- Test - lists.nanog.org

BGP Path Attribute Filtering, YES or NO?
by adamv0025＠netconsultings.com 08 Jan '20

08 Jan '20

Would like to gather current views of a wider community on BGP Path Attribute Filtering (discarding selected attributes in particular, not treat as withdraw) as an addition to the long list of standard conditioning tools like max as-path length limit, limiting number of communities all the way to running iBGP infrastructure to carry Internet prefixes separate to the one carrying customers' L3/L2VPN prefixes. And I appreciate the topic is somewhat contentious and there's no simple yes or no answer either. My view is that in a stub AS there should be no harm in discarding unused BGP path attributes, On transit AS-es I'd expect two opposing views: One might be: "I have a business to run and don't care about some university experiments, so unless any of my customers specifically asks for some attribute I'll drop all reserved, unassigned and deprecated ones and might even drop some not widely used ones just to be on the well-trodden bug free path" Other might be: "These experimental work is of great value to the community and there's a process now to announce and manage these experiments, what about net neutrality, and besides modern BGP implementations should handle well formatted attributes and if it's not the case its good that these flaws are being exposed and fixed." Please let me know your thoughts. adam

4 11

FCC proposes $10 Million fine for spoofed robocalls
by Sean Donelan 08 Jan '20

08 Jan '20

On Monday, U.S. FCC Chairman Pai and Canadian CRTC Chairperson Scott made the first official cross-border SHAKEN/STIR call. https://www.fcc.gov/document/pai-scott-make-first-official-cross-border-sha… Today, the U.S. FCC announced a proposed nearly $10 million fine for spoofed robocalls. https://www.fcc.gov/document/fcc-proposes-nearly-10-million-fine-spoofed-ro… A U.S. telemarketing firm spoofed the caller-id of a competitor to make approximately 47,610 political robocalls shortly before a California State Assembly primary election. I think this case is somewhat unusual for robocall spoofing, because the alleged perpetrator, victims, and 'crime scene' occured within the same jurisdiction. While the FCC likes to announce large enforcement actions in splashy press releases, its actually bad about collecting fines. The FCC must rely on the Justice Department to initiate separate prosecution to enforce payment from non-license holders because the FCC can't do that itself. So don't expect anyone to actually pay soon (or ever).

27 54

Re: FYI - Suspension of Cogent access to ARIN Whois
by John Curran 08 Jan '20

08 Jan '20

On 6 Jan 2020, at 11:43 PM, Stephen Wilcox <swilcox(a)ixreach.com<mailto:swilcox@ixreach.com>> wrote: Out of interest, what does it take to have an ARIN contract or core ARIN services revoked? Is there such a threshold, does breach of contract ever result in consequential action? This seems more like a talking point than an act with teeth to it… Steve - This action is due to misuse of ARIN’s Whois services: specifically, organizations that routinely misuse the Whois data risk losing access to the information. As I noted elsewhere, it is possible for the suspension of access to Whois to be technically circumvented, but ARIN still has to take abuse of the data seriously because our customers make their contact data available specifically for facilitating network operations, and this includes terminating or suspending access to the Whois service for those who chronically fail to comply with the terms of use, such as those who repeatedly violate the prohibition on marketing & solicitation using ARIN Whois data. It is also possible that such misuse of ARIN Whois is a violation of ARIN’s registration services agreement (which provides for more significant recourse such as resource revocation), but ARIN is simply suspending access to the Whois service as that action directly corresponds to (and helps mitigate) the specific terms of use violation. Thanks, /John John Curran President and CEO American Registry for Internet Numbers

2 1

Discussion on Post-Earthquake Power & Communications in Puerto Rico
by Yosem Companys 08 Jan '20

