- NANOG - lists.nanog.org

ICANN extracts $20m signing fee for $1bn dot-com price increases and guess who's going to pay for it?
by Dan Hollis 08 Jan '20

08 Jan '20

https://www.theregister.co.uk/2020/01/07/icann_verisign_fees/ 98% of the comments were opposed. How many / which companies would have to get onboard in order to get enough support for an icann alternative? Is such a thing even feasible? -Dan

6 5

Spoofer Report for NANOG for Dec 2019
by CAIDA Spoofer Project 08 Jan '20

08 Jan '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Dec 2019: ASN Name Fixed-By 32 STANFORD 2019-12-11 19624 SERVERROOM 2019-12-28 62957 HOSPITALITY-NETWORK 2019-12-30 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2019: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2019-12-27 6128 CABLE-NET-1 2016-09-03 2019-12-29 20412 CLARITY-TELECOM 2016-09-30 2019-12-31 20001 TWC-20001-PACWEST 2016-10-08 2019-12-06 6181 FUSE-NET 2016-10-10 2019-12-31 174 COGENT-174 2016-10-21 2019-12-31 32440 LONI 2016-11-03 2019-12-27 12083 WOW-INTERNET 2016-11-09 2019-12-31 9009 M247 2017-01-10 2019-12-30 701 UUNET 2017-06-14 2019-12-24 63296 AMARILLO-WIRELESS 2017-09-01 2019-12-31 546 PARSONS-PGS-1 2017-11-20 2019-12-30 12222 AKAMAI 2018-02-14 2019-12-31 11827 WSU 2018-05-07 2019-12-13 393564 SPOKANE 2018-06-05 2019-12-31 225 VIRGINIA 2018-06-18 2019-12-17 33452 RW 2018-09-19 2019-12-02 20448 VPNTRANET-LLC 2018-09-20 2019-12-30 63275 RADIOWIRE 2019-02-07 2019-12-09 19531 NODESDIRECT 2019-03-14 2019-12-17 8047 GCI 2019-04-11 2019-12-31 10745 ARIN-ASH-CHA 2019-04-29 2019-12-12 46573 GLOBAL-FRAG-NETWORKS 2019-05-16 2019-12-14 29933 OFF-CAMPUS-TELECOMMUNICATIONS 2019-07-15 2019-12-30 54600 PEGTECHINC 2019-08-28 2019-12-18 46300 HSC-WAP 2019-10-30 2019-12-26 2886 EC-813-2886 2019-11-05 2019-12-31 63018 USDEDICATED 2019-12-03 2019-12-06 21859 ZNET 2019-12-26 2019-12-26 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

BGP Path Attribute Filtering, YES or NO?
by adamv0025＠netconsultings.com 08 Jan '20

08 Jan '20

Would like to gather current views of a wider community on BGP Path Attribute Filtering (discarding selected attributes in particular, not treat as withdraw) as an addition to the long list of standard conditioning tools like max as-path length limit, limiting number of communities all the way to running iBGP infrastructure to carry Internet prefixes separate to the one carrying customers' L3/L2VPN prefixes. And I appreciate the topic is somewhat contentious and there's no simple yes or no answer either. My view is that in a stub AS there should be no harm in discarding unused BGP path attributes, On transit AS-es I'd expect two opposing views: One might be: "I have a business to run and don't care about some university experiments, so unless any of my customers specifically asks for some attribute I'll drop all reserved, unassigned and deprecated ones and might even drop some not widely used ones just to be on the well-trodden bug free path" Other might be: "These experimental work is of great value to the community and there's a process now to announce and manage these experiments, what about net neutrality, and besides modern BGP implementations should handle well formatted attributes and if it's not the case its good that these flaws are being exposed and fixed." Please let me know your thoughts. adam

4 11

FCC proposes $10 Million fine for spoofed robocalls
by Sean Donelan 08 Jan '20

08 Jan '20

On Monday, U.S. FCC Chairman Pai and Canadian CRTC Chairperson Scott made the first official cross-border SHAKEN/STIR call. https://www.fcc.gov/document/pai-scott-make-first-official-cross-border-sha… Today, the U.S. FCC announced a proposed nearly $10 million fine for spoofed robocalls. https://www.fcc.gov/document/fcc-proposes-nearly-10-million-fine-spoofed-ro… A U.S. telemarketing firm spoofed the caller-id of a competitor to make approximately 47,610 political robocalls shortly before a California State Assembly primary election. I think this case is somewhat unusual for robocall spoofing, because the alleged perpetrator, victims, and 'crime scene' occured within the same jurisdiction. While the FCC likes to announce large enforcement actions in splashy press releases, its actually bad about collecting fines. The FCC must rely on the Justice Department to initiate separate prosecution to enforce payment from non-license holders because the FCC can't do that itself. So don't expect anyone to actually pay soon (or ever).

