December 1999 - Test - lists.nanog.org

Re: Portable IP space, isolated networks, BGP, etc... (fwd)
by Tim Wolfe 21 Dec '99

21 Dec '99

I'm forwarding this off inet-access because there is a lot more BGP clue here. Anyone have any comments on the particular situation below, and/or regarding announcing different routes at multiple locations to multiple providers with single/many different ASNs? Thanks, -- Tim -------------------------------------------------- * Timothy M. Wolfe, Chief Network Engineer * * ClipperNet Corporation / It's a wireless world * * tim(a)clipper.net 800.338.2629 x 402 * * Sufficient for today = Inadequate for tomorrow * -------------------------------------------------- ---------- Forwarded message ---------- Date: Thu, 9 Dec 1999 12:58:46 -0800 (PST) From: Tim Wolfe <tim(a)clipper.net> Reply-To: list(a)inet-access.net To: list(a)inet-access.net Subject: Re: Portable IP space, isolated networks, BGP, etc... On Thu, 9 Dec 1999, James Fischer wrote: > From: "Troy Settle" <st(a)i-plus.net> > Subject: Portable IP space, isolated networks, BGP, etc... > > > I've been thrown into a situation where I've got 8 isolated networks > > connected to a variety of providers. Eventually, most of these will be > > connected with our own backbone. I need to find a way to make the > > transition as seemless as possible. > > > > First, it's my understanding that I can use a single ASN for the BGP > peering > > at each of these networks. Am I mistaken? > > Yes, this is a Big Mistake(tm). One would need a unique ASN for each site, > but they are only numbers, and the cost is like $500 each. Think about > the implications of two different sites, fed by the same provider, both > using the same ASN. Not a pretty picture. BGP hell. Could you please clarify what exactly the problem with doing this is? Many huge providers have multiple peering points that exchange routes using the same ASN for their peering routers don't they? -- Tim -------------------------------------------------- * Timothy M. Wolfe, Chief Network Engineer * * ClipperNet Corporation / It's a wireless world * * tim(a)clipper.net 800.338.2629 x 402 * * Sufficient for today = Inadequate for tomorrow * -------------------------------------------------- - Send 'unsubscribe' in the body to 'list-request(a)inet-access.net' to leave. Eat sushi frequently. inet(a)inet-access.net is the human contact address.

7 9

Re: Need help from UUNet's routing specialist!
by Brian Dickson 21 Dec '99

21 Dec '99

> For the record, is anyone seeing even vaguely decent connectivity via > teleglobe? It seems that 50% of the times customers complain they have > a poor connection to our network, it turns out that they're going via > teleglobe at some point! Um, maybe it has to do with your connection to the outside world? (BTW, are you refering to pre.org, specifically, or some other network?) Or at least connectivity between your upstream provider and either you or us... Currently we hear your routes only from insnet, via LINX and DE-CIX. (LINX does tend to have problems from time to time.) The proportion of complaints coming from customers of ours is most likely explained by the size of our customer base; a recent check on percentage of announced IPv4 space, shows us and our customers comprising about 20% of reachable addresses (ie, pro-rated by prefix size). > Are they running a 2400baud modem with a flaky fuse as their main > connection or something? Try multiple OC-12 (cross-section), with buildout to OC-48 (on dark fibre) underway, in North America and Europe, and deployment of significant numbers of nodes worldwide at significant connection speeds, over owned wet-fibre and dark-fibre capacity. We do have lots of *customers* whose links to us are congested; if anyone can find a way to force customers to upgrade, we'd dearly like to know. ;-) (These congested links have in-addr entries from our namespace, and this frequently leads to the incorrect conclusion that it is our network that has problems. In case anyone is curious, our naming convention for point to point links, is if-* for the Teleglobe end, and ix-* for the customer side, where the * is the numbering of Cisco interfaces converted from non-alpha to hyphens, in the zone named by the router designation. Example: if-12-1.bb3.NewYork.Teleglobe.net, would be the Teleglobe side, while ix-0-1-0.bb6.NewYork.Teleglobe.net would be the far-end of a link.) -- Brian Dickson, Email: briand(a)teleglobe.net Director, Backbone Engineering Tel : +1 703 755 2056 Teleglobe Communications Corp., Fax : +1 703 755 2648 Rm 3214, 11480 Commerce Park Drive, Cell : +1 703 851 9053 Reston, Virginia, USA, 20191 http://www.teleglobe.com

