- NANOG - lists.nanog.org

RE: MAE West down?
by John Fraizer 13 Jul '00

13 Jul '00

http://www.rsng.net/rs-views/mae-west/index.html Peer | Routes Exported | Peers Exported To | Routes Imported | Peers Imported From --------------------------------------------------------------------------------------------- AS 2548 (Digex) 2431 2 0 2 AS 6259 (FibreNet) 0 18 2273 18 Looks kinda dismal, huh? There's BIG trouble when DIGEX has a grand total of 2 peers at the exchange and they're not importing ANY routes. --- John Fraizer EnterZone, Inc -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3a mQCNAzlo9RIAAAEEAK03prYoSsHIpASXliiU7HMshrsyT9KrigEKgy/ADVB6noQS Yp5nIlCt4BIV/8oYFloZcNxoo8LDchkDM+0arJcJ9236W+r7nf+UUu8e4hJz0y73 Jq6DEkGY64qbsgF/NBy5xQGnNFyY98KcIbp62m+C5UlTa3NNjIbMmesdFkq5AAUR tClKb2huIEZyYWl6ZXIgPEpvaG4uRnJhaXplckBFbnRlclpvbmUuTmV0PokAlQMF EDlo9RKGzJnrHRZKuQEBa/oEAKiYVn+zfRSeGxA5fdK9be1DpN0ygV0UX0ghIUsg LLAb4bhhGqwXz/my1w5oLIwa4YSOvHzkPzbC0jvEEfbQXlE/bGOqpK8VlznudGy4 DV4p0eu4Ij5gWAdkWmjyI4DfjJL8nVsat9HgE0/IsYi7xwujdvwz6TQWuxmNkQyx D3aS =WdqV -----END PGP PUBLIC KEY BLOCK----- On Wed, 12 Jul 2000, Dave Cahill wrote: > John, > > The Mae-west looking glass is still functioning and providing BGP routing > information? > > http://nitrous.digex.net/mae/maew-lg.html

2 1

MAE-West repair time line
by Sean Donelan 13 Jul '00

13 Jul '00

Looking at the public mae-west looking-glasses, it appears mae-west returned to normal at about 2am PDT this morning. Individual ISPs have been turning their peering sessions back on throughout the morning. Traffic appears to be returning to previous levels.

1 0

RE: DNS for interfaces & PPPoE Time Burst
by John Fraizer 13 Jul '00

13 Jul '00

On Thu, 13 Jul 2000, Bob Biver wrote: > > Addendum-- > To to overwhelming responce: > I was simply trying to get a perspective on shaping PPPoE traffic. I would > *NEVER* misinform or otherwise attempt to defraud anyone. The account would > simply be cheaper than one that was advertised as full bandwidth. This > account would be put out there so that *everyone* would know what they were > buying 320K down with a 16K CIR up but burstable to 128. Sorry for the > confusion- > > Bob- > > PS Why does everyone think poeple are trying to 'rip" off customers? you > will not stay in business or in your job long if you do that. > > ________________________________________________________________________ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > Some of the oldest ISPs on the planet have been doing it for years. It's called oversubscribing. 288 ISDN ports at a POP being fed with 3 DS1's into the WAN. They're selling "business" accounts with a CIR of 128K. We've run into it twice on WAN connections into supposed Tier-1's. It's sad when you have more connectivity into them than they have to the world (at least at your peering point).. --- John Fraizer EnterZone, Inc

1 0

Re: [Fwd: 07/12/00 Internet Routing Problems]
by John Fraizer 13 Jul '00

13 Jul '00

It scared the hell out of me too. Now the pinko's have gotten to Merit and CIADA. Time to start swinging the "Bright Platinum Baseball Bat of Truth" again... --- John Fraizer EnterZone, Inc On Thu, 13 Jul 2000, Rick Irving wrote: > > And suddenly, I woke up. > > :) > > -------- Original Message -------- > Subject: 07/12/00 Internet Routing Problems > Date: Thu, 13 Jul 2000 10:22:11 -0400 (EDT) > From: stats(a)merit.edu > To: routing-problems(a)merit.edu > > See http://www.merit.edu/ipma for a more detailed report on > routing problems and recommendations on ways service providers can > limit the spread of invalid routing information. > Send comments and questions to ipma(a)merit.edu > > To unsubscribe from this list, send mail to > routing-problems-request(a)merit.edu. > A hypermail archive is available at > http://www.merit.net/mail.archives/html/routing-problems/ > > Also see http://www.caida.org for more information about Internet > statistics > collection research efforts. > > Reserved Network and Host Announcements > --------------------------------------- > No routing problems were detected >

