- NANOG - lists.nanog.org

DNSSEC failures for www.cdc.gov
by John R. Levine 15 Jan '21

15 Jan '21

I see that www.cdc.gov is a CNAME for www.akam.cdc.gov. which in turn is a CNAME for www.cdc.gov.edgekey.net. But it appears that while www.cdc.gov is signed, www.akam.cdc.gov in the same zone on the same server is not. Huh? What? $ dig @ns1.cdc.gov www.cdc.gov +dnssec ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27760 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.cdc.gov. IN A ;; ANSWER SECTION: www.cdc.gov. 300 IN CNAME www.akam.cdc.gov. www.cdc.gov. 300 IN RRSIG CNAME 7 3 300 20210119032636 20210109024411 9155 cdc.gov. FxxFahuaCEw8gUXH6CuiqUgXWzPDkQlY0HTtJwjMAVMS7Lc3VOelfkmT hT/ZmDpdUiYsNr7YXMUNhF4Ii/49lu5AGTxwlu9dtX66HSK+8vf/FnzF XUZrC0UXFEPLl0K+pmdLEiUpiHDq3lIwAfKNmiOrwlPvtXttqDs+JC1d w6A= www.akam.cdc.gov. 3600 IN CNAME www.cdc.gov.edgekey.net. $ dig @ns1.cdc.gov www.akam.cdc.gov +dnssec ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59380 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;www.akam.cdc.gov. IN A ;; ANSWER SECTION: www.akam.cdc.gov. 3600 IN CNAME www.cdc.gov.edgekey.net. Regards, John Levine, johnl(a)taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly

2 1

Re: Petition for Board of Trustees adoption consideration of ARIN-2020-2
by Adam Thompson 15 Jan '21

15 Jan '21

Frankly, at this point, I'll support whatever lets me never have to hear about the subject again. -Adam (Yes, I know Outlook has filters, thank you. In fact, I think I'll go create one right now.) Adam Thompson Consultant, Infrastructure Services [1593169877849] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/> ________________________________ From: ARIN-PPML <arin-ppml-bounces(a)arin.net> on behalf of Jon Bachtold <jcbach(a)cirbn.org> Sent: January 12, 2021 05:56 To: arin-ppml(a)arin.net <arin-ppml(a)arin.net> Subject: [arin-ppml] Petition for Board of Trustees adoption consideration of ARIN-2020-2 I continue to support Reinstatement ie, ARIN-2020-2, and I support this petition to move the policy consideration to the Board of Trustees. Jon Bachtold CIRBN ARIN-2020-2: Reinstatement of Organizations Removed from Waitlist by Implementation of ARIN-2019-16 ARIN-2020-2 reverted to Draft Policy on 6 January following a Last Call period. Per ARIN's Policy Development Process (PDP), all Recommended Draft Policies not sent to the ARIN Board of Trustees for adoption consideration within 60 days of Last Call completion will revert to Draft Policy status. Jon Bachtold Chief Technology Officer CIRBN, LLC Tel: 309-820-7321<tel:309-820-7321> Email: jcbach(a)cirbn.org<mailto:jcbach@cirbn.org> Web: www.cirbn.org<https://www.cirbn.org/> [CIRBN]<http://www.cirbn.org/> 200 W Front St, Ste 500A Bloomington, IL 61701 [Facebook]<https://www.facebook.com/cirbn> [LinkedIn]<https://www.linkedin.com/company/3729509/> [CIRBN Twitter]<https://twitter.com/CIRBN_LLC>

1 0

Looking for hosted SMTP service for small ISP
by chiel 14 Jan '21

14 Jan '21

Hello, We are a small ISP. Most of our customers have a hosted e-mail service (gmail/office365/etc..) and have their own outgoing email sorted. But a handful of customers rely on our SMTP server for outgoing e-mail. Currently we host this our self with a physical box. But I would like to have a hosted solution so that I don't have to worry about keeping up with updates and latest spam techniques. Preferred I'm looking to make a DNS name like smtp.example.com and point this to a hosted solution. This excepts any email from our IP ranges. All controlled with a nice dashboard. I was in contact with Solarwinds (Mail Assure) but they don't seem to be able to help. Chiel