08 Jan '20

May be of interest, posted on the Startups of Puerto Rico Slack channel earlier today: Marcos Cruz [4:41 AM] I hope everyone is well, Noob question: Does anyone know for how long do the power plants of cell towers run on diesel? Mike Rosado:house_with_garden: [8:03 AM] I spoke with my parents in Carolina, and they have been without power since 4am [8:03 AM] Sprint towers are down, but AT&T towers are running. Mike Rosado:house_with_garden: [8:23 AM] I'm part of the volunteer team at the ITDRC and I am on the ITDRC Slack channel. We already have many volunteers in Puerto Rico. Should you need communications help, please send me a private message, and I'll forward it to them. https://itdrc.org/ (edited) M Pilar [9:24 AM] ~24h in urban zones ~48h in other zones, but if they are large towers they also have batteries that last 1-8h Ariel Zavala [9:32 AM] What ISPs are up right now? Mike Rosado:house_with_garden: [9:39 AM] Right now Liberty and WorldNet are being brought up. :+1:1 Mike Rosado:house_with_garden: [9:41 AM] Liberty in some places and not others, after that they return to ATT LTE Matt Van [10:35 AM] Optico is up :heavy_check_mark:2 Tomas Irizarry [10:48 AM] @mikerostx dude ITDRC sounds super interesting. Do you know if there is anything like a mobile datacenter where a community could set up a WAN for services/communication? Tomas Irizarry [10:48 AM] in the event private networks are down Mike Rosado:house_with_garden: [10:53 AM] replied to a thread: @mikerostx dude ITDRC sounds super interesting. Do you know if there is anything like a mobile datacenter where a community could set up a WAN for services/communication? We (ITDRC) have volunteers with boots on the ground in Puerto Rico. @Ruth Silva is one of a dozen or more people there working on these efforts. Tomas Irizarry [10:55 AM] Thats amazing. I dont know what I can contribute but I’ll join and see where I can . (edited) Mike Rosado:house_with_garden: [10:57 AM] Always plenty of ways to contribute and have corporations volunteer their employees to help those in need. :wink: Tomas Irizarry [10:57 AM] actually.. [10:57 AM] now that you bring that up [10:58 AM] we’re actually in the middle of deciding what non-profits to disburse our donation fund to [10:58 AM] let me check what the process is and I’ll put in ITDRC for discussion Mike Rosado:house_with_garden: [10:59 AM] When Maria hit :flag-pr: , I was deployed for several weeks to help out. Trust me, there's plenty to contribute and do. :wink:

2 1

Third Party OLT Optics
by Mike Hammett 07 Jan '20

07 Jan '20

What is the vendor-lock scene like in the world of OLT optics? Is it as bad as Ethernet optics? If it exists, is there actually a good reason for it (other than money)? Have any of you tried third-party optics in Zhone gear? Have any of you tried FS OLT optics in anything but ZTE and Huawei? FS says their optics only work in ZTE\Huawei, but their own customer reviews have at least one other person saying it worked fine in their Zhone device. I'm sure I'll get people saying that for something so important, one should only deploy first-party optics, regardless of the cost. Zhone's pricing isn't bad at all.... but if there's effectively no difference, then you might as well buy the cheaper one. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

3 2

Frontier help
by william manning 07 Jan '20

07 Jan '20

Could someone from Frontier give me a hand with one of your customers that appears to have a fios connection out of coresite in LA. Soon would be good. :) /William Manning 310.322.8102

1 0

Getting an ASN in ARIN
by thomas brenac 06 Jan '20

06 Jan '20

Hi, Happy new year everyone. I know ARIN is very strict with IP transfers at least from ARIN to ARIN. I know they require very detailed information. Curious if someone in the list know if they are equally strict when issuing an ASN and/or have a recent experience on the matter ? Thanks you -- Thomas BRENAC https://www.brenac.eu +33686263575 Certified IPv4 Broker by RIPE NCC, APNIC and LACNIC The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. This message has been sent as a part of discussion between BRENAC EURL and the addressee whose name is specified above. Should you receive this message by mistake, we would be most grateful if you informed us that the message has been sent to you. In this case, we also ask that you delete this message from your mailbox, and do not forward it or any part of it to anyone else. Thank you for your cooperation and understanding. We puts the security of the client at a high priority. Therefore, we have put efforts into ensuring that the message is error and virus-free. Unfortunately, full security of the email cannot be ensured as, despite our efforts, the data included in emails could be infected, intercepted, or corrupted. Therefore, the recipient should check the email for threats with proper software, as the sender does not accept liability for any damage inflicted by viewing the content of this email. The views and opinions included in this email belong to their author and do not necessarily mirror the views and opinions of the company. Our employees are obliged not to make any defamatory clauses, infringe, or authorize infringement of any legal right. Therefore, the company will not take any liability for such statements included in emails. In case of any damages or other liabilities arising, employees are fully responsible for the content of their emails.

