- NANOG - lists.nanog.org

email delays from Google
by Trey Nolen 31 Jul '19

31 Jul '19

We have been experiencing delays / failures receiving email from domains hosted by Google and *only* domains hosted by Google. This is happening to customers for whom we host the authoritative DNS servers. For some reason, Google is not able to look up the MX and/or A record *sometimes* from our servers. Customers are getting an error like this: --BEGIN DNS Error: 49391460 DNS type ‘mx’ lookup of <domain hosted with us> responded with code NOERROR 49391460 DNS type ‘aaaa’ lookup of mail.internetpro.net <http://mail.internetpro.net>. responded with code SERVFAIL 49391460 DNS type ‘a’ lookup of mail.internetpro.net <http://mail.internetpro.net>. responded with code SERVFAIL --END In the above case, Google is saying they can't find our mail server. There is no AAAA record, so that part is normal. However, we have other customers who are hosting their own mail servers or are using relay services such as Trend Micro who are also having a similar issue. The only thing these customers have in common is our DNS and the fact that Google is trying to send email to them. I can query Google's public servers at 8.8.8.8 and 8.8.4.4 and they always give the correct answers, but it seems that internally, Google is unable to make these lookups. Reaching out to their support agents online, the agents confirm that the correct entries are in place and that *some* of Google's servers can't do the resolution resulting in sporadic email delivery. They suggest that we reach out to the DNS provider to find out why (Grrr) We've also had reports from customers that the failures seem to be location oriented with western US emails being held up and eastern US emails coming through. I can't independently confirm that, though. A full 100% of the email delivery issues have been Google hosted domains. It seems that every other ISP can do the lookups just fine, but getting in touch with someone at Google who can troubleshoot this is impossible for a small ISP like us. If anyone can point me to somone at Google who could help me out, I'd be very thankful. Trey Nolen