1 0

DNS for interfaces & PPPoE Time Burst
by Bob Biver 13 Jul '00

13 Jul '00

Greetings- Two things - Is there a standard for the DNS hostnames of router interfaces (i.e. PtP.origin.destination.bandwidth.layer2.domain) and Is anyone doing traffic shaping on PPPoE circuits so that you can set a variable burst over time? The goal would be to make it commercially invalid to run a 'web' or other server on the end of a 'residential' grade xDSL circuit. Filtering is not an option seeing as everyone wants their personal web server and dialpad to work. But if after 30 seconds of burst to 320K up I shape that PPPoE circuit down to 16K, you wont want to host your Mp3 server. Ideas? Thanks Bob- ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

2 1

MAE-West repair time line
by Sean Donelan 13 Jul '00

13 Jul '00

I hope Worldcom's official spokesperson will provide more details, I didn't find any official statements on any of the various Worldcom web sites checked. Here is what I know so far. July 10 2000 6am Folks started reporting problems with peering at MAE-West. July 10 2000 3pm MFS(Worldcom) notified customers it had found a problem with the gigaswitch. They scheduled an overnight maintenance window. July 11 2000 MFS(Worldcom) notified customers the maintenance did not correct the problem. They will replace a suspected bad SCP card overnight. July 12 2000 MFS(Worldcom) notified customers the maintenance did not take place as scheduled. They will try again tonight. Several ISPs report they have turned off their peering across the MAE-West Gigaswitch infrastructure until Worldcom repairs the problem. Most ISPs report the traffic is taking alternate routes with only slight affect on customers' traffic.

1 0

MD5 in BGP4
by HANSEN CHAN 13 Jul '00

13 Jul '00

Hi folks, I understand that MD5 is quite commonly used in IGP such as OSPF but not in BGP4. Am I correct? Can someone explain to me why? Shouldn't one be more concerned the session being hijacked when talking to another network? Thanks, Hansen

6 6

Re: MD5 in BGP4
by Danny McPherson 13 Jul '00

13 Jul '00

> It's is a kind of useless things. If you allow spoofing., > you are voluranable to the DoS attacks against BGP; if you > are not, no need to use MD5 for BGP. Actually, I can think of more than a few configurations where this isn't true. For example, shared-media exchange points where multiple networks reside on a single segment and eBGP peer using the address of the segment. The IP network number is associated only with the interface, there's no individual hardware/IP address relationship relative to anti-spoofing here. > And DoS attack is the reality, not BGP spoofings (may be > you know any such case? I do not know any). Agreed, it's purpose is more so to protect against DoS type stuff at the TCP layer. > For IS-IS and OSPF, just other matter. They are working > over the LAN, and customers and internal users are often > plugged into this network. So, authentication is necessary > to prevent both errors and intrusions (and the anty-error > measures are much more inmportant in such networks). However, I think we'd both agree that a configuration such as this (IGP being enabled on customer facing interfaces) is ill-advised. > Just again, I know a lot of cases when IGP was broken > by error (someone installed new server and turned OSPF > on), but I does not know any attacks of this kind (but > I believe there are such cases for IGP protocols). Throgh, > to defent against such attacks originated from IGP, you > need a lot of things be used (non Redirect, static ARYP, > etc etc). Agreed. -danny

1 0

Re: MAE West down?
by Sean Donelan 13 Jul '00

13 Jul '00

On Wed, 12 July 2000, Jon Mansey wrote: > "Due to a hardware misconfiguration, the entire MAE West peering point is > down to all users. This includes all ISPs and all networks who peer at that > NAP. Please be assured that MFS is doing their utmost to repair their > problem." MAE-West has been troubled for the last few days. MFS (Oh, I mean Worldcom) is replacing one of the core gigaswitch SCP cards tonight (est. midnight PDT). I did not hear about any misconfiguration or procedural errors.

1 0

MAE West down?
by Jon Mansey 13 Jul '00

13 Jul '00

Any truth in this? "Due to a hardware misconfiguration, the entire MAE West peering point is down to all users. This includes all ISPs and all networks who peer at that NAP. Please be assured that MFS is doing their utmost to repair their problem."

5 4