- NANOG - lists.nanog.org

Verizon JetConnect Contact?
by Jet Connect (inflight) 27 Mar '04

27 Mar '04

Could a Verizon JetConnect/Airfone engineer please contact me off-list regarding some connectivity problems I'm having? Thanks.

1 0

RE: Overflow circuit
by Michel Py 26 Mar '04

26 Mar '04

> Joe wrote: > I am looking for advice on technique or products that can > solve the following challenge ... > Two private line T1's between A and B - one terrestial T1 > with >200 ms RTT, the other T1 is over satellite with ~500 > ms RTT. The circuits are being used for mixed VoIP (70%) > and data (30%) applications. To achieve optimal voice > quality, we want to route all VoIP calls over the terrestrial > T1 until it is "full", then divert all subsequent VoIP calls > over the satellite T1 (**while existing VoIP calls continue > to be routed over the terrestial T1). I have a cheesy solution..... 1. You need a routing protocol that load-balances. I have done it before with EIGRP, you mileage may vary with others IGPs. 2. Cook a custom metric that will prefer the terrestrial link until full (a mix of delay and load will likely do). 3. Use policy routing to send anything but voice to the satellite link. There's a catch here: even if there is no voice, your data is limited to satellite, which works with your traffic pattern. Your data is forced to the sat, your voice picks the best path as per your custom metric. 4. On the satellite link, prioritize voice over data. 5. Fine-tune the variance. Michel.

1 0

DNSRBL
by James Baldwin 26 Mar '04

26 Mar '04

Is anyone experiencing issues utilizing DNSRBL's spam/dun DNS servers? I cannot resolve addresses for spam.dnsrbl.net, nor for dun.dnsrbl.net. There also appears to be a misspelling in the SOA record for the dnsrbl.net zone. ; <<>> DiG 9.2.3 <<>> +nocomment @ns1.namesystems.net dnsrbl.net spam.dnsrbl.net dun.dnsrbl.net ;; global options: printcmd ;dnsrbl.net. IN A dnsrbl.net. 86400 IN SOA ns1.nameystems.net. dns.namesystems.net. 2002102000 10800 3600 604800 86400 ;; Query time: 65 msec ;; SERVER: 63.209.20.18#53(ns1.namesystems.net) ;; WHEN: Fri Mar 26 16:48:37 2004 ;; MSG SIZE rcvd: 95 ;spam.dnsrbl.net. IN A spam.dnsrbl.net. 3600 IN SOA ns1.namesystems.net. dns\(a)namesystems.net. 2004032600 3600 900 864000 3600 ;; Query time: 62 msec ;; SERVER: 63.209.20.18#53(ns1.namesystems.net) ;; WHEN: Fri Mar 26 16:48:37 2004 ;; MSG SIZE rcvd: 101 ;dun.dnsrbl.net. IN A dun.dnsrbl.net. 3600 IN SOA ns2.namesystems.net. dns.namesystems.net. 2004031000 3600 900 864000 3600 ;; Query time: 74 msec ;; SERVER: 63.209.20.18#53(ns1.namesystems.net) ;; WHEN: Fri Mar 26 16:48:37 2004 ;; MSG SIZE rcvd: 88

1 0

Sorry if this discussion has been had recently but
by Drew Weaver 26 Mar '04

26 Mar '04

I know there is a way to do this, but what is the absolute Defacto best method of tracking flows from Cisco/Juniper routers? I know there is some freeware available such as cflowd but we really need something that will alert us to trouble before it becomes a problem. We don't mind buying an appliance to do this, and it doesn't have to be freeware software, we just want something that will work. Thanks, -Drew

2 1

Mail to postmaster
by Adi Linden 26 Mar '04

26 Mar '04

I am looking for insight on how to handle mail addressed to postmaster. I guess a human being is supposed to read these? Some months ago mail to postmaster went from nearly zero to 10,000 a day in a very short time (hours). Ever since then postmaster email has been filed in /dev/null. These days we're still at about 2000 postmaster emails per day. Anyone has any sensible ideas of how to process mail to postmaster so only relevant stuff is forwarded to a human being? Adi

2 1

clueful yahoo abuse contact?
by Dan Hollis 26 Mar '04

26 Mar '04

Does anyone have a clueful abuse admin contact at yahoo.com? I have already tried the 'usual methods'. Eg picking up a phone and calling every publically available number for yahoo I can find, and emailing abuse(a)yahoo.com etc. Attempts via phone result in being blown off, that unless we are a direct yahoo business partner or a customer of purchased yahoo services, they will not talk to me, and that I have to use 'the web' to report abuse originating from yahoo servers and yahoo owned+operated ip space. Reports via 'the web' and email result in clueless (or auto-denybot) responses. -Dan

