- NANOG - lists.nanog.org

Cogent and Altice Contacts for Routing Issue
by Vinny Abello 11 Jun '21

11 Jun '21

Hello, Please excuse the noise. If there are any network engineers from Cogent and Altice on the list, could you please email me directly. This is regarding a specific Altice IPv4 aggregate in the NYC area that Cogent in the NYC area is handing off to Zayo in San Jose for some reason. It subsequently seemingly has a lot of packet loss coming back to the NYC area through Zayo's network. It's affecting my remote employees. I can provide traceroutes privately as not to clutter up the list. Bad Altice Aggregate in question: 67.84.0.0/14 Good Altice aggregate routing properly: 68.196.0.0/14 Thanks in advance. -Vinny

1 1

Weekly Routing Table Report
by cscora＠apnic.net 11 Jun '21

11 Jun '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 12 Jun, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 854593 Prefixes after maximum aggregation (per Origin AS): 322645 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 409480 Total ASes present in the Internet Routing Table: 71406 Prefixes per ASN: 11.97 Origin-only ASes present in the Internet Routing Table: 61421 Origin ASes announcing only one prefix: 25365 Transit ASes present in the Internet Routing Table: 9985 Transit-only ASes present in the Internet Routing Table: 319 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 54 Max AS path prepend of ASN ( 48366) 51 Prefixes from unregistered ASNs in the Routing Table: 1077 Number of instances of unregistered ASNs: 1084 Number of 32-bit ASNs allocated by the RIRs: 36302 Number of 32-bit ASNs visible in the Routing Table: 30177 Prefixes from 32-bit ASNs in the Routing Table: 140528 Number of bogon 32-bit ASNs visible in the Routing Table: 25 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 568 Number of addresses announced to Internet: 3040471936 Equivalent to 181 /8s, 57 /16s and 235 /24s Percentage of available address space announced: 82.1 Percentage of allocated address space announced: 82.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284846 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 230126 Total APNIC prefixes after maximum aggregation: 65630 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 225887 Unique aggregates announced from the APNIC address blocks: 90032 APNIC Region origin ASes present in the Internet Routing Table: 11623 APNIC Prefixes per ASN: 19.43 APNIC Region origin ASes announcing only one prefix: 3330 APNIC Region transit ASes present in the Internet Routing Table: 1646 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6792 Number of APNIC addresses announced to Internet: 774990592 Equivalent to 46 /8s, 49 /16s and 107 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 248453 Total ARIN prefixes after maximum aggregation: 113685 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 248607 Unique aggregates announced from the ARIN address blocks: 118550 ARIN Region origin ASes present in the Internet Routing Table: 18832 ARIN Prefixes per ASN: 13.20 ARIN Region origin ASes announcing only one prefix: 6835 ARIN Region transit ASes present in the Internet Routing Table: 1952 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3919 Number of ARIN addresses announced to Internet: 1271191296 Equivalent to 75 /8s, 196 /16s and 215 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 238151 Total RIPE prefixes after maximum aggregation: 111035 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 234246 Unique aggregates announced from the RIPE address blocks: 142598 RIPE Region origin ASes present in the Internet Routing Table: 27964 RIPE Prefixes per ASN: 8.38 RIPE Region origin ASes announcing only one prefix: 12012 RIPE Region transit ASes present in the Internet Routing Table: 3889 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 54 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10234 Number of RIPE addresses announced to Internet: 710555264 Equivalent to 42 /8s, 90 /16s and 54 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 110934 Total LACNIC prefixes after maximum aggregation: 26451 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 112097 Unique aggregates announced from the LACNIC address blocks: 47048 LACNIC Region origin ASes present in the Internet Routing Table: 10760 LACNIC Prefixes per ASN: 10.42 LACNIC Region origin ASes announcing only one prefix: 2678 LACNIC Region transit ASes present in the Internet Routing Table: 2031 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8407 Number of LACNIC addresses announced to Internet: 175794176 Equivalent to 10 /8s, 122 /16s and 104 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25851 Total AfriNIC prefixes after maximum aggregation: 5097 AfriNIC Deaggregation factor: 5.07 Prefixes being announced from the AfriNIC address blocks: 33188 Unique aggregates announced from the AfriNIC address blocks: 10744 AfriNIC Region origin ASes present in the Internet Routing Table: 1484 AfriNIC Prefixes per ASN: 22.36 AfriNIC Region origin ASes announcing only one prefix: 510 AfriNIC Region transit ASes present in the Internet Routing Table: 301 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 825 Number of AfriNIC addresses announced to Internet: 107354112 Equivalent to 6 /8s, 102 /16s and 24 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 7908 8999 55 CMNET-GD Guangdong Mobile Communication 7545 5794 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4757 4192 74 ERX-CERNET-BKB China Education and Rese 7713 3528 1023 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3516 1330 20 VIETEL-AS-AP Viettel Group, VN 45899 