2 1

Weekly Routing Table Report
by cscora＠apnic.net 26 Jul '19

26 Jul '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 27 Jul, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 762538 Prefixes after maximum aggregation (per Origin AS): 294776 Deaggregation factor: 2.59 Unique aggregates announced (without unneeded subnets): 368584 Total ASes present in the Internet Routing Table: 65002 Prefixes per ASN: 11.73 Origin-only ASes present in the Internet Routing Table: 55882 Origin ASes announcing only one prefix: 23956 Transit ASes present in the Internet Routing Table: 9120 Transit-only ASes present in the Internet Routing Table: 282 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 42 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 24 Number of instances of unregistered ASNs: 24 Number of 32-bit ASNs allocated by the RIRs: 28019 Number of 32-bit ASNs visible in the Routing Table: 22875 Prefixes from 32-bit ASNs in the Routing Table: 103520 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 236 Number of addresses announced to Internet: 2842092800 Equivalent to 169 /8s, 102 /16s and 229 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 253604 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 205999 Total APNIC prefixes after maximum aggregation: 61645 APNIC Deaggregation factor: 3.34 Prefixes being announced from the APNIC address blocks: 201357 Unique aggregates announced from the APNIC address blocks: 84412 APNIC Region origin ASes present in the Internet Routing Table: 9928 APNIC Prefixes per ASN: 20.28 APNIC Region origin ASes announcing only one prefix: 2741 APNIC Region transit ASes present in the Internet Routing Table: 1490 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4925 Number of APNIC addresses announced to Internet: 770811392 Equivalent to 45 /8s, 241 /16s and 166 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 226807 Total ARIN prefixes after maximum aggregation: 106000 ARIN Deaggregation factor: 2.14 Prefixes being announced from the ARIN address blocks: 225724 Unique aggregates announced from the ARIN address blocks: 107079 ARIN Region origin ASes present in the Internet Routing Table: 18529 ARIN Prefixes per ASN: 12.18 ARIN Region origin ASes announcing only one prefix: 6860 ARIN Region transit ASes present in the Internet Routing Table: 1915 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2825 Number of ARIN addresses announced to Internet: 1070904448 Equivalent to 63 /8s, 212 /16s and 180 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 210755 Total RIPE prefixes after maximum aggregation: 100036 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 207001 Unique aggregates announced from the RIPE address blocks: 123449 RIPE Region origin ASes present in the Internet Routing Table: 26286 RIPE Prefixes per ASN: 7.87 RIPE Region origin ASes announcing only one prefix: 11623 RIPE Region transit ASes present in the Internet Routing Table: 3752 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 35 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8331 Number of RIPE addresses announced to Internet: 720794240 Equivalent to 42 /8s, 246 /16s and 114 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 98293 Total LACNIC prefixes after maximum aggregation: 22726 LACNIC Deaggregation factor: 4.33 Prefixes being announced from the LACNIC address blocks: 99562 Unique aggregates announced from the LACNIC address blocks: 43931 LACNIC Region origin ASes present in the Internet Routing Table: 8657 LACNIC Prefixes per ASN: 11.50 LACNIC Region origin ASes announcing only one prefix: 2275 LACNIC Region transit ASes present in the Internet Routing Table: 1595 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 39 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6209 Number of LACNIC addresses announced to Internet: 173525248 Equivalent to 10 /8s, 87 /16s and 201 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 20659 Total AfriNIC prefixes after maximum aggregation: 4349 AfriNIC Deaggregation factor: 4.75 Prefixes being announced from the AfriNIC address blocks: 28658 Unique aggregates announced from the AfriNIC address blocks: 9501 AfriNIC Region origin ASes present in the Internet Routing Table: 1305 AfriNIC Prefixes per ASN: 21.96 AfriNIC Region origin ASes announcing only one prefix: 457 AfriNIC Region transit ASes present in the Internet Routing Table: 253 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 27 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 585 Number of AfriNIC addresses announced to Internet: 105820416 Equivalent to 6 /8s, 78 /16s and 177 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4862 591 567 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3178 1459 31 VIETEL-AS-AP Viettel Group, VN 45899 3053 1764 110 VNPT-AS-VN VNPT Corp, VN 9808 2750 9043 63 CMNET-GD Guangdong Mobile Communication 9829 2694 1489 562 BSNL-NIB National Internet Backbone, IN 4766 2542 11119 761 KIXS-AS-KR Korea Telecom, KR 7713 2226 670 591 TELKOMNET-AS-AP PT Telekomunikasi Indon 4755 2158 429 190 TATACOMM-AS TATA Communications formerl 9498 2130 430 200 BBIL-AP BHARTI Airtel Ltd., IN 9394 2072 4898 24 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3681 240 615 CABLEONE - CABLE ONE, INC., US 6327 3564 1324 90 SHAW - Shaw Communications Inc., CA 22773 3445 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 3044 6390 1430 AMAZON-02 - Amazon.com, Inc., US 16625 2627 1380 1908 AKAMAI-AS - Akamai Technologies, Inc., 30036 2163 347 245 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2151 2763 524 CHARTER-20115 - Charter Communications, 18566 2094 405 107 MEGAPATH5-US - MegaPath Corporation, US 5650 2077 3073 1452 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5507 1629 141 UNI2-AS, ES 39891 3780 219 19 ALJAWWALSTC-AS, SA 8551 3326 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2696 506 1920 AKAMAI-ASN1, US 12389 2358 2230 661 ROSTELECOM-AS, RU 34984 2115 346 547 TELLCOM-AS, TR 9009 1658 178 896 M247, GB 9121 1609 1692 18 TTNET, TR 13188 1604 100 47 TRIOLAN, UA 61317 1411 147 527 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6258 3376 592 Uninet S.A. de C.V., MX 10620 3396 536 428 Telmex Colombia S.A., CO 11830 2688 370 54 Instituto Costarricense de Electricidad 6503 1624 391 419 Axtel, S.A.B. de C.V., MX 7303 1474 1022 281 Telecom Argentina S.A., AR 28573 1152 2227 205 CLARO S.A., BR 6147 1096 377 31 Telefonica del Peru S.A.A., PE 3816 1045 526 118 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 985 480 248 Mega Cable, S.A. de C.V., MX 11172 934 112 60 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1183 393 21 LINKdotNET-AS, EG 24835 886 634 22 RAYA-AS, EG 36903 843 424 112 MT-MPLS, MA 36992 819 1532 87 ETISALAT-MISR, EG 8452 674 1859 20 TE-AS TE-AS, EG 29571 520 68 11 ORANGE-COTE-IVOIRE, CI 37492 482 470 57 ORANGE-, TN 37342 414 32 1 MOVITEL, MZ 15399 384 45 11 WANANCHI-, KE 23889 358 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6258 3376 592 Uninet S.A. de C.V., MX 12479 5507 1629 141 UNI2-AS, ES 7545 4862 591 567 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3780 219 19 ALJAWWALSTC-AS, SA 11492 3681 240 615 CABLEONE - CABLE ONE, INC., US 6327 3564 1324 90 SHAW - Shaw Communications Inc., CA 22773 3445 2974 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3396 536 428 Telmex Colombia S.A., CO 8551 3326 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5507 5366 UNI2-AS, ES 7545 4862 4295 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3780 3761 ALJAWWALSTC-AS, SA 6327 3564 3474 SHAW - Shaw Communications Inc., CA 22773 3445 3289 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3326 3280 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3178 3147 VIETEL-AS-AP Viettel Group, VN 11492 3681 3066 CABLEONE - CABLE ONE, INC., US 10620 3396 2968 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 64511 DOCUMENT 66.154.208.0/21 32522 MULTNOMAH-ESD - Multnomah Educ 64511 DOCUMENT 66.154.216.0/23 32522 MULTNOMAH-ESD - Multnomah Educ 64511 DOCUMENT 66.154.218.0/24 32522 MULTNOMAH-ESD - Multnomah Educ 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 36.255.24.0/24 40676 AS40676 - Psychz Networks, US 36.255.25.0/24 40676 AS40676 - Psychz Networks, US 36.255.26.0/24 40676 AS40676 - Psychz Networks, US 36.255.27.0/24 40676 AS40676 - Psychz Networks, US 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:100 /12:294 /13:569 /14:1130 /15:1900 /16:13257 /17:8030 /18:13913 /19:25827 /20:40388 /21:47231 /22:95528 /23:77194 /24:436220 /25:898 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4452 5507 UNI2-AS, ES 6327 3353 3564 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3780 ALJAWWALSTC-AS, SA 11492 2885 3681 CABLEONE - CABLE ONE, INC., US 8551 2779 3326 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2677 3445 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2036 2688 Instituto Costarricense de Electricidad y Telec 18566 1989 2094 MEGAPATH5-US - MegaPath Corporation, US 30036 1914 2163 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1713 2:1071 3:6 4:21 5:3086 6:47 7:1 8:1340 9:1 12:1804 13:388 14:2078 15:41 16:7 17:259 18:80 20:56 23:2827 24:2588 25:4 27:2440 31:2012 32:106 35:38 36:883 37:3103 38:1796 39:294 40:121 41:3194 42:828 43:2076 44:157 45:9145 46:3362 47:265 49:1363 50:1105 51:337 52:1010 54:273 55:676 56:6 57:47 58:1746 59:1096 60:558 61:2179 62:1970 63:1854 64:5011 65:2227 66:4823 67:2770 68:1177 69:3577 70:1384 71:659 72:2652 74:2726 75:1295 76:571 77:1802 78:1869 79:2368 80:1840 81:1497 82:1142 83:945 84:1148 85:2307 86:547 87:1537 88:1047 89:2554 90:212 91:6595 92:1442 93:2472 94:2489 95:3333 96:948 97:340 98:962 99:806 100:88 101:1186 102:589 103:21776 104:3626 105:278 106:805 107:1783 108:696 109:3790 110:1731 111:2015 112:1535 113:1399 114:1277 115:1729 116:1756 117:1948 118:2183 119:1650 120:1056 121:1063 122:2281 123:1796 124:1502 125:2028 128:1365 129:848 130:549 131:1824 132:791 133:221 134:1087 135:251 136:589 137:789 138:2095 139:896 140:614 141:890 142:781 143:1083 144:877 145:276 146:1301 147:838 148:1756 149:1001 150:784 151:1015 152:1101 153:341 154:4416 155:892 156:1755 157:1052 158:690 159:1947 160:1601 161:957 162:2974 163:829 164:1249 165:1171 166:519 167:1423 168:3483 169:480 170:4207 171:614 172:1689 173:2220 174:1040 175:989 176:2444 177:4062 178:2564 179:1394 180:2144 181:2347 182:2754 183:1106 184:2281 185:15400 186:3664 187:2510 188:2992 189:2014 190:8205 191:1461 192:10070 193:6760 194:5524 195:4178 196:3060 197:1717 198:5937 199:5978 200:7144 201:5133 202:10403 203:10244 204:4549 205:3063 206:3225 207:3256 208:3949 209:4292 210:3936 211:2027 212:3133 213:2964 214:1133 215:55 216:5911 217:2233 218:883 219:600 220:1921 221:970 222:976 223:1396 End of report