2 1

Lose Weight For The Holidays and Eat What you want -dbjyjqcwbsu
by hkdiigh＠wkttwcjkqis.momi.de 21 Dec '99

21 Dec '99

YES! You Can Eat What All You Want and lose weight with FAT ABSORB! Over 1 Million bottles sold last year alone. You've probably seen this product on T.V. Fat absorb is a new concept in losing weight for both men and women. This new product actually traps the fats from foods you eat every day. By trapping those fats, Fat Absorb reduces the amount of calories derived from those fats by preventing those excess fats from getting into your body. Fat Absorb attracts fat like a magnet. Not only is Fat Absorb a significant aid to weight loss, it also helps lower your cholesterol and triglyceride intake. Fat Absorb is working when you're not - naturally and safely. Look at some of Fat Absorb's benefits! · Has no stimulants of any kind. · Helps you lose weight while eating naturally. · Blocks dietary fat before it reaches your stomach · Absorbs up to 12 times its weight in dietary fat · Binds fat - making it nutritionally unavailable · Fat Absorb is ALL NATURAL Fat Absorb is a natural fiber that, like a magnet, is attracted to fat, especially harmful saturated fat. Reducing fat and cholesterol is essential for building health. You can try Fat Absorb at an amazing low price of $29.95. That's $10.00 off the everyday price. Do yourself a big favor and order Fat Absorb today!!! To order call 24 hours a day 888-516-3900

1 0

Money Earning Power!
by sukasa86＠cyclades.com.br 19 Dec '99

19 Dec '99

UNIVERSITY DIPLOMAS Obtain a prosperous future, money earning power, and the admiration of all. Diplomas from prestigious non-accredited universities based on your present knowledge and life experience. No required tests, classes, books, or interviews. Bachelors, masters, MBA, and doctorate (PhD) diplomas available in the field of your choice. No one is turned down. Confidentiality assured. CALL NOW to receive your diploma within days!!! 1-212-465-3248 Call 24 hours a day, 7 days a week, including Sundays and holidays. donald657(a)usa.net 21688991722966321690

1 0

Re: ORBS block
by Paul Vixie 19 Dec '99

19 Dec '99

dredd(a)megacity.org (Derek Balling) writes: > I think (as I interpret the discussion) it is this way: > > Anyone can do whatever he wants with his/her mail server. well, sort of. any mail server operator's freedom stops at the edge of any other's. that is, a spammer cannot do whatever he/she wants with his/her mail server since one of the things they want to do is connect to my mail server and dump spam on me. i think you meant "any mail server operator is free to reject any traffic they want to reject, for any reason or for no reason." and i'd agree with that formulation. but maybe that's not what you meant at all, because: > The Network Operator can do whatever he wants with his network, BUT if the > network provider has downstream customers, paying for internet > connectivity, and the operator filters out part of that connectivity, then > the operator has voided the contract (by filtering out a portion of the > network the downstream may consider "important") in a manner that allows > the downstream to bail out of any such contract. (I think such a filter > could be considered "materially altering the service provided" although > IANAL). because people in the service business are so liable for so many things, they usually employ the services of actual, honest-to-god lawyers. and so, when you visit a food-serving point of sale ("a restaurant") in california you can usually learn by simply looking at the front door that they "reserve the right to refuse service to anyone." and so, the transit contracts i've signed (from either side) virtually all leave "wriggle room" for things like running the MAPS (LLC) RBL (tm) in BGP mode on all backbone routers. of the couple of worldwide ISP's i know of who do that, every one of them tells their customers up front that they're doing it, and none of them seem to be lacking for new customers. but as JD also noted, there's a discrepency in the above summary. one thing that mail server operators do increasingly often is to run the MAPS (LLC) RBL (tm) in DNS mode. hotmail started doing this recently. this certainly qualifies under the "allowed to refuse traffic for any reason or no reason" formulation of the first policy, but seems to run afoul of the "filtering out important destinations" rule described in the second policy. pretty much what happens is that most ISP's are like california's restaurants and they reserve the right to refuse service to anyone, including spammers. -- Paul Vixie <vixie(a)mibh.net> >> But what *IS* the internet? > It's the largest equivalence class in the reflexive transitive > symmetric closure of the relationship "can be reached by an IP > packet from". --Seth Breidbart