7 6

Re: Parler
by sronan＠ronan-online.com 14 Jan '21

14 Jan '21

This is a list for Network Operators, AWS certainly operates networks. Sent from my iPhone > On Jan 10, 2021, at 4:27 PM, K. Scott Helms <kscott.helms(a)gmail.com> wrote: > > > No, > > It really does not. Section 230 only applies to publishers, and not to network providers. If this were a cloud hosting provider list then you'd be correct, but as a network provider's list it does not belong here. > > > Scott Helms > > > >> On Sun, Jan 10, 2021 at 3:21 PM Lady Benjamin PD Cannon <ben(a)6by7.net> wrote: >> As network operations and compute/cloud/hosting operations continue to coalesce, I very much disagree with you. Section 230 is absolutely relevant, this discussion is timely and relevant, and it directly affects me as both a telecom and cloud compute/services provider. >> >> >> —L.B. >> >> Lady Benjamin PD Cannon, ASCE >> 6x7 Networks & 6x7 Telecom, LLC >> CEO >> ben(a)6by7.net >> "The only fully end-to-end encrypted global telecommunications company in the world.” >> FCC License KJ6FJJ >> >> <Speedtest9118.png> >> <Ben LIC.png> >> >>> On Jan 10, 2021, at 12:13 PM, K. Scott Helms <kscott.helms(a)gmail.com> wrote: >>> >>> It's not, and frankly it's disappointing to see people pushing an agenda here. >>> >>> >>> Scott Helms >>> >>> >>>> On Sun, Jan 10, 2021 at 9:37 AM <sronan(a)ronan-online.com> wrote: >>>> >>>> NANOG is a group of Operators, discussion does not have to be about networking. I have already explained how this represents a significant issue for Network Operators. >>>> >>>> On Jan 10, 2021, at 9:09 AM, Mike Bolitho <mikebolitho(a)gmail.com> wrote: >>>> >>>> >>>> It has nothing to do with networking. Their decision was necessarily political. If you can specifically bring up an issue, beyond speculative, on how their new chosen CDN is somehow now causing congestion or routing issues on the public internet, then great. But as of now, that isn't even a thing. It's just best to leave it alone because it will devolve into chaos. >>>> >>>> - Mike Bolitho >>>> >>>>> On Sun, Jan 10, 2021, 6:54 AM <sronan(a)ronan-online.com> wrote: >>>>> >>>>> Why? This is extremely relevant to network operators and is not political at all. >>>>> >>>>> On Jan 10, 2021, at 8:51 AM, Mike Bolitho <mikebolitho(a)gmail.com> wrote: >>>>> >>>>> >>>>> Can we please not go down this rabbit hole on here? List admins? >>>>> >>>>> - Mike Bolitho >>>>> >>>>>> On Sun, Jan 10, 2021, 1:26 AM William Herrin <bill(a)herrin.us> wrote: >>>>>> >>>>>> Anybody looking for a new customer opportunity? It seems Parler is in >>>>>> search of a new service provider. Vendors need only provide all the >>>>>> proprietary AWS APIs that Parler depends upon to function. >>>>>> >>>>>> https://www.washingtonpost.com/technology/2021/01/09/amazon-parler-suspensi… >>>>>> >>>>>> Regards, >>>>>> Bill HErrin >>

12 14

DoNotPay Spam?
by Robert Webb 14 Jan '21

14 Jan '21

Anyone else getting spam from DoNotPay everytime they send an email to the list? I have not sent anything in a while until my ATT email and now I am getting this on every new email I send to the list. [image: Alternate text] *You’re almost there! Sign up once to unlock lifetime protection (and even compensation) on all spam emails. *

