- Test - lists.nanog.org

Re: Netflix VPN detection - actual engineer needed
by Baldur Norddahl 07 Jun '16

07 Jun '16

> And they could easily redirect HE IPv6 addresses to a IPv4 only > service. This would satify both the content providers and the > customers. It's not like there tunneled traffic is IPv6 only as > there has to be a IPv4 endpoint for the tunnel. > > You can't argue that HE is too small to do this for as they are > targeting HE tunnels. > > Mark And while we wait for Netflix to do that, you could also turn off ipv6 on your Netflix watching device as a quick fix. Most smart tv do not support it to start with. It is a bit surprising that your browser would choose the ipv6 path via tunnel over the more direct ipv4 path. Anyway, you could blackhole the Netflix ipv6 prefix to force the situation. Or you could get your own /48 prefix and announce via BGP. Might not be free but comes with other advantages and has some coolness factor. Or turn off the tunnel while you watch Netflix. Lots of options for "can do" people. Yes we all hate geo ip solutions but this particular Netflix issue is not a big thing in the grand scheme of things. Regards Baldur

2 1

Re: Netflix VPN detection - actual engineer needed
by Mark Felder 07 Jun '16

07 Jun '16

On Mon, Jun 6, 2016, at 13:09, Brandon Jackson wrote: > Looking up your tunnels block in ARIN will only show HE's Info. > > Using HE's rwhois http://rwhois.he.net/whois.php > > Shows the information provided by the tunnel user at time of signup or as > modified in account settings. > Ahh, correct. This way is showing it for me. I should have known to use their rwhois. -- Mark Felder feld(a)feld.me

11 11

any way to deal with google's captcha for whole /21 v4?
by Dmitry Sherman 06 Jun '16

06 Jun '16

Hello dear Nanog group, Any suggestions how to deal with Google captcha for whole /21 ipv4 newly acquired block? Every IP from the prefix getting blocked by Captcha which never resolves. Thanks in advance. — Dmitry Sherman Interhost Networks Ltd dmitry(a)interhost.net office: 972-74-7029881 mobile: 972-54-3181182 http://www.interhost.co.il

2 1

ISP License in the USA?
by Lorell Hathcock 06 Jun '16

06 Jun '16

NANOG: Our owner has hired a consultant who insists that we should have an ISP license to operate in the United States. (Like they have in other countries like Germany and in Africa where he has extensive personal experience.) I am asking him to tell me which license we should have because I don't know of a license that we are required to have to route IP traffic to end customers. I am familiar with CLEC status filed with our state. But it is not a requirement to pass traffic. He is suggesting COALS with which I am completely unfamiliar. Can anyone tell me if there is a Texas state and/or USA Federal license for a small operator to pass IP traffic from the internet to end users (commercial and/or residential). I am aware that there are some CALEA requirements of ISPs that seem to kick in once a CALEA request is made, but is that different from a license. Thanks, Lorell Hathcock

18 25

rfc 1812 third party address on traceroute
by Randy Bush 06 Jun '16

06 Jun '16

rfc1812 says 4.3.2.4 ICMP Message Source Address Except where this document specifies otherwise, the IP source address in an ICMP message originated by the router MUST be one of the IP addresses associated with the physical interface over which the ICMP message is transmitted. If the interface has no IP addresses associated with it, the router's router-id (see Section [5.2.5]) is used instead. some folk have interpreted this to mean that, if a router R has three interfaces .-----------------. | | | B |--------- D S ---------| A R | | C |--------- (toward S) | | `-----------------' if the source of a traceroute from S toward D with TTL to expire on R, and R's FIB wants to exit via C to get back to S (yes, virginia, the internet is highly asymmetric), the source address of the time exceeded message should be C. of course, simpletons such as i would desire the source of the time exceeded message to be A. after all, this is the interface to which i sent the icmp with the TTL to expire. ras's preso, https://www.nanog.org/meetings/nanog47/presentations/Sunday/RAS_Traceroute_… page 10 illustrates this issue with rfc1812 cursory research and talking with C & J seem to indicate that they do what i want not what some folk have interpreted 1812 to mean. at least on some models. is anyone seeing the dreaded rfc1812 behavior in a citable fashion? how common is it? randy

10 19

ERPS/G.8032 interoperability
by Denis Fondras 05 Jun '16

05 Jun '16

Hi all, Is there any study on ERPS/G.8032 interoperability between different equipment manufacturer ? Denis

1 0

Re: Netflix VPN detection - actual engineer needed
by Brandon Butterworth 04 Jun '16

04 Jun '16

> On Jun 3, 2016, at 17:35 , Owen DeLong <owen(a)delong.com> wrote: > Letâ's face it folks, if we want to encourage Netflix to tell the > content providers to give up the silly geo-shit, then we have to > stop patronizing channels that do silly geo-shit. Correct but it needs a lot to do that. We do the geo thing. I didn't want us to and we didn't for a few years but once the geo people had convinced rights owners it was a viable thing they forced people buying their content to use it. I tried to stop it here and failed but it's never over, people are starting to realise it's silly to annoy people who want your services, you just need to find a way to allow them To be fair to Netflix the tunnel blocking will likely have been driven by their content suppliers asserting their contractual rights to not allow access from certain places. Their content suppliers will have seen people boasting how they use tunnels to get round them and tunnel suppliers advertising their services for doing so. Blame them for the blocking as while it was a personal thing they wouldn't have been bothered much. As usual a few people see an opportunity to make money off something and in the process break it for everyone btw the list of tunnel providers was likely supplied by the same geo ip people, some sell that as an extra. brandon

1 0

Vidéotron CPE bug
by Simon Perreault 03 Jun '16

03 Jun '16

Any Vidéotron engineer listening? On your CPE there's a SIP ALG on TCP port 5060 that is causing issues to our clients with Cisco 79xx phones. I'm referring to the CPE that is used for business subscribers with static IP addresses. Please contact me for all the details. Thanks, Simon

1 0

craigslist.com admin
by Dennis Burgess 03 Jun '16

03 Jun '16

Looking for a craigslist.com admin to connect with offlist about a block :) [DennisBurgessSignature] www.linktechs.net<http://www.linktechs.net/> - 314-735-0270 x103 - dmburgess(a)linktechs.net<mailto:dmburgess@linktechs.net>

8 8

Google GeoIP issue
by Peter Loron 02 Jun '16

02 Jun '16

Hello folks. An address we use is not identified as being in the correct location by Google. Can someone from their NOC reach out off-list? Thanks. Sent from my iPhone

5 4