1 0

ORBS block
by Dean Anderson 18 Dec '99

18 Dec '99

Well, after almost a month of no attacks and a coincident month of ORBS blocking at BBN/NZ link, the block on ORBS has been lifted, and we have started getting relay attacks again. I think thats pretty conclusive evidence that they are the cause of the relay attacks. I'm hoping the removal was an oversight, but I'd like to ask people to please put the following access lists in: access-list 104 deny ip 202.36.148.5 0.0.0.255 any access-list 104 deny ip 202.36.147.16 0.0.0.255 any Luckily, the FBI just called me back to begin work on last months attacks. I guess Egypt Air must be getting wrapped up. I guess I have some stuff to add to our complaints. Actually, given the cause and effect demonstrated by the block, I'm hoping that this will motivate the FBI to do something with ORBS. --Dean ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

10 13

Re: NZ ccTLD registry closing down for Christmas!
by Sean Donelan 18 Dec '99

18 Dec '99

On Sat, 18 December 1999, Joe Abley wrote: > Does anybody know of _any_ other TLD registry that is closing down for > Christmas? I'd be interested to hear, if so. I haven't heard any announcements of other ccTLD registrars closing down for the holidays. However, its is not unusual for operators of some ccTLDs and the sub-US domains to dissappear for days or weeks over holidays. Try to get a hold of sub-US domain registrars during the entire month of August in the US.

1 0

NZ ccTLD registry closing down for Christmas!
by Joe Abley 18 Dec '99

18 Dec '99

For the (probably few) operators who are in the business of registering and parking names under the NZ (New Zealand) ccTLD, we have just been notified that the NZ registry, Domainz, is closing down for Christmas -- no modifications to the zone files until 6 January. Does anybody know of _any_ other TLD registry that is closing down for Christmas? I'd be interested to hear, if so. Joe ----- Forwarded message from Maria Arnott <m.arnott(a)domainz.net.nz> ----- X-Authentication-Warning: titan.actrix.gen.nz: majordomo set sender to owner-newz-flash(a)list.actrix.gen.nz using -f From: Maria Arnott <m.arnott(a)domainz.net.nz> To: "'NewZ-Flash(a)domainz.net.nz'" <NewZ-Flash(a)domainz.net.nz> Subject: [NewZ-Flash] Welcome to all inaugural members of NewZ-Flash Date: Fri, 17 Dec 1999 12:40:12 +1300 X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211 Precedence: bulk As an inaugural member of NewZ-Flash, Domainz would like to officially thank you for subscribing and to welcome you. Just a few words regarding... Christmas and New Year name processing Customers should ensure that all new name registrations and changes for existing names are submitted before Wed, 22 December. Name registrations and approved moderations received by December 22, 12.00 p.m. should be live by Christmas. The Domainz office will be closed for customer enquiries from the evening of Thursday 23rd December and will re-open Thursday, January 6, 2000. During the holiday period, registrations can be submitted by web and e-mail template in the normal way, but there will be no changes to the zone files until January 6, 2000. If you have any enquiries of an urgent nature during the holiday period, call 0800 4DOMAINZ (0800 366 2469) or 04 473 4567 and leave a detailed phone message which will be cleared on a regular basis. Statistics: Over 45,000 domains registered The November Domainz performance statistics have been published for your information at http://www.domainz.net.nz/newsstand/graphs.html During the month, close to 100% of new name registrations and changes were achieved within one business working day. Everyone here at Domainz would like to take this opportunity to wish you all the best for the holiday season and for a prosperous new year 2000. My Regards, Maria Arnott - To unsubscribe to the newz-flash mailing list send a message to majordomo(a)domainz.net.nz with the keyword unsubscribe as the message plus the mailing list name. i.e.unsubscribe newz-flash -- Ua lawa küpono ka hakahaka pä o këia pä malule

1 0

Re: ORBS block
by Paul Vixie 17 Dec '99

17 Dec '99

alex(a)virgin.relcom.eu.net ("Alex P. Rudnev") writes: > It seems ORBS itself must be placed into all black lists -:). don't do that. put them on your "relay-ok" list. that way instead of you blocking them, they block you.