1 0

Re: Publish or (gulp) Perish
by Michael.Dillon＠radianz.com 26 Mar '04

26 Mar '04

>> Powerpoints have a hard time matching the depth of a refereed journal >> submission, because with the powerpoint, soundbites tend to take >> precedence over content. >Vijay hit it on the head - have we all been foolish by trying to put our >collective expression of service provider best practices and network design >into an archive of Powerpoint? To quote the Magic Eight Ball, "All >indications point to yes" It's true that a lot of slide presentations don't have any other information to back them up. When a researcher presents something you can almost always go to their published (or pre-published) works for more information. But this is less true of operator presentations. So, should NANOG sponsor a document series, like the RFCs or the RIPE documents, that would form a body of knowledge for IP network operations best practice? If we did do this, it wouldn't spring into being overnight, but the program committee could give precedence to presenters who submit a paper backing up their slides. Or is this all too academic and too formal for this self-organized criticality that we call NANOG? --Michael Dillon

2 1

The Cidr Report
by cidr-report＠potaroo.net 26 Mar '04

26 Mar '04

This report has been generated at Fri Mar 26 21:46:49 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 19-03-04 132066 92776 20-03-04 132180 92933 21-03-04 132112 92853 22-03-04 132061 92855 23-03-04 132124 92921 24-03-04 132238 92955 25-03-04 132162 93009 26-03-04 132256 92997 AS Summary 16846 Number of ASes in routing system 6778 Number of ASes announcing only one prefix 1394 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 73534464 Largest address span announced by an AS (/32s) AS568 : DISOUN DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 26Mar04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 132219 93018 39201 29.6% All ASes AS4323 698 201 497 71.2% TWTC Time Warner Telecom AS7018 1394 972 422 30.3% ATTW AT&T WorldNet Services AS7843 536 116 420 78.4% ADELPH-13 Adelphia Corp. AS6197 688 303 385 56.0% BNS-14 BellSouth Network Solutions, Inc AS27364 404 33 371 91.8% ARMC Armstrong Cable Services AS701 1304 941 363 27.8% UU UUNET Technologies, Inc. AS22909 380 34 346 91.1% CMCS Comcast Cable Communications, Inc. AS6198 550 217 333 60.5% BNS-14 BellSouth Network Solutions, Inc AS4134 636 314 322 50.6% CHINANET-BACKBONE No.31,Jin-rong Street AS9583 383 69 314 82.0% SATYAMNET-AS Satyam Infoway Ltd., AS22773 359 45 314 87.5% CXAB Cox Communications Inc. Atlanta AS1239 960 656 304 31.7% SPRN Sprint AS4355 384 99 285 74.2% ERSD EARTHLINK, INC AS6140 379 108 271 71.5% IMPSA ImpSat AS17676 297 43 254 85.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS6478 289 42 247 85.5% ATTW AT&T WorldNet Services AS1221 877 634 243 27.7% ASN-TELSTRA Telstra Pty Ltd AS25844 243 16 227 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS209 730 513 217 29.7% QWEST-4 Qwest AS14654 221 4 217 98.2% WAYPOR-3 Wayport AS11305 243 31 212 87.2% INTERL-80 Interland Incorporated AS20115 595 395 200 33.6% CC04 Charter Communications AS4766 451 252 199 44.1% KIX Korea Internet Exchange for "96 World Internet Exposition AS3356 881 686 195 22.1% LEVEL3 Level 3 Communications AS9443 360 166 194 53.9% INTERNETPRIMUS-AS-AP Primus Telecommunications AS2386 426 239 187 43.9% ADCS-1 AT&T Data Communications Services AS4519 204 21 183 89.7% MAASCO Maas Communications AS6347 374 193 181 48.4% SAVV SAVVIS Communications Corporation AS9929 210 30 180 85.7% CNCNET-CN China Netcom Corp. AS6327 206 28 178 86.4% SHAWC-2 Shaw Communications Inc. Total 15662 7401 8261 52.7% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.22.0.0/18 AS3561 CWU Cable & Wireless USA 64.46.0.0/18 AS7850 IHIGHW iHighway.net, Inc. 64.46.4.0/22 AS11711 TULARO TULAROSA COMMUNICATIONS 64.46.12.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.46.34.0/24 AS29393 CLUEFULCOLO-AS AS for Cluefulcolo.net 64.46.60.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.63.