27 54

Re: FYI - Suspension of Cogent access to ARIN Whois
by John Curran 08 Jan '20

08 Jan '20

On 6 Jan 2020, at 11:43 PM, Stephen Wilcox <swilcox(a)ixreach.com<mailto:swilcox@ixreach.com>> wrote: Out of interest, what does it take to have an ARIN contract or core ARIN services revoked? Is there such a threshold, does breach of contract ever result in consequential action? This seems more like a talking point than an act with teeth to it… Steve - This action is due to misuse of ARIN’s Whois services: specifically, organizations that routinely misuse the Whois data risk losing access to the information. As I noted elsewhere, it is possible for the suspension of access to Whois to be technically circumvented, but ARIN still has to take abuse of the data seriously because our customers make their contact data available specifically for facilitating network operations, and this includes terminating or suspending access to the Whois service for those who chronically fail to comply with the terms of use, such as those who repeatedly violate the prohibition on marketing & solicitation using ARIN Whois data. It is also possible that such misuse of ARIN Whois is a violation of ARIN’s registration services agreement (which provides for more significant recourse such as resource revocation), but ARIN is simply suspending access to the Whois service as that action directly corresponds to (and helps mitigate) the specific terms of use violation. Thanks, /John John Curran President and CEO American Registry for Internet Numbers

2 1

Discussion on Post-Earthquake Power & Communications in Puerto Rico
by Yosem Companys 08 Jan '20

08 Jan '20

May be of interest, posted on the Startups of Puerto Rico Slack channel earlier today: Marcos Cruz [4:41 AM] I hope everyone is well, Noob question: Does anyone know for how long do the power plants of cell towers run on diesel? Mike Rosado:house_with_garden: [8:03 AM] I spoke with my parents in Carolina, and they have been without power since 4am [8:03 AM] Sprint towers are down, but AT&T towers are running. Mike Rosado:house_with_garden: [8:23 AM] I'm part of the volunteer team at the ITDRC and I am on the ITDRC Slack channel. We already have many volunteers in Puerto Rico. Should you need communications help, please send me a private message, and I'll forward it to them. https://itdrc.org/ (edited) M Pilar [9:24 AM] ~24h in urban zones ~48h in other zones, but if they are large towers they also have batteries that last 1-8h Ariel Zavala [9:32 AM] What ISPs are up right now? Mike Rosado:house_with_garden: [9:39 AM] Right now Liberty and WorldNet are being brought up. :+1:1 Mike Rosado:house_with_garden: [9:41 AM] Liberty in some places and not others, after that they return to ATT LTE Matt Van [10:35 AM] Optico is up :heavy_check_mark:2 Tomas Irizarry [10:48 AM] @mikerostx dude ITDRC sounds super interesting. Do you know if there is anything like a mobile datacenter where a community could set up a WAN for services/communication? Tomas Irizarry [10:48 AM] in the event private networks are down Mike Rosado:house_with_garden: [10:53 AM] replied to a thread: @mikerostx dude ITDRC sounds super interesting. Do you know if there is anything like a mobile datacenter where a community could set up a WAN for services/communication? We (ITDRC) have volunteers with boots on the ground in Puerto Rico. @Ruth Silva is one of a dozen or more people there working on these efforts. Tomas Irizarry [10:55 AM] Thats amazing. I dont know what I can contribute but I’ll join and see where I can . (edited) Mike Rosado:house_with_garden: [10:57 AM] Always plenty of ways to contribute and have corporations volunteer their employees to help those in need. :wink: Tomas Irizarry [10:57 AM] actually.. [10:57 AM] now that you bring that up [10:58 AM] we’re actually in the middle of deciding what non-profits to disburse our donation fund to [10:58 AM] let me check what the process is and I’ll put in ITDRC for discussion Mike Rosado:house_with_garden: [10:59 AM] When Maria hit :flag-pr: , I was deployed for several weeks to help out. Trust me, there's plenty to contribute and do. :wink:

2 1

Third Party OLT Optics
by Mike Hammett 07 Jan '20

07 Jan '20

What is the vendor-lock scene like in the world of OLT optics? Is it as bad as Ethernet optics? If it exists, is there actually a good reason for it (other than money)? Have any of you tried third-party optics in Zhone gear? Have any of you tried FS OLT optics in anything but ZTE and Huawei? FS says their optics only work in ZTE\Huawei, but their own customer reviews have at least one other person saying it worked fine in their Zhone device. I'm sure I'll get people saying that for something so important, one should only deploy first-party optics, regardless of the cost. Zhone's pricing isn't bad at all.... but if there's effectively no difference, then you might as well buy the cheaper one. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

3 2

Frontier help
by william manning 07 Jan '20

07 Jan '20

Could someone from Frontier give me a hand with one of your customers that appears to have a fios connection out of coresite in LA. Soon would be good. :) /William Manning 310.322.8102

1 0

Getting an ASN in ARIN
by thomas brenac 06 Jan '20

06 Jan '20

Hi, Happy new year everyone. I know ARIN is very strict with IP transfers at least from ARIN to ARIN. I know they require very detailed information. Curious if someone in the list know if they are equally strict when issuing an ASN and/or have a recent experience on the matter ? Thanks you -- Thomas BRENAC https://www.brenac.eu +33686263575 Certified IPv4 Broker by RIPE NCC, APNIC and LACNIC The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. This message has been sent as a part of discussion between BRENAC EURL and the addressee whose name is specified above. Should you receive this message by mistake, we would be most grateful if you informed us that the message has been sent to you. In this case, we also ask that you delete this message from your mailbox, and do not forward it or any part of it to anyone else. Thank you for your cooperation and understanding. We puts the security of the client at a high priority. Therefore, we have put efforts into ensuring that the message is error and virus-free. Unfortunately, full security of the email cannot be ensured as, despite our efforts, the data included in emails could be infected, intercepted, or corrupted. Therefore, the recipient should check the email for threats with proper software, as the sender does not accept liability for any damage inflicted by viewing the content of this email. The views and opinions included in this email belong to their author and do not necessarily mirror the views and opinions of the company. Our employees are obliged not to make any defamatory clauses, infringe, or authorize infringement of any legal right. Therefore, the company will not take any liability for such statements included in emails. In case of any damages or other liabilities arising, employees are fully responsible for the content of their emails.

5 4

GPS Sync Outage
by Matt Hoppes 06 Jan '20

06 Jan '20

Is anyone else seeing GPS timing source outages across the U. S. In the last two hours?

13 15