1 0

The Cidr Report
by Tony Bates 17 Dec '99

17 Dec '99

This is an auto-generated mail on Fri Dec 17 12:00:00 PST 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 17Dec99 0) General Status Table History ------------- Date Prefixes 101299 67903 111299 67955 121299 67842 131299 67917 141299 67952 151299 68032 161299 68301 171299 68465 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 64.4.64.0/19 from AS7398 *** Bogus 64.4.128.0/19 from AS13932 *** Bogus 64.5.0.0/19 from AS14107 *** Bogus 64.5.64.0/19 from AS6601 *** Bogus 64.6.32.0/20 from AS13740 *** Bogus 64.6.64.0/20 from AS10726 *** Bogus 64.6.96.0/20 from AS8049 *** Bogus 64.6.160.0/23 from AS11354 *** Bogus 64.6.160.0/20 from AS11354 *** Bogus 64.6.162.0/24 from AS11354 *** Bogus 64.6.192.0/21 from AS14215 *** Bogus 64.6.204.0/23 from AS14215 *** Bogus 64.6.206.0/23 from AS14215 *** Bogus 64.7.0.0/24 from AS6461 *** Bogus 64.7.2.0/23 from AS3967 *** Bogus 64.7.4.0/23 from AS3967 *** Bogus 64.8.0.0/20 from AS7843 *** Bogus 64.8.24.0/21 from AS7843 *** Bogus 64.9.0.0/19 from AS7843 *** Bogus 64.9.32.0/20 from AS701 *** Bogus 64.9.48.0/20 from AS1239 *** Bogus 64.9.128.0/18 from AS5003 *** Bogus 64.10.0.0/16 from AS816 *** Bogus 64.10.10.0/24 from AS705 *** Bogus 64.14.0.0/19 from AS3967 *** Bogus 64.14.32.0/19 from AS3967 *** Bogus 64.14.64.0/20 from AS3967 *** Bogus 64.14.80.0/20 from AS3967 *** Bogus 64.14.96.0/20 from AS3967 *** Bogus 64.14.112.0/20 from AS3967 *** Bogus 64.14.128.0/20 from AS3967 *** Bogus 219.91.160.0/22 from AS7742 *** Bogus 219.91.164.0/23 from AS7742 AS Summary ---------- Number of ASes in routing system: 6269 Number of ASes announcing only one prefix: 3337 (1827 cidr, 1510 classful) Largest number of cidr routes: 668 announced by AS701 Largest number of classful routes: 973 announced by AS701 1) Gains by aggregating at the origin AS level --- 17Dec99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 383 141 242 63.2% BCnet Backbone AS7046 398 256 142 35.7% UUNET-CUSTOMER AS2609 125 11 114 91.2% EUnet-TN AS9269 133 20 113 85.0% Hong Kong CTI AS1221 635 524 111 17.5% TELSTRA-AS AS7657 271 175 96 35.4% The Internet Group Limited AS9706 110 15 95 86.4% Pusan Metropolitan City Office of AS1653 129 38 91 70.5% SUNET Swedish University Network AS4293 238 150 88 37.0% Internal ASN for C&W AS174 568 482 86 15.1% Performance Systems International AS7496 114 38 76 66.7% Power Up AS3749 136 62 74 54.4% TECNET AS4449 91 19 72 79.1% ASN-GALSTAR AS705 215 145 70 32.6% ALTERNET-AS AS4200 172 105 67 39.0% AGIS (Apex Global Information Ser AS577 234 173 61 26.1% Bell Canada Backbone AS816 249 190 59 23.7% UUNET Canada (ASN-UUNETCA-AS4) AS4740 347 289 58 16.7% Ozemail Pty Ltd (ASN-OZEMAIL) AS209 341 287 54 15.8% Qwest Communications AS684 92 46 46 50.0% Manitoba Regional Network Backbon AS9304 64 19 45 70.3% Hutchcity AS701 973 932 41 4.2% Alternet AS1 520 479 41 7.9% GTE Internetworking AS6528 45 7 38 84.4% WORLD-LYNX AS7029 77 40 37 48.1% ALLTELNET AS8013 130 94 36 27.7% PSINET-CA AS4755 105 69 36 34.3% Videsh Sanchar Nigam Ltd. India AS11127 114 79 35 30.7% UNKNOWN AS3737 98 65 33 33.7% PenTeleData Inc. (ASN-PTD) AS549 193 161 32 16.6% ONet Backbone For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0