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.62.126.0/23 AS25700 SWIFTD SWIFTDESK VENTURE 66.51.128.0/20 AS23401 NAC Net Access Corporation 66.51.140.0/24 AS23401 NAC Net Access Corporation 66.114.0.0/19 AS16526 BIRCHT Birch Telecom, Inc. 69.26.32.0/19 AS19803 ASNBLK-VTLA2 Virtela Communications 132.0.0.0/10 AS568 DISOUN DISO-UNRRA 137.0.0.0/13 AS568 DISOUN DISO-UNRRA 138.136.0.0/13 AS568 DISOUN DISO-UNRRA 158.0.0.0/13 AS568 DISOUN DISO-UNRRA 164.234.0.0/16 AS721 DNIC DoD Network Information Center 164.234.0.0/18 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 DISOUN DISO-UNRRA 192.172.0.0/19 AS568 DISOUN DISO-UNRRA 192.188.208.0/20 AS568 DISOUN DISO-UNRRA 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS568 DISOUN DISO-UNRRA 198.97.80.0/20 AS568 DISOUN DISO-UNRRA 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.192.0/20 AS568 DISOUN DISO-UNRRA 198.97.240.0/20 AS568 DISOUN DISO-UNRRA 198.101.4.0/22 AS568 DISOUN DISO-UNRRA 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS568 DISOUN DISO-UNRRA 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.84.0.0/16 AS701 UU UUNET Technologies, Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS568 DISOUN DISO-UNRRA 199.114.128.0/18 AS568 DISOUN DISO-UNRRA 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 DISOUN DISO-UNRRA 199.123.0.0/18 AS568 DISOUN DISO-UNRRA 199.123.16.0/20 AS568 DISOUN DISO-UNRRA 199.123.80.0/21 AS568 DISOUN DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.2.64.0/20 AS9729 IS-AP iAdvantage Limited 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.24.0/24 AS17888 SINGTEL-HK SingTel Hong Kong Limited 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.142.0/24 AS30362 HAWAI-1 Hawaii-Pacific Teleport 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.123.96.0/20 AS9288 COMCEN-AS-AP Com-Cen Pty Ltd 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.143.56.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.248.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.155.243.0/24 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.87.224.0/19 AS4799 CHINA169-JT CNCGROUP old Jitong IP network 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 204.69.144.0/22 AS5668 CIH-12 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NCC-105 NewSouth Communications Corp. 206.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 206.108.34.0/24 AS852 AGTA Telus Advanced Communications 206.108.35.0/24 AS852 AGTA Telus Advanced Communications 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.246.0.0/19 AS10489 FUTURE-100 FutureOne 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 206.253.190.0/23 AS8123 POLYBA Polybase 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.181.0.0/19 AS3561 CWU Cable & Wireless USA 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.34.128.0/19 AS3561 CWU Cable & Wireless USA 209.34.160.0/20 AS3561 CWU Cable & Wireless USA 209.55.64.0/18 AS5726 IWCI InterWorld Communications, Inc. 209.169.219.0/24 AS189 GNTY Genuity 209.169.223.0/24 AS189 GNTY Genuity 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.205.95.0/24 AS6347 SAVV SAVVIS Communications Corporation 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.51.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.55.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.56.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL-33 Telesat International Ltd. 209.240.96.0/19 AS10815 KCNETI-1 KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 209.251.64.0/19 AS10266 MDCN MDC, Inc. 210.213.0.0/19 AS6453 GIEUROPE Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.130.0/24 AS11937 TRXI TRX Inc. 216.145.132.0/24 AS11937 TRXI TRX Inc. 216.145.133.0/24 AS11937 TRXI TRX Inc. 216.145.134.0/24 AS11937 TRXI TRX Inc. 216.145.135.0/24 AS11937 TRXI TRX Inc. 216.145.152.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.218.0/24 AS17274 RWB-1 Robert W. Baird 216.169.250.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.128.0/18 AS3561 CWU Cable & Wireless USA 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/19 AS3561 CWU Cable & Wireless USA 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Throttling mail
by Adi Linden 25 Mar '04

25 Mar '04

Does anyone have any resources on building a mail relay that would limit the amount of email a single user or ip address can relay over a given time period? I have a spam/virus problem that is getting out of hand. Adi

12 18

RE: Redirecting mail (Re: Throttling mail)
by Bil Herd 25 Mar '04

25 Mar '04

Not to sound like a commercial for Cisco, but their IDS stuff does rewrite ACL's based upon signatures. Bil Herd -----Original Message----- From: J.D. Falk [mailto:jdfalk@cybernothing.org] Sent: Thursday, March 25, 2004 4:30 PM To: nanog(a)merit.edu Subject: Re: Redirecting mail (Re: Throttling mail) On 03/25/04, Valdis.Kletnieks(a)vt.edu wrote: > On the other hand, it's probably more effective to find some way of > making the Cisco gear block outbound 25 from abusive machines. Inbound also. The spammers have been using triangular routing for a while. (They dial in someplace, get an IP, and use a broadband connection to send packets with a forged source address of that dialup IP.) -- J.D. Falk "be crazy dumbsaint of the mind" <jdfalk(a)cybernothing.org> -- Jack Kerouac

1 0