- Test - lists.nanog.org

N92 Pictures Are Ready! + N93 Call For Presentations, Talk of the Week
by Nanog News 13 Nov '24

13 Nov '24

*** Reminder: NANOG 93 Call For Presentations* ------------------------------------------------------------ *The PC is Seeking Talk Proposals for N93!* We are looking to schedule over 1,600 minutes of content for NANOG 93 - so don’t wait! We want to hear from you whether you plan to present from on the stage or as a live remote presenter. *MORE INFO* <https://nanog.org/program/call-presentations/> https://nanog.org/program/call-presentations/ *** N92 Pictures Are Ready!* ------------------------------------------------------------ *Download, Save, + Create Your own NANOG 92 Album* *A picture makes a memory last forever.* The official NANOG 92 daily photo albums are now available for viewing, downloading, and sharing. Click below to access the NANOG Flickr account and share the highlights with your network. *VIEW NOW <https://www.flickr.com/photos/nanog/albums/> * https://www.flickr.com/photos/nanog/albums/ *** Talk of the Week — What’s up with Starlink Speeds?* ------------------------------------------------------------ *Ft. Kemal Sanjta—Cisco ThousandEyes + Mike Hicks—Cisco ThousandEyes* In this study, researchers measured sustained throughput across the United States, Europe, and Australia using Starlink, the leading satellite internet provider. Their analysis reveals notable gaps between advertised speeds, Speedtest results, and actual throughput, with underlying TCP mechanisms playing a significant role in these discrepancies. *WATCH NOW* <https://www.youtube.com/watch?v=bR99OxQTRuc&list=PLO8DR5ZGla8jZuNZqoXorIMAC…> *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

Hurricane Electric ISP custom routing via BGP communities
by Edvinas Kairys 13 Nov '24

13 Nov '24

Hello, Has anyone tried to use Hurricane Electric ISP custom routing via BGP communities ? I thought that a provider with such a Tier would allow customers to influence inbound (to customer) routing using additional BGP communities. But seems they don't have free service for that, they're offering $200/mo fee per session to make the custom communities work. I'm shocked:)

13 12

Re: etiquette for replying to daily digests
by Willy Manga 13 Nov '24

13 Nov '24

Hi, On 09/11/2024 16:00, nanog-request(a)nanog.org wrote: > [...] > Hi all, > > I (and I'm sure many of you) subscribe to daily digests from NANOG to keep > things concentrated. However, there are sometimes messages in the digest > I'd like to reply to, and I don't want to be that guy who just replies to > the digest and opens an ugly new thread. > > Curious what workflow/process any of you use to do so, and what the > best/netizen-polite way is to end up with a reply that's appropriately > threaded. Do I just need to mirror the subject line? 1. I locate the relevant message I want to reply 2. Delete everything before/after or with some mail client (like Thunderbird) , I can just select the message and hit the 'reply' button. It will include only the selected text 2. Copy exactly the subject line of the relevant message I want to reply and if it doesn't yet contain a 'Re:' in front, I insert it. And that is exactly what I'm doing with this reply. I believe it's not so disruptive at least when I look at the archives [1], it's not opening a new thread. 1. https://mailman.nanog.org/pipermail/nanog/ Of course, like you I usually don't reply to messages so it's not so tedious. -- Willy Manga

6 5

etiquette for replying to daily digests
by Alex Buie 11 Nov '24

11 Nov '24

Hi all, I (and I'm sure many of you) subscribe to daily digests from NANOG to keep things concentrated. However, there are sometimes messages in the digest I'd like to reply to, and I don't want to be that guy who just replies to the digest and opens an ugly new thread. Curious what workflow/process any of you use to do so, and what the best/netizen-polite way is to end up with a reply that's appropriately threaded. Do I just need to mirror the subject line? *Alex Buie*Senior Cloud Operations Engineer 450 Century Pkwy # 100 Allen, TX 75013 <https://maps.google.com/?q=450+Century+Pkwy+STE+100+%7C+Allen,+TX+%7C+75013…> D: 469-884-0225 | www.cytracom.com

8 10

EA Game IP Geolocation
by Claire Dubois 11 Nov '24

11 Nov '24

Hi, We’ve recently received feedback from some of our customers reporting issues accessing EA games. It appears that IPs in our network are flagged or incorrectly identified in EA’s geo-location database, causing disruptions for our users. Does anyone have insight into which geo-location database Electronic Arts uses for their IP filtering or any steps to correct this issue? Thanks, *Claire Dubois* Huicast Telecom Limited www.huicast.com This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. Huicast Telecom Limited can’t take any liability and guarantee of the text of the email message and virus.

