- NANOG - lists.nanog.org

Re: beware: being old sucks
by Randy Bush 05 Sep '25

05 Sep '25

a fellow nanogger wrote: > I've only *just* gotten to the note from a week or more ago. > >> + tftp-server nvram:startup-config <<<<<<====== >> snmp-server community foo 98 >> snmp-server trap-source Vlan1 >> snmp-server location Ashburn VA US > > I, too, got this from a RANCID setup I built a long time ago. > >> and here is the talos report, thanks joe >> >> https://blog.talosintelligence.com/static-tundra/ >> >> set `no vstack` in config. no, that is not the default. > > I'd told the owner that I didn't think he had control of his gear > anymore, but this helped me to convince him to put a new switch in. moving this to nanog because i did not elaborate on a critical point. when you get this, presume the config of this trivial ancient devic has been snatched. did the device have any burned in users, a la username foo privilege 15 password 7 bar and that uid/pass is used on other, presumably more modern, devices, you need to change the passwords everywhere. same for other credentials, snmp, bgpmd5, ... randy

17 47

BGP Outputs Wanted
by James Bensley 05 Sep '25

05 Sep '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi All, is anyone receiving a full BGP table from any of the below ASNs and would be able to send me your equivalent of "show bgp neighbor xyx received-routes" ? I am doing some BGP research and can't get the data for these ASNs from RouteViews/RIPE RIS/PCH collectors. 701 - Verizon/UUNET 1239 - T-Mobile/Sprint 1273 - Vodafone 2635 - Automattic 7473 - Singapore Telecommunications 9498 - Bharti Airtel 12389 - Rostelecom 13335 - Cloudflare 20473 - The Constant Company / Vultr 23911 - China Next Generation Internet Beijing 37721 - Virtual Technologies & Solutions 38255 - China Education and Research Network 57463 - NetIX Communications Happy to put a credit to you when I present my findings. Any help here would be greatly appreciated. With kind regards, James. -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsG5BAEBCgBtBYJouow1CZCoEx+igX+A+0UUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3Jn2S0PKJhMU+E5dt+0pVXI7S3v8BEgcU4opZP7 YPZvSMkWIQQ+k2NZBObfK8Tl7sKoEx+igX+A+wAAr3MP/i+y8+5eyLZzGG7G 5gB6KaGCu+XzAQ8W2StL/HyE5YMFYmbHDWv4pp6fmb73/K9mV/7o85cPlLMO 8WRCpz/vREZfwU4LJsb9qct44z8piFyYeqf2/2e4xHDL7Pu3QEADPoGaGiCq TbZUw9Y+g08LnMt14suI93/LHPEykDLledBImv1T92Z2EkCTZmkgLK10rmv+ OyPxEld38quZbjHBKQJmZjzmowzjY3LPGe1Yi2IjXHT1mVsQvoRQqVux9qxD 0sH2prJcqoAtgJLXVVdxPE0DEcYjhoaoPEDLHMWOqhrBiIz7K0SV67UKAg0l U3EFuT7zJA7AeIIj5ctukGukYNgwCfG51y8pmODKqTDQZ5vT6MR++xCj9QwT SA/DJPLVvV+3VD5zVXZy6OSyPj5Oxuw1s8xjmgrCCXR8se65J9cpm0es81ZE /d0nQt46Nhy+CocgU9CF99+Y5WIQRUTemMsqrg0ZwmyEF9Oe5EqVSmYc6ogF zHLkRQBeDmv1+7gcZ6DHlBnfvraASaif7fP2c6AiWVxnL4Ps9nDUx2NcIm6a BT3aoNRkoSagzpsliS0pg0Pa4MJ78EKGsjqOG+r5ctlpjd2D1vPS8r9v5V7U nZOfqz6YrFxynYckKpIf87zmmRJnuYUq+H8y33/Ycx2oaQcF/YGFD97VVr4O lXOXRE8I =+evX -----END PGP SIGNATURE-----

2 2

Paging Unified Layer/AS46606 in re: NET-162-240-0-0-1 (162.240.0.0/15)
by Rich Kulawiec 04 Sep '25

04 Sep '25

Who puts a quota on an abuse mailbox...and then allows that quote to be reached? > Date: Tue, 2 Sep 2025 12:38:24 +0000 > > Delivery has failed to these recipients or groups: > > abuse(a)bluehost.com<mailto:abuse@bluehost.com> > The recipient's mailbox is full and can't accept messages now. Please try r= > esending your message later, or contact the recipient directly. I've got nothin': my usual string of exasperated profanities has failed me. Anyway, y'all have attackers using various VPS instances on your network to conduct coordinated brute-force ssh attacks, and you should make that stop yesterday. Details? Logs? Yes, yes, I know, I did try to send them to you -- but see the above for the explanation covering why you didn't receive them. Also: for the love of dog, fix this nonsense. ---rsk

8 12

Google is not turning up any new peering on IXs?
by Will OBrien 04 Sep '25

04 Sep '25

We recently turned up a new IXP and I’m going through the motions of arranging the usual peers, etc. I’m extremely surprised by this one: Public Peering Google no longer accepts new peering requests at internet exchanges (IXPs). However, Google maintains dedicated connectivity to the internet exchanges (IXPs) listed in our PeeringDB entry<https://www.peeringdb.com/asn/15169>. We also maintain existing BGP sessions across internet exchanges where we are connected. For networks who do not meet our PNI requirements Google will serve those networks via indirect paths. I can only presume that someone who doesn’t pay for cross connect fees came up with this plan. This feels short sighted at the least. Considering the benefits of peering, I have to express some dismay at this disservice to the internet in general. Anyone from Google care to explain what appears to be a willful withdrawal of support for the IXP community?

