- NANOG - lists.nanog.org

WCCP talk..
by alex＠nac.net 12 Nov '98

12 Nov '98

Unfortunately, stage fright prevents me from asking this question on the NANOG meeting floor. My understanding of WCCP is that the server is responsible to tell the WCCP-enabled Cisco router that, "Hey, I'm alive to recieve port 80 requests!" My question is, what prevents a cache from seding a WCCP frame saying, "Hey, I'm alive" when it really isn't? Is there a way for the router to check the cache in the opposite direction? Seems odd that your would rely on the cache to verify that the cache is OK. -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP; we have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

6 14

ANS routing problems?
by Aleksi.Suhonen＠saunalahti.fi 11 Nov '98

11 Nov '98

Hello, We are having routing problems with ANS. They are not accepting our routes from AS3561. They were excepting them just fine about a week ago, but around last week end our routes dissappeared from their AS. Current status, with AT&T as an example of a working routing status: route-views.oregon-ix.net>sh ip b r ^1673_.+_6667 route-views.oregon-ix.net>sh ip b r ^7018_.+_6667 BGP table version is 4987768, local router ID is 198.32.162.100 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path * 195.74.0.0/19 12.127.0.249 0 7018 3561 5556 6667 i * 195.197.0.0/16 12.127.0.249 0 7018 3561 5556 6667 i * 195.218.64.0/19 12.127.0.249 0 7018 3561 5556 6667 i * 195.238.192.0/19 12.127.0.249 0 7018 3561 5556 6667 i Since all their NS and MX records are within their own network, contacting them is rather impossible, so I turn to the NANO group for helpful hints on how to resolve the problem. -- Aleksi Suhonen Network Development Saunalahden Serveri Oy AXU-RIPE

2 1

[fjk].gtld-servers.net bogus for .com
by Marc Slemko 11 Nov '98

11 Nov '98

[fjk].gtld-servers.net (which are listed as authoritative for .com) are giving bogus authoritative nxdomain results for all the .com domains I tried. eg. ; <<>> DiG 2.2 <<>> internic.com @f.gtld-servers.net ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10 ;; flags: qr aa rd; Ques: 1, Ans: 0, Auth: 1, Addit: 0 ;; QUESTIONS: ;; internic.com, type = A, class = IN ;; AUTHORITY RECORDS: COM. 86400 SOA A.ROOT-SERVERS.NET. hostmaster.INTERNIC.NET. ( 1998111000 ; serial 1800 ; refresh (30 mins) 900 ; retry (15 mins) 604800 ; expire (7 days) 86400 ) ; minimum (1 day) ;; Total query time: 67 msec ;; FROM: valis.worldgate.com to SERVER: f.gtld-servers.net 207.159.77.18 ;; WHEN: Wed Nov 11 11:17:16 1998 ;; MSG SIZE sent: 30 rcvd: 107 f.root-servers.net is giving non-authoritative "sorry, I don't do that, here are the nameservers for .com" responses. I have sent mail to the InterNIC, but just in case you were wondering why you are seeing what you may be seeing. Symptoms of this problem are being told by your resolver that various domains do not exist once in a while.

9 11

Re: [fjk].gtld-servers.net bogus for .com
by Dean Robb 11 Nov '98

11 Nov '98

At 15:36 11/11/98 -0600, you wrote: > >Fixed on the next daily update? So when the AOL problem happened, a special >update was done, but when several hundred (anyone know how many really) >entries are trashed, we all must wait until the next daily update? Another Public Relations/Customer Service triumph for NSI/InterNIC. </sarcasm> I suspect more than just the fjk servers are hosed...last night around midnight I was surfing and had over ten sites disappear between one load and the next. The domain names ran the gamut from "f" to "u". Given the time frames, they likely disappeared as the update propagated. Now, either a whole lot of sites simultaneously had server crashes or.... Spammers should be investigated by Ken Starr! Dean Robb PC-EASY computer services (757) 495-EASY [3279]

1 0

Re: QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by Paul Vixie 11 Nov '98

11 Nov '98

> f.root-servers.net is FTP'ing its COM zone even as we speak. AXFR to > a.root-servers.net is giving wierd results. i'll be fetching the zone > manually until we find the smoking gun. btw, i've taken F offline while the FTP happens. though the response f.root-servers.net was sending back (an upward delegation) was just a "lame server" and would not have caused errors, whereas the error that f.gtld-servers.net was sending this morning would have caused false negatives (bounced mail, etc). -- Paul Vixie <paul(a)vix.com>

1 0

Re: QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by Paul Vixie 11 Nov '98