2811 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2430 11104 564 KIXS-AS-KR Korea Telecom, KR 9498 2351 483 246 BBIL-AP BHARTI Airtel Ltd., IN 4755 2129 441 192 TATACOMM-AS TATA Communications formerl 45090 2114 1197 71 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5167 9384 2297 AMAZON-02, US 11492 4768 314 656 CABLEONE, US 7155 4026 264 32 VIASAT-SP-BACKBONE, US 22773 3932 3002 245 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3469 1776 2425 AKAMAI-AS, US 6327 3361 1317 69 SHAW, CA 30036 2580 372 129 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2537 5034 477 CENTURYLINK-US-LEGACY-QWEST, US 5972 2247 453 785 DNIC-ASBLK-05800-06055, US 20115 2170 2929 502 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6713 1725 146 UNI2-AS, ES 20940 3652 3347 201 AKAMAI-ASN1, NL 39891 3266 187 22 ALJAWWALSTC-AS, SA 8551 2960 378 40 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2912 2283 897 ROSTELECOM-AS, RU 9009 2446 257 1313 M247, GB 34984 2205 355 592 TELLCOM-AS, TR 61317 1630 282 786 ASDETUK http://www.heficed.com, GB 13188 1609 100 34 TRIOLAN, UA 58224 1599 887 569 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8627 3411 577 Uninet S.A. de C.V., MX 10620 3422 526 613 Telmex Colombia S.A., CO 11830 2509 369 62 Instituto Costarricense de Electricidad 13999 1745 436 448 Mega Cable, S.A. de C.V., MX 6503 1450 311 476 Axtel, S.A.B. de C.V., MX 28573 1396 2282 230 CLARO S.A., BR 3816 1239 650 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1112 374 31 Telefonica del Peru S.A.A., PE 11664 998 207 416 Techtel LMDS Comunicaciones Interactiva 11172 963 111 69 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1610 393 22 LINKdotNET-AS, EG 24835 1450 498 30 RAYA-AS, EG 36992 1259 1457 265 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 734 68 11 ORANGE-COTE-IVOIRE, CI 6713 612 1863 34 IAM-AS, MA 36935 526 522 40 Vodafone-, EG 15399 492 48 24 WANANCHI-, KE 37342 484 32 1 MOVITEL, MZ 36914 418 82 3 KENET-AS, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8627 3411 577 Uninet S.A. de C.V., MX 9808 7908 8999 55 CMNET-GD Guangdong Mobile Communication 12479 6713 1725 146 UNI2-AS, ES 7545 5794 783 674 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5167 9384 2297 AMAZON-02, US 11492 4768 314 656 CABLEONE, US 4538 4757 4192 74 ERX-CERNET-BKB China Education and Rese 7155 4026 264 32 VIASAT-SP-BACKBONE, US 22773 3932 3002 245 ASN-CXA-ALL-CCI-22773-RDC, US 20940 3652 3347 201 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 7908 7853 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6713 6567 UNI2-AS, ES 7545 5794 5120 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4757 4683 ERX-CERNET-BKB China Education and Research Net 11492 4768 4112 CABLEONE, US 7155 4026 3994 VIASAT-SP-BACKBONE, US 22773 3932 3687 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3516 3496 VIETEL-AS-AP Viettel Group, VN 7713 3528 3472 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 20940 3652 3451 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 209319 IPV6ROUTING, US Transit: 46573 LAYER-HOST, US 23.162.32.0/24 Origin: 32444 SAFELINK-MV, US Transit: 6939 HURRICANE, US 23.181.208.0/24 Origin: 399728 PFNDN, US Transit: 20473 AS-CHOOPA, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:102 /12:306 /13:587 /14:1193 /15:1993 /16:13474 /17:8329 /18:13975 /19:25442 /20:42323 /21:50330 /22:106762 /23:91319 /24:496996 /25:1392 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5668 6713 UNI2-AS, ES 11492 3804 4768 CABLEONE, US 8151 3201 8627 Uninet S.A. de C.V., MX 6327 3167 3361 SHAW, CA 7155 3114 4026 VIASAT-SP-BACKBONE, US 22773 2962 3932 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3266 ALJAWWALSTC-AS, SA 8551 2425 2960 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2248 2580 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1931 2509 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1867 2:1195 3:134 4:19 5:3556 6:74 7:5 8:1538 9:1 11:164 12:1736 13:364 14:2297 15:76 16:15 17:324 18:93 20:128 21:1 22:188 23:4785 24:2427 25:2 27:2555 29:19 31:2292 32:109 34:1 35:41 36:1588 37:3769 38:2163 39:624 40:160 41:3830 42:958 43:2079 44:259 45:15001 46:3713 47:382 49:1619 50:1793 51:100 52:1244 54:218 55:766 56:9 57:52 58:1726 59:1204 60:931 61:2307 62:2277 63:1967 64:5360 65:2379 66:5030 67:2888 68:1164 69:4072 70:1387 71:681 72:3161 74:2592 75:1490 76:698 77:2022 78:1709 79:2279 80:1852 81:1511 82:1370 83:1136 84:1281 85:2695 86:715 87:1800 88:969 89:2999 90:488 91:7339 92:1782 93:2550 94:3129 95:3505 96:1295 97:343 98:972 99:969 100:93 101:1045 102:1477 103:26057 104:3764 105:435 106:786 107:2233 108:716 109:3869 110:2001 111:3183 112:1970 113:1536 114:1490 115:1910 116:1898 117:2349 118:2366 119:1885 120:1518 121:1085 122:2527 123:2171 124:1573 125:2074 128:1314 129:1095 130:862 131:2034 132:748 133:360 134:1614 135:298 136:765 137:931 138:2369 139:1190 140:747 141:1178 142:1200 143:1284 144:1250 145:328 146:1455 147:1337 148:2191 149:1452 150:818 151:1076 152:1519 153:414 154:2655 155:1329 156:1538 157:1185 158:916 159:2005 160:2323 161:1168 162:3317 163:992 164:1510 165:1382 166:606 167:1776 168:3628 169:693 170:4299 171:775 172:2436 173:2972 174:993 175:1085 176:3165 177:4370 178:2923 179:1883 180:2271 181:2642 182:3200 183:2077 184:2415 185:18348 186:4186 187:3133 188:3320 189:2940 190:8832 191:1408 192:10698 193:8193 194:6655 195:4783 196:2871 197:2329 198:6055 199:6022 200:7412 201:5297 202:10561 203:10091 204:4650 205:3354 206:3567 207:3390 208:4004 209:4689 210:4254 211:2262 212:3694 213:3399 214:1217 215:61 216:6253 217:2566 218:1211 219:707 220:2068 221:980 222:881 223:1929 End of report