5 4

GPS Sync Outage
by Matt Hoppes 06 Jan '20

06 Jan '20

Is anyone else seeing GPS timing source outages across the U. S. In the last two hours?

13 15

Wikipedia drops support for old Android smartphones; mandates TLSv1.2 to read
by Constantine A. Murenin 06 Jan '20

06 Jan '20

Dear all, It came to my attention that anyone visiting en.wikipedia.org site from an "old Android smartphone", as Wikipedia puts it, will be redirected to https://en.wikipedia.org/sec-warning ( http://web.archive.org/web/20191217154700/https://en.wikipedia.org/sec-warn…) which, amongst other things, reads the following: #### : 中文: 维基百科正在使网站更加安全。您正在使用旧的浏览器，这在将来无法连接维基百科。请更新您的设备或联络您的IT管理员。以下提供更长，更具技术性的更新（仅英语）。 : : We are removing support for insecure TLS protocol versions, specifically TLSv1.0 and TLSv1.1, which your browser software relies on to connect to our sites. This is usually caused by using some ancient browser or user agents like old Android smartphones. Also it could be interference from corporate or personal "Web Security" software which actually downgrades connection security. : You must upgrade your browser or otherwise fix this issue to access our sites. This message will remain until Jan 1, 2020. After that date, your browser will not be able to establish a connection to our servers at all. : See also the HTTPS Browser Recommendations page on Wikitech for more-detailed information. #### This is yet another assault on the less fortunate folk for absolutely no valid technical reason. Yet another assault on the free flow of information. Everyone should be able to access an encyclopaedia without any such restrictions; wasn't that the whole original premise behind Wikipedia in the first place? Why are they now precluding valid users from having access? What happened with the idea of following Postel's law? http://web.archive.org/web/20191212212040/https://en.wikipedia.org/wiki/Rob… If you have an old iPad device lying around, why should you be precluded from having access to an encyclopaedia? A Google search reveals that there's already iOS users receiving these messages, too. (BTW, Google Search itself still works fine over plain HTTP — FYI — as does Bing and Baidu, but not Yandex.) If anyone is aware of a tracking-free TLS-free mirror, LMK. I cannot link to Wikipedia in good conscience anymore knowing that they block folks left and right now. C.

25 41

FYI - Suspension of Cogent access to ARIN Whois
by John Curran 06 Jan '20

06 Jan '20

ARIN has repeatedly informed Cogent that their use of the ARIN Whois for solicitation is contrary to the terms of use and that they must stop. Despite ARIN’s multiple written demands to Cogent to cease these prohibited activities, ARIN has continued to receive complaints from registrants that Cogent continues to engage in these prohibited solicitation activities. For this reason, ARIN has suspended Cogent Communications’ use of ARIN’s Whois database effective today and continuing for a period of six months. For additional details please refer to https://www.arin.net/vault/about_us/corp_docs/20200106_whois_tos_violation.… ARIN will restore Cogent’s access to the Whois database at an earlier time if Cogent meets certain conditions, including instructing its sales personnel not to engage in the prohibited solicitation activities. Given the otherwise general availability of ARIN Whois, it is quite possible that Cogent personnel may evade the suspension via various means and continue their solicitation. If that does occur, please inform us (via compliance(a)arin.net<mailto:compliance@arin.net>), as ARIN is prepared to extend the suspension and/or bring appropriate legal action. FYI, /John John Curran President and CEO American Registry for Internet Numbers (By request of some readers, this is being resent as separate thread for better visibility.)

1 0