- NANOG - lists.nanog.org

ECN, DNS and Firewalls
by Mark Andrews 28 Dec '18

28 Dec '18

There are major operators that still have STUPID firewall settings in front of DNS servers that drop SYN packets with ECE and CWR set 17 years after ECN was specified. Do you really want to add a second to EVERY DNS lookup that needs to use TCP? Modern OS actually attempt to use ECN by default. DNS is time critical enough without introducing unnecessary delays. If you have signed zones then TCP requests are almost certainly being made to your servers. EVERYONE TEST YOUR SERVERS FROM OUTSIDE YOUR NETWORK AND FIX THE BROKEN FIREWALLS THAT ARE FOUND. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

2 2

CenturyLink
by Naslund, Steve 27 Dec '18

27 Dec '18

Anyone have any insight to the nationwide CenturyLink issues/outages today? Just wondering. Know for sure that our connections to them from Florida, Iowa, and Washington State are all affected. Voice and data. Steven Naslund Chicago IL

4 3

Hulu Location issues - Altering IP Locations per Subnet
by Mark Spring 27 Dec '18

27 Dec '18

Does anybody have any advise on how to adjust the location for subnet ranges with Arin allocations? We have customers across a somewhat diverse area and Hulu is rejecting some of their requests saying they are essentially in another market for local channels. If anybody has dealt with this and came up with another solution, I am open to suggestions at this point! Thank you, Mark Spring Information Systems Manager -- NKTelco 301 W. South St.New Knoxville, OH 45871 Phone: 1-888-NKTELCO Fax: 419-753-2950 This message and the file(s) attached are confidential and proprietary information of NKTelco for the sole use of the intended recipient. Any unauthorized review, distribution, disclosure, copying, use, or dissemination, either whole or in part, is strictly prohibited. Do not transmit these documents, in any form, to any third party without the expressed written permission of NKTelco.

2 1

rfd
by Randy Bush 27 Dec '18

27 Dec '18

do you have rfd on? with what parms? randy

10 15

Comcast's business internet support
by Masood Ahmad Shah 27 Dec '18

27 Dec '18

Hi there - If someone from Comcast who is smarter than their business support team could contact me off list, that would be great. There appears to be very high consistent packet loss for last 3 to 4 days and that is affecting my internet, You business support team keep insisting on sending an onsite tech. I explained that I don't believe that will resolve this issue (There is no evidence of an issue with the lines or signal levels) and it's a packet loss inside Comcast network, most likely aggregation/backhaul. Thanks in advance. Cheers, Masood

3 4

RE: routeviews.org pending delete
by Eric Smith 26 Dec '18

26 Dec '18

Hey folks, Thanks for the heads-up, we've already been working through this with Network Solutions. The project has switched stewards recently and the renewal notification got lost in the transition. The NS records should point back to the correct routeviews.org address now. We're also working through the permanent transfer of ownership to avoid this in the future. Eric -------- Forwarded Message -------- Subject: RE: routeviews.org pending delete Date: Thu, 20 Dec 2018 17:29:03 +0000 From: David Guo via NANOG <nanog(a)nanog.org> Reply-To: David Guo <david(a)xtom.com> To: Siyuan Miao <aveline(a)misaka.io>, nanog(a)nanog.org <nanog(a)nanog.org> It’s your cache resule root@server ~ # whois routeviews.org Domain Name: ROUTEVIEWS.ORG Registry Domain ID: D48496876-LROR Registrar WHOIS Server: whois.networksolutions.com Registrar URL: http://www.networksolutions.com Updated Date: 2018-12-17T18:54:32Z Creation Date: 2000-12-14T23:05:47Z Registry Expiry Date: 2019-12-14T23:05:47Z Registrar Registration Expiration Date: Registrar: Network Solutions, LLC Registrar IANA ID: 2 Registrar Abuse Contact Email: abuse(a)web.com Registrar Abuse Contact Phone: +1.8003337680 Reseller: Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: autoRenewPeriod https://icann.org/epp#autoRenewPeriod Registrant Organization: Registrant State/Province: OR Registrant Country: US Name Server: GUELAH.SHRUBBERY.NET Name Server: PHLOEM.UOREGON.EDU DNSSEC: unsigned From: NANOG <nanog-bounces(a)nanog.org> On Behalf Of Siyuan Miao Sent: Monday, December 17, 2018 8:34 PM To: nanog(a)nanog.org Subject: routeviews.org pending delete All, routeviews.org is pending delete now. Domain Name: ROUTEVIEWS.ORG Registry Domain ID: D48496876-LROR Registrar WHOIS Server: whois.networksolutions.com Registrar URL: http://www.networksolutions.com Updated Date: 2018-12-17T09:33:18Z Creation Date: 2000-12-14T23:05:47Z Registry Expiry Date: 2019-12-14T23:05:47Z Registrar Registration Expiration Date: Registrar: Network Solutions, LLC Registrar IANA ID: 2 Registrar Abuse Contact Email: abuse(a)web.com Registrar Abuse Contact Phone: +1.8003337680 Reseller: Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: autoRenewPeriod https://icann.org/epp#autoRenewPeriod Registrant Organization: Network Solutions LLC Registrant State/Province: FL Registrant Country: US Name Server: NS1.PENDINGRENEWALDELETION.COM Name Server: NS2.PENDINGRENEWALDELETION.COM DNSSEC: unsigned URL of the ICANN Whois Inaccuracy Complaint Form https://www.icann.org/wicf/) >>> Last update of WHOIS database: 2018-12-17T12:28:37Z <<< routeviews.org. 86400 IN NS ns2.pendingrenewaldeletion.com. routeviews.org. 86400 IN NS ns1.pendingrenewaldeletion.com. I was wondering if there is anyone here can contact them to renew it if this project is still alive. Regards, Siyuan