1 0

DANE of SMTP Survey
by Moritz Müller 11 Jun '21

11 Jun '21

Hi, DANE for SMTP is not deployed on large scale. Together with researchers from Seoul National University, Virginia Tech and the University of Twente, we would like to understand which challenges operators face when deploying DANE for SMTP. Also, we would like to understand how operators deploy DANE successfully. Finally, we want to develop solutions to simplify DANE deployment for SMTP. Filling out the survey should take between 10 and 20 minutes. We would highly appreciate your participation. https://forms.gle/qpxtbi9zecT4haxC8 Don’t hesitate to drop me a mail if you have questions or remarks. We’ll share the results with the list after evaluation. — Moritz — Moritz Müller | Research Engineer SIDN | Meander 501 | 6825 MD | Postbus 5022 | 6802 EA | ARNHEM T +31 (0)26 352 55 00 moritz.muller(a)sidn.nl | www.sidn.nl

9 16

Re: Google uploading your plain text passwords
by William Herrin 11 Jun '21

11 Jun '21

On Fri, Jun 11, 2021 at 9:16 AM Matthias Merkel <matthias.merkel(a)staclar.com> wrote: > On mobile: Chrome Settings -> Sync -> Uncheck Sync All -> Uncheck Passwords This works. Thank you. Still, on by default? How many billions of passwords does google now have stored with reversible encryption? Regards, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

1 0

DDoS attack with blackmail
by Baldur Norddahl 10 Jun '21

10 Jun '21

Hello We got attacked by a group that calls themselves "Fancy Lazarus". They want payment in BC to not attack us again. The attack was a volume attack to our DNS and URL fetch from our webserver. I am interested in any experience in fighting back against these guys. Thanks, Baldur