1 0

Abuse from Vodaphone AS30722
by John Von Essen 25 Jul '19

25 Jul '19

Anyone from Vodaphone on list? We are experiencing a massive DDoS from three Vodafone /16’s. The DDoS is spread throughout the entire range. 2.38.0.0/16 2.39.0.0/16 188.216.0.0/16 We’ve had to block the entire ranges just to stay online. Thanks John

2 1

Traffic visibility tools
by Kenny Taylor 24 Jul '19

24 Jul '19

Good morning, I hate to pull away from the 44/8 fire (KJ6BSQ here, and former AMPRnet user), but I'd like to get some advice from the community on traffic visibility tools.. We use a pair of appliances called Exinda for traffic shaping and visibility. The current appliances are end-of-support and the replacements are hugely expensive after GFI acquired Exinda. Traffic shaping is less of a concern now, as circuit speeds have caught up with our users, but visibility is still a big need. Those boxes do two things very well: 1) identification of FQDNs using SSL cert inspection on HTTPS traffic and 2) categorization of the traffic (i.e. Netflix, Youtube, etc.). We have Netflow monitoring using PRTG, but seeing something like 'ec2-34-214-76-39.us-west-2.compute.amazonaws.com' in Netflow logs isn't very useful. We're looking for something that could sit either inline or hang off a SPAN port, handle 5-10 Gbit of traffic, do the SSL cert FQDN identification, and preferably group results by site/subnet/category. What would you guys recommend? Thanks, Kenny Taylor WAN Engineer Kern Community College District

2 1

Re: 44/8
by Randy Bush 24 Jul '19

24 Jul '19

my deep sympathies go out to those folk with real work to do whose mail user agents do not have a `delete thread` key sequence.