10 13

Nashville
by Andy Ringsmuth 14 Jan '21

14 Jan '21

Certainly thankful no serious injuries or fatalities in this clusterblank. It seems the AT&T building at 185 2nd Ave N may have been a target, which would explain the timing (holiday morning when no one is out, as opposed to a holiday evening when there would be mass casualties). A little curious what that building has. Is it just a big co-lo place? Regional CLEC/ILEC? No earth-shattering revelations here. Admittedly just bored on a slow Christmas Day when my wife is at work (nurse) and kid is playing with a new tablet and I’m just watching the news trying to understand/figure out a little what and why. ---- Andy Ringsmuth 5609 Harding Drive Lincoln, NE 68521-5831 (402) 304-0083 andy(a)andyring.com “Better even die free, than to live slaves.” - Frederick Douglas, 1863

13 22

NDAA passed: Internet and Online Streaming Services Emergency Alert Study
by Sean Donelan 14 Jan '21

14 Jan '21

The House on Monday and the Senate on Friday have overriden the President's veto of the National Defense Authorization Act for Fiscal Year 2021 passing it into law. Among the NDAA's various sections, it includes the Reliable Emergency Alert Distribution Improvement (READI) Act. The READI Act includes a study and report for Emergency Alerts via the internet and streaming services. SEC. 9201. RELIABLE EMERGENCY ALERT DISTRIBUTION IMPROVEMENT. [...] (e) INTERNET AND ONLINE STREAMING SERVICES EMERGENCY ALERT EXAMINATION.— (1) STUDY.—Not later than 180 days after the date of enactment of this Act, and after providing public notice and opportunity for comment, the Commission shall complete an inquiry to examine the feasibility of updating the Emergency Alert System to enable or improve alerts to consumers provided through the internet, including through streaming services.

35 101

Looking for alternate providers
by james jones 14 Jan '21

14 Jan '21

Greetings, Looking for upstream alternatives in Ayer, MA (01432). Need a gigabit link. Can be async but needs to be at least 35Mb up. Comcast need not apply. -James

1 0

ATT Outage in South Florida?
by Robert Webb 13 Jan '21

13 Jan '21

Getting complaints from internet and wireless users of no data or voice access. Anyone down that way having the same experience?

3 3

Re: DMVPN via Internet or Private APN
by Joel M Snyder 13 Jan '21

13 Jan '21

> I offer a question to help me settle an internal debate. As a network > engineer for a large enterprise, do you choose ISP flexibility or ISP > security when you build an OOB network? Flexibility. (will not joke about immense problem of including the words "ISP" and "security" in same sentence, unless accompanied by the phrase "complete and total absence of" as well) My particular area of concentration the last decade or so has been large multi-national WANs. I've been fortunate enough to see entire waves of deployment and redeployment, which has added a thick layer of scarring. One of the lessons that I take away from these deployments is that anything which is not pure "Internet" IP must be avoided, because if it doesn't bite you in the *ss on day 1, it will on day 1,000 or 10,000. Providers love to deliver a customized service, and in small deployments (such as connecting offices within a metropolitan area) I can see the value. But whether the provider is creating lock-in (sinister conspiracy theory) or just wants to give you a better service (optimistic world view theory), it *always* ends up being a problem sooner or later. I can pull a dozen anecdotes out where this happened and cost between $ and $$$$ to deal with, but my long-term experience is that the more vanilla the pipe, the better off you will be in the long run especially as the clock ticks past years and years. There are certainly issues with having multiple contracts, and the overhead of handling hundreds of semi-overlapping and slightly different bills and contact points is not to be dismissed lightly; it is a BIG deal especially for larger organizations with high internal costs for administrative overhead. Providers also claim better pricing on big contracts, but rarely is this true, because of the sharp and continuous drop in costs for Internet worldwide. Go with vanilla. It's easier to pour syrup and nuts on top than it is to dig out those disgusting frozen marshmallow chunks from the rocky road someone committed to. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0