- NANOG - lists.nanog.org

Re: "Defensive" BGP hijacking?
by Scott Weeks 20 Sep '16

20 Sep '16

--- dougm.work(a)gmail.com wrote: From: Doug Montgomery <dougm.work(a)gmail.com> If only there were a global system, with consistent and verifiable security properties, to permit address holders to declare the set of AS's authorized to announce their prefixes, and routers anywhere on the Internet to independently verify the corresponding validity of received announcements. *cough https://www.nanog.org/meetings/abstract?id=2846 cough* ------------------------------------------------ Yes, RPKI. That's what I was waiting for. Now we can get to a real discussion... ;-) scott

8 15

Customers announcing communities to SP of SP
by Jason Lixfeld 20 Sep '16

20 Sep '16

Hi, Consider the following scenario: - Customer A is a customer of SP A - SP A is a customer of SP B - SP B has a traffic engineering community implementation With regards to using BGP communities for TE: - Does SP A write their own community implementation that maps to (some portion of) the community implementation of SP B? - Does SP A write their own community implementation that has no mappings at all to the community implementation of SP B; any TE that is required to be pushed to SP B is done by some dialog and coordination between Customer A and SP A? - Does SP A allow Customer A to announce prefixes tagged with SP B’s communities[1][2] - Is this sort of thing really complicated today, but one of the goals of draft-heitz-idr-large-community? [1] Customer A has knowledge of SP A’s upstream SP B [2] This opens up a can of worms where SP A or SP B implements some communities prefixed with reserved ASes, so we’ll assume that SP A implements some method of allowing communities prefixed with ASes of SP A and SP B only. Thanks!

4 3

ATT contact about BGP leak
by Fabien V. 19 Sep '16

19 Sep '16

Hi the list =) Someone from AT&T on the list ? We have a potential BGP leak on a recently transfered /16 Sent email to noc @ but no reply since 6 hours. Perhaps someone can contact me directly ? fabien AT beufa DOT net Thanks ----- Fabien VINCENT ------------------------------------------------------------------- Twitter : @beufanet Website : https://beufa.net

1 0

Ebay operations contact please
by Inglis, Adam 19 Sep '16

19 Sep '16

Can someone from ebay NOC (or similar) contact me off list for an issue with search results from a specific CIDR of our network that the end user swears doesn't happen elsewhere? Thanks. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender or send back to returns(a)agoc.com and delete the material from any computer.

1 0

Huawei NE
by Lewis,Mitchell T. 19 Sep '16

19 Sep '16

Hi All, Does anyone have any experiences with the Huawei NE platform in a service provider environment they can share? Private message is fine. I am comparing against Cisco ASR & Juniper MX. Regards, Mitchell T. Lewis MLewis(a)TechCompute.Net |203-816-0371 PGP Fingerprint: 79F2A12BAC77827581C734212AFA805732A1394E Public PGP Key

1 0

Re: PlayStationNetwork blocking of CGNAT public addresses
by Larry Sheldon 18 Sep '16

18 Sep '16

On 9/18/2016 16:26, Larry Sheldon wrote: > > > On 9/18/2016 08:19, Mike Hammett wrote: >> People love to hate incumbent telcos because of their arrogance (and >> frankly it's deserved), but people forget that big content can be >> just as arrogant and just as deserving of hatred. > > I never did see the benefit or the approach. To anybody. > I never did see the benefit oF the approach. To anybody. -- "Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid." --Albert Einstein From Larry's Cox account.

1 0

Re: PlayStationNetwork blocking of CGNAT public addresses
by Larry Sheldon 18 Sep '16

18 Sep '16

On 9/18/2016 08:19, Mike Hammett wrote: > People love to hate incumbent telcos because of their arrogance (and > frankly it's deserved), but people forget that big content can be > just as arrogant and just as deserving of hatred. I never did see the benefit or the approach. To anybody. -- "Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid." --Albert Einstein From Larry's Cox account.

1 0

Re: One more thing to watch out for at data centers - fire drills
by Larry Sheldon 18 Sep '16

18 Sep '16

On 9/17/2016 07:39, Suresh Ramasubramanian wrote: > http://motherboard.vice.com/read/a-loud-sound-just-shut-down-a-banks-data-c… > > Releasing inert gas from fire suppression units that were over > pressurized resulted in an extremely loud noise My experience is only with in-specification systems (and only in tape libraries) but those tests were pretty loud. – causing cabinets > full of hard drives to vibrate – which got transmitted to the read – > write heads of the drives. My experiences were back in the days of washing-machine class disc drives and they were a 4-hour fire-wall away, but I don't remember them being impacted. (I can't believe that I was allowed to conduct a test with them running, but I don't remember shutting them down.) I wonder if orientation mattered--mine were all platters parallel to the floor, I wonder if the damaged ones were parallel to the wave front. > full of hard drives to vibrate – which got transmitted to the read – > write heads of the drives. > > Amazing sort of outage + data loss, and this time the physical > security plant chief gets to write up the RCA. -- "Everybody is a genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is stupid." --Albert Einstein From Larry's Cox account.

2 1

Re: "Defensive" BGP hijacking?
by Sean Rose 17 Sep '16

17 Sep '16

I know Bryant Townsend (ex staminus employee), Marshal Webb (aka m_nerva, lulzsec informant) and others from backconnect.net performed a similar BGP hijacking against staminus earlier this year. https://bgpstream.com/event/21051 Shortly afterwards, on 10th of march a zine is released leaking the Staminus user database and contents of several customer servers. The times aren't the only interesting factor here, even the format of the release just screams m_nerva. Zines are very rare these days. So rare in fact that the last similar zine before the staminus hack was released in 2013 by HTP, a hacker group m_nerva was loosely affiliated with during it's early days. I *strongly* believe Bryant Townsend and Marshal Webb hacked Staminus and produced the "Fuck 'em all." zine Sean Rose

1 1

Re: One more thing to watch out for at data centers - fire drills
by hcb＠netcases.net 17 Sep '16

17 Sep '16

On 2016-09-17 08:39, Suresh Ramasubramanian wrote: > http://motherboard.vice.com/read/a-loud-sound-just-shut-down-a-banks-data-c… > > Releasing inert gas from fire suppression units that were over > pressurized resulted in an extremely loud noise – causing cabinets > full of hard drives to vibrate – which got transmitted to the read – > write heads of the drives. > > Amazing sort of outage + data loss, and this time the physical > security plant chief gets to write up the RCA. > > --srs Another unexpected result when we had an all-out Halon test: thick fog, apparently from cold gas and somewhat humid air. I'm glad to have been watching through windows. Visibility in the room dropped to zero.

2 1