11 13

AT&T Fiber Line / NOT MIS
by Dennis Burgess 10 Jun '21

10 Jun '21

I have a ATT fiber line for a customer that has a 300/300 circuit, but its not a MIS they are telling me we cannot route a /26 (they have allocated) to my device behind it. ☹ Any options? [LTI-Full_175px] Dennis Burgess Mikrotik : Trainer, Network Associate, Routing Engineer, Wireless Engineer, Traffic Control Engineer, Inter-Networking Engineer, Security Engineer, Enterprise Wireless Engineer Hurricane Electric: IPv6 Sage Level Cambium: ePMP Author of "Learn RouterOS- Second Edition” Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net<http://www.linktechs.net/> Create Wireless Coverage’s with www.towercoverage.com Need MikroTik Cloud Management: https://cloud.linktechs.net How did we do today? [Gold Star]<https://app.customerthermometer.com/?template=log_feedback&hash=5badbac1&em…>[Green Light]<https://app.customerthermometer.com/?template=log_feedback&hash=675abe04&em…>[Yellow Light]<https://app.customerthermometer.com/?template=log_feedback&hash=e42b48a5&em…>[Red Light]<https://app.customerthermometer.com/?template=log_feedback&hash=ecaadcd3&em…>

3 7

Technical resources for Open Access Fiber Networks?
by Mark Leonard 10 Jun '21

10 Jun '21

Hi NANOG, Not so long ago I learned about Open Access Fiber Networks. I'm quite curious about how these are actually implemented. I'm able to find boatloads of marketing material and management-targeted boilerplate, but I've not yet been able to find any technical resources. My first thoughts were: * Are these just massive VPLS networks? * Are they just giant L2 networks? I can't imagine that either of the above would scale particularly well. I'm looking for any books / papers / config guides / magic tomes / etc on the subject. Can anyone point me in the right direction? Thanks, Mark

3 2

NAT devices not translating privileged ports
by Fernando Gont 10 Jun '21

10 Jun '21

Folks, While discussing port randomization (in the context of https://www.ietf.org/archive/id/draft-ietf-ntp-port-randomization-06.txt ), it has been raised to us that some NAT devices do not translate the source port if the source port is a privileged port (<1024). Any clues/examples of this type of NATs? Thanks! Regards, -- Fernando Gont Director of Information Security EdgeUno, Inc. PGP Fingerprint: DFBD 63E3 B248 AE79 C598 AF23 EBAE DA03 0644 1531

5 12

A survey on BGP MRAI timer values in practice
by shahrooz＠cs.umass.edu 10 Jun '21

10 Jun '21

Hi NANOG, This is Shahrooz, a fourth-year CS Ph.D. student at the University of Massachusetts Amherst working under the supervision of prof. Arun Venkataramani. We often read that the Internet (i.e. BGP) has a long convergence delay. But why is it so slow? And can we (researchers) do anything about it? Please help us out to find out by answering our short anonymous survey (<10 minutes). This survey aims at finding the best current practices on the Internet about MRAI/"delay out" timer values. We expect the findings to increase the understanding of the perceived BGP convergence on the Internet, which could then help researchers to design better solutions for BGP long convergence delay. Survey URL: https://forms.gle/VNRpU2MzRU8DX1o57 We expect the questionnaire to be filled out by network operators whose job relates to BGP operations. It has a total of 6 questions and should take less than 10 minutes to answer. A summary of the aggregate results will be published as a part of a scientific article later (hopefully :) this year. Thank you so much in advance, and we look forward to read your responses! We would be also extremely grateful if you could forward this email to any operator you might know who may not read NANOG. Best, Shahrooz

5 7

Can't Port from a Particular Rate Center
by Mike Hammett 10 Jun '21

10 Jun '21

I first asked on a list much more narrow in scope, but failing to get sufficient data points, I've expanded my scope. Assuming the number isn't held by someone exempt from porting, what would prevent someone from being able to port a number from a particular rate center in a LATA they have coverage in? We picked up a particular carrier for our out-of-area needs and the first thing we throw at them in a LATA we know they have coverage in, they can't do. They have a non-useful reason why. It doesn't appear to have moved to a state where they contacted the losing provider as the response was very fast, so my provider rejected the port, not theirs. When I started at this company (where we do our own porting), I made sure to port a bunch of numbers from all over our LATA to see what would happen. All successful. That seems to indicate that it doesn't matter which xLEC or tandem currently serves that number, it can move elsewhere. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

5 5