2 2

Stupid Question maybe?
by Joe 26 Dec '18

26 Dec '18

Apologizes in advance for a simple question. I am finding conflicting definitions of Class networks. I was always under the impression that a class "A" network was a /8 a class "B" network was a /16 and a class "C" network was a /24. Recently, I was made aware that a class "A" was indeed a /8 and a class "B" was actually a /12 (172.16/172.31.255.255) while a class "C" is actually a /16. Is this different depending on the IP segment, i.e. if it is part of a RC1918 group it is classed differently (maybe a course I missed?) Or aren't all IP's classed the same. I was always under the impression, /8 = A, /16 = B, /24=C, so rightly, or wrongly I've always seen 10.x.x.x as "A", and 192.168.x.x as "B", with 172.16/12 as one that just a VLSM between the two. Again, apologizes for the simple question, just can't seem to find a solid answer. Happy holidays all the same! -Joe

26 45

Real-time BGP hijacking detection: ARTEMIS-1.0.0 just released
by Vasileios Kotronis 22 Dec '18

22 Dec '18

Dear operators, FORTH's INSPIRE group and CAIDA are delighted to announce the public release of the ARTEMIS BGP prefix hijacking detection tool, available as open-source software at https://github.com/FORTH-ICS-INSPIRE/artemis ARTEMIS is designed to be operated by an AS in order to monitor BGP for potential hijacking attempts against its own prefixes. The system detects such attacks within seconds, enabling immediate mitigation. The current release has been tested at a major greek ISP, a dual-homed edge academic network, and a major US R&E backbone network. We would be happy if you'd give it a try and provide feedback. Feel free to make pull requests on GitHub and help us make this a true community project. ARTEMIS is funded by European Research Council (ERC) grant agreement no. 338402 (NetVolution Project), the RIPE NCC Community Projects 2017, the Comcast Innovation Fund, US NSF grants OAC-1848641 and CNS-1423659 and US DHS S&T contract HHSP233201600012C. Best regards, Vasileios -- ======================================= Vasileios Kotronis Postdoctoral Researcher, member of the INSPIRE Group INSPIRE = INternet Security, Privacy, and Intelligence REsearch Telecommunications and Networks Lab (TNL) Foundation for Research and Technology - Hellas (FORTH) Leoforos Plastira 100, Heraklion 70013, Greece e-mail : vkotronis(a)ics.forth.gr url: http://inspire.edu.gr =======================================

5 6

Network instability 12956 <=> 18881
by Jared Mauch 21 Dec '18

21 Dec '18

Does anyone know what’s going on here? There’s a lot of BGP churn coming from this network edge. - Jared

2 2

contact from 7029
by Ricardo Patara 21 Dec '18

21 Dec '18

Any contact from asn 7029 in the list? It seems there is incorrect announcement being originated in that ASN. If anyone from that ASN in the list, fell free to contact me privately. thanks

1 0