Senior Network Engineer | When it has to be switched or routed. http://www.digitalrage.org | The Information Technology News Center ----- http://www.digitalrage.org/?page_id=46 for pgp public key--------

1 0

Re: Have Yahoo! gone pink?
by Robert Bonomi 30 Mar '06

30 Mar '06

> Cc: nanog(a)nanog.org > Subject: Re: Have Yahoo! gone pink? > From: Valdis.Kletnieks(a)vt.edu > Date: Wed, 29 Mar 2006 16:55:23 -0500 > > > --==_Exmh_1143669323_3096P > Content-Type: text/plain; charset=us-ascii > > On Wed, 29 Mar 2006 21:28:26 GMT, Peter Corlett said: > > > Yahoo claim "After investigation, we have determined that this email message > > did not originate from the Yahoo! Mail system. > > Received: from EXCHG01-DUB.Europe.Search.Corpsys.P4pnet.net > (cluster01-dub.europe.search.corpsys.p4pnet.net [172.30.132.19]) > by mrout3.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id k2FIupeH049008; > Wed, 15 Mar 2006 10:56:52 -0800 (PST) > > Hey, what do you know... if you trust both uksolutions.net and yahoo.com's > Received: lines, it didn't originate at Yahoo - it came from p4pnet.net. ;) > > (A fine demonstration of the difference between being truthful and being helpful :) Of course, this ignores the fact that '172.30.132.19' is in RFC-1918 space. <wry grin> Now _how_ 'mrout3.yahoo.com' got that message *is* open for speculation. Even more interesting is how it got DNS name resolution on that address. Best available evidence indicates that _that_ header line is a total fabrication. As I recall, the header added by the destination system showed receipt from a yahoo machine (and a valid IP address, belonging to yahoo). It's possible that yahoo's auto-parsing got misled by the bogus header shown above. > > --==_Exmh_1143669323_3096P > Content-Type: application/pgp-signature > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (GNU/Linux) > Comment: Exmh version 2.5 07/13/2001 > > iD8DBQFEKwJLcC3lWbTT17ARAhcbAKDYpN/L2fVwYu9w2E4jG1P+knnPFwCdEliY > YSY/cunFfCJoJ8zky9YhYP8= > =qdCE > -----END PGP SIGNATURE----- > > --==_Exmh_1143669323_3096P-- >

2 1

Have Yahoo! gone pink?
by abuse＠cabal.org.uk 30 Mar '06

30 Mar '06

[I'm wearing my personal hat here.] I'm getting a *flood* of spam coming in from Yahoo! mailservers, both to my personal and work addresses. It seems that Yahoo! don't care. Here's the response to me piping a sample one through Spamcop: http://abuse.mooli.org.uk/yahoospam Yahoo claim "After investigation, we have determined that this email message did not originate from the Yahoo! Mail system. It appears that the sender of this message forged the header information to give the impression that it came from the Yahoo! Mail system." The spam headers claim otherwise: Received: from mrout3.yahoo.com ([216.145.54.173]) by relay-1.mail.uksolutions.net with esmtp (Exim 4.50) id 1FJbCW-0002Ag-IV for sales(a)uksolutions.co.uk; Wed, 15 Mar 2006 18:58:29 +0000 As does DNS and whois: abuse@mooli:~$ host 216.145.54.173 173.54.145.216.in-addr.arpa domain name pointer mrout3.yahoo.com. abuse@mooli:~$ host mrout3.yahoo.com mrout3.yahoo.com has address 216.145.54.173 abuse@mooli:~$ whois 216.145.54.173 OrgName: Yahoo! Inc. OrgID: YAHOOI-2 Address: 701 First Avenue City: Sunnyvale StateProv: CA PostalCode: 94089 Country: US [etc] Doing double-DNS lookups of the IP addresses on other spams also give yahoo.com hostnames, and they're typically in DNSBLs for being sources of spam and a useless abuse address. So, which IP blocks shall I null-route then? Or is there anybody here from Yahoo! with a clue? (OK, you can all stop laughing now.) -- PGP key ID E85DC776 - finger abuse(a)mooli.org.uk for full key

5 4

Backbone Monitoring Tools
by Ashe Canvar 29 Mar '06

29 Mar '06

Hi All, I want a simple backbone monitor for my 5 datacenters. My "backbone" consists of redundant IPSEC/GRE tunnnels. At the very least I want to ping, traceroute and transfer a small file every few minutes over all IPSEC links. I am sure there are products that do this already, but I am having a hard time finding any. The display format should be noc-friendly. A basic grid with green/red status indicators at the least. Geographical maps a plus. Do most of you use a home grown tool for this monitoring and alerting ? Regards, Ashe

12 18

Mutual Redistribution
by Glen Kent 29 Mar '06

29 Mar '06

Hi, There is a provider who is running ISIS in its core and they are using RIP for the management interface. Is it valid to redistribute all the ISIS routes into RIP and all the RIP routes into ISIS? Cant this create a loop or something? Thanks, Kent

3 5

Re: Yahoo-hosted phishing sites
by Fergie 29 Mar '06

29 Mar '06

Jon, abuse(a)yahoo-inc.com has been fairly responsive lately. Also: http://www.castlecops.com/pirt - ferg -- "Jon R. Kibler" <Jon.Kibler(a)aset.com> wrote: Hello, Anyone know to whom you can report yahoo-hosted phishing sites (or redirects) and get someone who has half a clue? If you try to report the sites to abuse(a)yahoo.com, or use the online abuse web form, you get a lame message that says 'the email in question did not originate from a Yahoo! mail server' -- or something to that effect. Yahoo has become a real problem because there seems to be no one to report these sites to. I have seen Yahoo-hosted sites up for a week or more because of that... Any ideas? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

Abovenet vs UUnet
by andrew matthews 29 Mar '06

29 Mar '06

So here is the deal, I've delt with both uunet and abovenet (mfn now) in the past. And a long time ago i switched from abovenet to uunet when i was with a different company. Now i'm with a company that has level 3 and Abovenet. Currently the way the pricing is layed out is by staying with abovenet i'll save about $1300 over UUnet. Money isn't too much of a concern currently abovenet is much higher but we are at the time were we need to renew our contract and we got it with a lower price. So which way? Abovenet or UUnet.. what are the pros and cons that you've experienced and what kind of latency do you have over the providers. I appreciate your feedback. Thanks Andrew

5 5