11 Nov '98

> > Many thanks to my friend & cow-orker Tristan Horn for this > > idea...in BIND 8 you can define servers as bogus (meaning > > "don't ever trust these") as follows: > > > > // [fjkl].root-servers.net > > server 192.5.5.241 { bogus yes; }; > > server 198.41.0.10 { bogus yes; }; > > server 193.0.14.129 { bogus yes; }; > > server 198.32.64.12 { bogus yes; }; i recommend against that. > Note that f.gtld-servers.net was the long-running one giving real > problems. [fjk].gtld-servers.net were the ones I saw giving false > nxdomains at ~1000 pdt, [jk] were fixed by ~1030 and f was taken down > ~1200. Two hours! Sheesh. indeed. > It appears to be fixed now. f.gtld-servers.net is down, a few others are > giving referals to the .com nameservers (still "broken", but doesn't break > things the same). right. > By fixed, I mean you shouldn't see false nxdomains and things should all > resolve fine. f.root-servers.net is FTP'ing its COM zone even as we speak. AXFR to a.root-servers.net is giving wierd results. i'll be fetching the zone manually until we find the smoking gun. -- Paul Vixie <paul(a)vix.com>

1 0

NameServer Monitoring System
by joe＠vpop.net 11 Nov '98

11 Nov '98

Howdy folks, I am looking for BETA testers for our "NameServer Monitoring System". (no this does not check the roots to see if they are operational ;-) ) Basically, it watches the roots for changes to the nameservers you monitor and emails you those changes on a daily basis. A sample output is at: http://www.domainwatch.com/monitor/example.html You can monitor up to 10 nameservers. Anyways, if you're interested, do the form bit at: http://www.domainwatch.com/monitor/ and we'll get the instructions out to you. Send bug reports, flames and kudos to admin(a)domainwatch.com Thanks, -joe -- NewsHub: http://www.NewsHub.com/tech/ | DomainSurfer: http://www.DomainSurfer.com/ | Explore Your Net! MultiTrace: http://www.MultiTrace.com/ |

1 0

QUICKER FIX Re: [fjk].gtld-servers.net bogus for .com
by J.D. Falk 11 Nov '98

11 Nov '98

Many thanks to my friend & cow-orker Tristan Horn for this idea...in BIND 8 you can define servers as bogus (meaning "don't ever trust these") as follows: // [fjkl].root-servers.net server 192.5.5.241 { bogus yes; }; server 198.41.0.10 { bogus yes; }; server 193.0.14.129 { bogus yes; }; server 198.32.64.12 { bogus yes; }; -- J.D. Falk <jdfalk(a)cp.net> "A name indicates what we seek. Special Agent In Charge (Abuse Issues) An address indicates where it is. Critical Path, Inc. A route indicates how we get there." -- Jon Postel (1943-1998)

2 1

gateway failover.
by spam＠eek.org 11 Nov '98

11 Nov '98

i've a situation where the network we're building is very low-traffic, but requires maximum uptime. the budget is for all components to be duplicated to allow for failover. i've figured out various ways to do load-balancing and failover at the router/nat level, and at L2, but have run into a bit of a problem figuring how to use two solaris boxes (firewalls) as gateways for all servers/clients behind them in some kind of HA/failover configuration. i'd like to minimize the client/server side configuration as much as possible (and the environment may include NT, Macs, or other such ilk which will not easily supporting a useful routing protocol), so something like installing gated on all of the boxes, and implementing an ospf environment is an unsavory proposition. i'd like something like HSRP, but for solaris/unix, and preferably free. i'm aware of several vendor HA solutions, but they are mostly overkill for our application. i've looked into IRDP (rfc1256), but i cant find any information about vendor support. any pointers to relevant info would be appreciated, including any general resources for HA/network redundancy/failover stuff (preferably non-commercial). -foo

2 1

Cisco IOS 12.0 x 11.1CC
by Rubens Kuhl Jr. 11 Nov '98

11 Nov '98

Have anyone here upgraded a 7500 router from IOS 11.1CC to IOS 12.0 ? If you upgraded, are you happy with it ? ( ) Yes, it supports all the features I was using in 11.1CC ( ) Yes, it supports new features that I'm using now or intend to use ( ) Yes, it supports all cards and/or port adapters ( ) If you upgraded and you are you unhappy with it, why ? ( ) Because it lacks support of features I need ( ) Because it lacks support of card and/or port adapter I have ( ) Because it makes CPU go 100% ( ) Because it doesn't work at all ( ) If you have not upgraded, why ? ( ) Have no support contract, costs money ( ) Cisco told me not to do so ( ) My Cisco representative told me not to do so ( ) 11.1CC works very well, why should I risk ( ) I've seen no reason to upgrade (till last week security notice) ( ) Downtime concerns ( ) Rubens Kuhl Jr.

1 1