2 1

Need AS3257/GTT Network Engineer Contact
by Aaron Atac 08 Nov '24

08 Nov '24

Hi, Seeking AS3257/GTT network engineering contact. We’ve been engaging your NOCC for the last 5 hours and haven’t made progress in issue resolution. Thanks, Aaron

1 0

Spoofer Report for NANOG for Oct 2024
by CAIDA Spoofer Project 08 Nov '24

08 Nov '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2024: ASN Name Fixed-By 19126 KIZAWIRELESS 2024-10-01 55 UPENN 2024-10-02 394195 CLEARNETWORX 2024-10-16 199203 2024-10-18 14031 SCXY 2024-10-30 54600 PEGTECHINC 2024-10-31 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2024: ASN Name First-Spoofed Last-Spoofed 3356 LEVEL3 2016-03-06 2024-10-11 40676 AS40676 2016-08-29 2024-10-28 27364 ACS-INTERNET 2016-09-27 2024-10-29 20412 CLARITY-TELECOM 2016-09-30 2024-10-31 12083 WOW-INTERNET 2016-11-09 2024-10-14 23314 ORLANDOTELCO 2017-04-14 2024-10-21 2152 CSUNET-NW 2017-11-08 2024-10-30 21804 ACCESS-SK 2019-06-09 2024-10-21 12183 TALKIE-COMMUNICATIONS 2022-12-10 2024-10-26 3701 NERONET 2023-04-18 2024-10-26 400282 2023-04-27 2024-10-30 393577 SCCNET 2023-05-03 2024-10-24 202400 2023-05-08 2024-10-21 61461 Airtek Solutions C.A. 2023-05-13 2024-10-31 20119 ARROW 2023-10-19 2024-10-31 394684 WISPERNET 2024-01-17 2024-10-26 394195 CLEARNETWORX 2024-03-22 2024-10-10 40850 ENKI 2024-04-03 2024-10-30 393530 TLU 2024-05-22 2024-10-30 19935 CRRS 2024-05-29 2024-10-29 3801 MISNET 2024-09-09 2024-10-29 30475 WEHOSTWEBSITES-COM 2024-09-30 2024-10-14 13807 GREAT-PLAINS-COMMUNICATIONS 2024-10-09 2024-10-09 20260 SAWTEL-UC 2024-10-16 2024-10-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

IPXO?
by Bryan Holloway 07 Nov '24

07 Nov '24

Anyone have any experiences -- good or bad -- with IPXO for IP address leasing? Either as a lessee or lessor? Feel free to respond off-list if you prefer.

3 2

Stream N92 Videos Now! Early Registration Ends Sunday
by Nanog News 07 Nov '24

07 Nov '24

*** N93 Early Registration Ends Sunday* ------------------------------------------------------------ *Don't Miss Your Opportunity for Discounted Registration Rates* Join us from Feb. 3-5, 2025 in Atlanta, GA for our next meeting, NANOG 93. Dive into the latest in networking tech and trends! *REGISTER NOW* <https://nanog.org/events/nanog-93/> *** Stream NANOG 92 Videos Now!* ------------------------------------------------------------ *Grab Some Popcorn + Watch Full N92 Playlist Now* *WATCH NOW <https://www.youtube.com/playlist?list=PLO8DR5ZGla8jZuNZqoXorIMACIUFeEfzd>* *** Check Out NANOG 92 Hackathon Recap* ------------------------------------------------------------ *Watch the Hackathon Wrap Up From our Last Meeting* *WATCH NOW <https://www.youtube.com/watch?v=4ijLfyqUjME&list=PLO8DR5ZGla8jZuNZqoXorIMAC…>* *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

A plea to ignore abuse reports from "watchdogcyberdefense.com"
by Pierre Bourdon 07 Nov '24

07 Nov '24

Hi nanog, Some of you might have seen https://delroth.net/posts/spoofed-mass-scan-abuse/ circulating last week (it was also sent here in reply to someone who received abuse complaints from their ISP). The TL;DR is that some previously unknown company with a fancy looking domain name has started noticing the background noise on the internet and is sending automated abuse complaints to any owner of a source IP sending a SYN packet to port 22 on their network. They're not doing any filtering to try to prevent spoofed source addresses, and at this point there's plenty of evidence that they are seeing mostly spoofed src IPs, then sending abuse reports to a completely uninvolved owner of the IP. I've recently been in communication with that company. They sent me an email trying to get "advice" from me about how to not send abuse complaints to the whole internet, while ignoring the obvious answer of "don't mass send automated abuse complaints based on no evidence of abuse and no evidence of who sent you traffic". They're also making wild claims in their email to me, like, I quote, seeing "1.3 billion attacks logged in the past 24 hours". They're saying that they act on data sources like "we query the VirusTotal API for the source IP and it shows us it's infected with malware". If you're a NOC or someone handling abuse complaints for an ISP or a hosting provider, this is my plea to you: please send abuse reports from "watchdogcyberdefense.com" to your spam box until they understand 1. that a TCP SYN packet is spoofable; 2. that they're harming the internet through reducing trust in abuse complaints by sending so many false positives. I've myself had interactions with both Hetzner and Linode's abuse team, both of them have been top notch and understood what they're likely dealing with, but having to explain to every single ISP what's going on while sitting in the equivalent of an interrogation room threatened with a service suspension isn't a very comfortable situation. Thank you in advance, Best, -- Pierre Bourdon <delroth(a)gmail.com> Software Engineer @ Zürich, Switzerland https://delroth.net/

7 6