3 2

CenturyLink/Level3 feedback
by Mehmet Akcin 24 Jul '19

24 Jul '19

hi there, Just a general high-level question about Centurylink/Level3 post-merger, how is your overall experience with CenturyLink? if you could be sitting with the CEO of the company what is one thing you would ask him to fix? please keep it high level and general. i intend to pass these to him and his team in an upcoming meeting. Mehmet

20 27

FCC: 2019 CSRIC Working Groups Announced - Volunteers?
by Sean Donelan 23 Jul '19

23 Jul '19

The 2019 FCC Communications Security Reliability and Interoperability Council (CSRIC) has announced their new working groups for the new cycle. CSRIC is seeking volunteers to serve on various working groups. https://docs.fcc.gov/public/attachments/DA-19-689A1.pdf Working Group 1: Alert Originator Standard Operating Procedures Chair: Craig Fugate, America’s Public Television Stations Working Group 2: Managing Security Risk in the Transition to 5G Chair: Lee Thibaudeau, Nsight. Working Group 3: Managing Security Risk in Emerging 5G Implementations Chair: Farrokh Khatibi, Qualcomm Working Group 4: 911 Security Vulnerabilities During the IP Transition Chair: Mary A. Boyd, West Safety Services Working Group 5: Improving Broadcast Resiliency Chair: Pat Roberts, Florida Association of Broadcasters Working Group 6: SIP Security Vulnerabilities Chair: Danny McPherson, Verisign

1 0

Re: 44/8
by Scott Weeks 23 Jul '19

23 Jul '19

> On Mon, Jul 22, 2019 at 4:02 PM Jerry Cloe <jerry(a)jtcloe.net> wrote: > > > There's already widespread use (abuse ?) of DOD /8's. > > T-Mobile commonly assigns 26/8 space (and others) to > > customers and nat's it. > --- cb.list6(a)gmail.com wrote: > From: Ca By <cb.list6(a)gmail.com> > > My understanding is that is not currently commonly the > case > https://www.worldipv6launch.org/apps/ipv6week/measurement/images/graphs/T-M… > --------------------------------------------------- On Mon, Jul 22, 2019 at 4:31 PM Scott Weeks <surfer(a)mauigateway.com> wrote: > Did they renumber (IPv4) out of that space? Or are > they just not continuing to expand into it? --- cb.list6(a)gmail.com wrote: From: Ca By <cb.list6(a)gmail.com> They stopped using ipv4 assigned for handsets for most cases with 464xlat <snip> -------------------------------------- Ah, OK. I didn't realize they were just using it for handsets. I thought the address space was used elsewhere. When orgs do this the ugliness of squatting sticks to the org seemingly forever like stink on sh!+ scott

1 0

Re: 44/8
by Scott Weeks 23 Jul '19

23 Jul '19

On Mon, Jul 22, 2019 at 4:02 PM Jerry Cloe <jerry(a)jtcloe.net> wrote: > There's already widespread use (abuse ?) of DOD /8's. > T-Mobile commonly assigns 26/8 space (and others) to > customers and nat's it. --- cb.list6(a)gmail.com wrote: From: Ca By <cb.list6(a)gmail.com> My understanding is that is not currently commonly the case https://www.worldipv6launch.org/apps/ipv6week/measurement/images/graphs/T-M… --------------------------------------------------- Did they renumber (IPv4) out of that space? Or are they just not continuing to expand into it? scott

2 1

RE: 44/8
by Scott Weeks 22 Jul '19

22 Jul '19

From:Michel Py <michel.py(a)tsisemi.com> As an extension of RFC1918, it would have solved the questionable and nevertheless widespread squatting of 30/8 and other un-announced DoD blocks because 10/8 is not big enough for some folks. --- jerry(a)jtcloe.net wrote: From: Jerry Cloe <jerry(a)jtcloe.net> There's already widespread use (abuse ?) of DOD /8's. T-Mobile commonly assigns 26/8 space (and others) to customers and nat's it. -------------------------------------------------- I participated in cutting Verizon Hawaii's assets into a standalone network for Hawaiian Telcom in 2005. They used 113/8 all over the place. I worked at HT for 5 years after that, left for nine years and am now back and I am STILL dealing with that crap! scott

1 0