- Test - lists.nanog.org

[NANOG-announce] Program Committee appointments
by Ryan Donnelly 01 Mar '18

01 Mar '18

*Greetings, fellow NANOG enthusiasts,I’m pleased to announce that the board has appointed 11 individuals to the Program Committee. As always, making these appointments is an exercise in difficult choices; and these appointments were made especially challenging by this cycle’s 18 highly-qualified applicants.We are, at our core, a volunteer organization. It is through the interest and commitment of volunteers like these that we are able to deliver the exceptional program quality expected by our members, attendees and sponsors. We’d like to thank each of the 18 individuals that applied, and for those not selected, we would be delighted to entertain your candidacy during the next appointment cycle.The 11 members appointed to the Program Committee are:Vincent Celindro, Michaela Clifford, Michael Costello, Philippe Couture, Tom Kacprzynski, Ognian Mitev, Chris Pennisi, Steven Schechter, Benson Schliesser, Edward Winstead, Chris WoodfieldPlease join me in congratulating them.We’d also like to thank and recognize the contributions of Kevin Blumberg, Anna Claiborne, Allison Feese-Strickland, Steve Plote, Dani Roisman, Michael K. Smith, and Jesse Sowell for their service on the Program Committee.In the coming weeks, the new Program Committee will hold its first meeting and select a chair and a vice chair.I know I speak for the rest of the board when I say that we can’t wait to experience the output of our new PC in Denver for NANOG 73.See you in June!Best Regards,--ryan(for the NANOG Board of Directors)* _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Removing the four stale TAL from the APNIC RPKI validation set.
by George Michaelson 01 Mar '18

01 Mar '18

Updating RPKI trust anchor configuration ------------------------------------------------------- APNIC has completed the process of transitioning from its previous Resource Public Key Infrastructure (RPKI) trust anchor arrangement to a new single trust anchor configuration. Each RIR will publish an 'all resources' global trust anchor, under which its own regional resources (IP addresses and ASNs) will be certified. APNICs trust anchor is one of the previous five, which has been retained as the sole trust anchor over all APNIC resource certificate products. If you are using relying-party software, such as the Dragon Research Labs RPKI Toolkit, RPSTIR or the RIPE NCC’s RPKI Validator, you are advised to update your software’s configuration to use only the current APNIC trust anchor, rather than the set of five APNIC trust anchors that were previously in use. The update is to remove four of the five: One has been retained as the current live Trust Anchor. Note: this update is not critical. However, if it is not done, the software will log or report warnings about being unable to retrieve the trust anchors that are no longer being used. All resources now validate under the single active trust anchor and no orphan products are valid under the other prior trust anchors. The current APNIC TAL is as follows: ------ rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 qH2ETVIL01ilxZlzIL9JYSORMN5Cmtf8V2JblIealSqgOTGjvSjEsiV73s67zYQI 7C/iSOb96uf3/s86NqbxDiFQGN8qG7RNcdgVuUlAidl8WxvLNI8VhqbAB5uSg/Mr LeSOvXRja041VptAxIhcGzDMvlAJRwkrYK/Mo8P4E2rSQgwqCgae0ebY1CsJ3Cjf i67C1nw7oXqJJovvXJ4apGmEv8az23OLC6Ki54Ul/E6xk227BFttqFV3YMtKx42H cCcDVZZy01n7JjzvO8ccaXmHIgR7utnqhBRNNq5Xc5ZhbkrUsNtiJmrZzVlgU6Ou 0wIDAQAB ------ Configuring Relying Party Software ----------------------------------------------- RIPE NCC RPKI Validator: If you upgrade to RIPE validator rpki-validator-app-2.24 the correct Trust Anchor is configured. No further work is required. Dragon Research Labs Rcynic Validator: If you run rcynic, you need to remove all the TAL, TA or CER entries in rcynic.conf except ones which point to apnic-rpki-root-iana-origin.cer or the related TAL. If you use the trusted-certs/ directory, simply remove the four files which are named for the non-APNIC RIR as follows: cd /etc/trust-anchors # or wherever you place the TAL files rm apnic-rpki-root-ripe-origin.tal rm apnic-rpki-root-arin-origin.tal rm apnic-rpki-root-lacnic-origin.tal rm apnic-rpki-root-afrinic-origin.tal RPSTIR To modify an installed RPSTIR system, locate the /usr/local/etc/rpstir directory and remove all but the current live APNIC TAL. More information is in the attached PDF describing how to update the trust anchor configuration in these three popular relying-partner software systems. -George

2 1

ALTDB maintainer creation
by Jacob Slater 28 Feb '18

28 Feb '18

Hello all, Any chance anyone has a contact for any of the ALTDB admins? I put in a maintainer creation request several months ago and haven't heard back. Working with an upstream who will only take ALTDB or LOAs and would like to avoid having to due LOAs in the future. Thanks all, Jacob Slater

1 0

Re: MSFT reverse IP failure?
by Ken Chase 28 Feb '18

28 Feb '18

Having a client doing a test from the MSFT exchange tools site, which is failing. NOQUEUE: reject: RCPT from unknown[13.67.59.89]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [13.67.59.89]; NetRange: 13.64.0.0 - 13.107.255.255 CIDR: 13.96.0.0/13, 13.104.0.0/14, 13.64.0.0/11 NetName: MSFT A bit of an oversight? /kc -- Ken Chase - math(a)sizone.org Guelph Canada

6 8

TEKTONIC CONTACT
by Matt Hoppes 28 Feb '18

28 Feb '18

Could someone from Tektonic VPS please contact me off list about routing issues?

1 0

Re: Re: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks
by Brian Kantor 28 Feb '18

28 Feb '18

It seems to me that since peer pressure hasn't worked, it's time to resort to legal means. Have a talk with your own organization's lawyers, explain to them how much time and money those folks are costing your organization, and see if there isn't something you can do in the way of billing for the time, small claims court, stern letters from your lawyers to their legal department, criminal illegal-computer-access complaints, etc. - Brian

1 0

cgnat - how do you handle customer issues
by Aaron Gould 28 Feb '18

28 Feb '18

Couple questions please. When you put thousands of customers behind a cgnat boundary, how do you all handle customer complaints about the following. 1 - for external connectivity to the customers premise devices, not being able to access web servers, web cameras, etc, in their premises? 2 - from the premise natted device, when customers go to a university or bank web site, how do you handle randomly changing ip addresses/ports that may occur due to idle time and session tear-down in nat table such that the bank website has issues with seeing your session ip change? -Aaron

6 7

Craigslist Blocks
by Chris Gross 27 Feb '18

27 Feb '18

Is there anyone from Craigslist here or anyone have a better way to deal with their blocks? There's a contact e-mail in the block messages when trying to visit, but there's never gets a response back when we try it. Please hit me up off list.

5 5

ProofPoint Contact
by Matt Hoppes 27 Feb '18

27 Feb '18

Could a proofpoint e-mail blacklist contact please contact me? We are trying to get a blacklist resolved and can't get ahold of anyone.

2 1

cogent last night
by Aaron Gould 26 Feb '18

26 Feb '18

Did anyone in San Antonio or surrounding areas have internet issues last night around ~8:00 - 8:30 p.m. central time ? I saw a significant drop in traffic during that time with packet loss seen on ping attempts. Just wanted to know if I was the only one that took a hit -Aaron

2 2