9 9

LIR Portal and back end...
by Tim Požar 03 Sep '25

03 Sep '25

Does anyone have pointers to LIR portals/back ends they can recommend? eg https://lirportal.ripe.net/ Tim

2 1

Feedback invited: RPKI Best Practices and Lessons Learned
by Sofia Silva Berenguer 01 Sep '25

01 Sep '25

(Apologies for duplicates) Hi all, The NRO RPKI Program has published a page that consolidates existing sources on RPKI best practices and lessons learned (https://www.nro.net/technical-coordination/nro-rpki-program/rpki-best-pract…) We want to make sure the information included is clear and operationally relevant for those deploying and maintaining RPKI. If you see anything missing, unclear, or that needs an update, please send your input to rpki_program(a)nro.net Thanks in advance for helping us make this a stronger resource for the community! Warm regards, Sofía -- I am sending this email at a time that suits me and the time zone I work in. Please feel free to read, and act on or respond, at a time that suits you. ____________________________________________________________________ Sofía Silva Berenguer NRO RPKI Program Manager e: sofia(a)apnic.net<mailto:sofia@apnic.net> ____________________________________________________________________

1 0

Genius or Ridiculous?
by Mike Hammett 31 Aug '25

31 Aug '25

My current project is a voice-related project, but how ridiculous would it be to get a line of service from my competitors at my main office for me to do diagnostics from? Internet from Comcast, Frontier, etc. Voice from Frontier, Comcast, AT&T wireless, VZW, and T-Mobile? I'm currently in a situation where I have to engage customers (or the family of employees) to place test calls for me to collect data on because I can't do it any other way. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP

6 8

APRICOT 2026: Call for Volunteers (Programme Committee)
by Mark Tinka 31 Aug '25

31 Aug '25

Hello all. The APRICOT 2026 Organising Committee would like to welcome everyone to join us in Jakarta, Indonesia, from 5th - 12th February 2026. The APRICOT 2026 PC (Programme Committee) is responsible for the solicitation and selection of suitable presentations and tutorial content for the APRICOT 2026 conference (https://2026.apricot.net/) We are now seeking VOLUNTEERS from the community to join the APRICOT 2026 PC to assist with the development of the programme for APRICOT 2026. Eligible PC candidates must have attended recent APRICOT events, be active members of their local NOG (Network Operators Group) in the Asia Pacific region, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work very actively to solicit content, follow-through with speaker updates and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. While participation in the weekly calls is not obligatory, active participation in content reviews is required at all times to help the PC reach consensus. PC members who are unable to fully participate in the programme development will be excused from the PC. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00hrs UTC+8 on Sunday 7th September 2025, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2026 Programme Committee Chairs

1 0

Newbie Needs Help: someone is announcing less-specific IPv6 (BGP) route on top of me
by Pirawat WATANAPONGSE 30 Aug '25

30 Aug '25

Dear Gurus, Radar tool by Qrator [Reference: https://radar.qrator.net ] claims that Zenlayer Inc. [AS4229] is “umbrella-ing” me by announcing ‘2400::/12’ on top of my more-specific address block. The tool classifies it as a type of hijacking. [Disclaimer: apologies to Zenlayer if you didn’t do it; but that’s the information I received] My neighboring organization also has a more-specific block that falls under The Umbrella too. However, other tools (https://stat.ripe.net , https://irrexplorer.nlnog.net , https://bgp.he.net , etc.) seem unable to see that particular announcement. Questions: 1. Is Qrator claim true? (because I have already tried but cannot verify) 2. If so, should I be concerned? Even though I already ROA-ed *and* IRR-ed my own block, but if “the other end” doesn’t validate, it won’t do any good, correct? (Oh, yeah, the other end also has to somehow “not see” my longer-prefix. But that can happen as well, no?) 3. In that case, what more do I must do? I would extremely appreciate someone helping me out on this matter. Best Regards, Pirawat.

7 8

TDM Voice Issue
by Mike Hammett 30 Aug '25

30 Aug '25

Normally, I'd post on VoiceOps (and I did), but that list is currently quite neutered. Frontier wholesale support was of little help. Can anyone help in a CLLI code lookup to see who that ID corresponds to? I have a circuit ID, but I only know my CLLI and Frontier's CLLI code, not who the other entity is. I also see a "Carrier Identification Parameter: 5483" if that means anything to anyone. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP

1 1