November 2002 - Test - lists.nanog.org

Breaking Stuff by Fixing NAT
by Crist J. Clark 12 Nov '02

12 Nov '02

We have some dial-up-like customers behind a device doing the dreaded Network Address Translation (NAT). We are doing one-to-one NAT. Customers get PPP connections with 10/8 addresses. The NAT is done far down stream from our end of the point-to-point connnection at the border with our ISP. Do not ask me why it was done that way. The network engineers want to discontinue doing NAT. From our point of view, NAT doesn't provide any benefits (it did take a while to get it to sink in that it provides no security, and we do need to add some BGP complexity since before packets could get NATed at any egress point and find their way back). NAT only created continuous headaches. But there are still management reservations, the only reservation we do not have a good answer for is the (arbitrary) claim that turning off NAT may break stuff for customers who depend on it. Now we have customers that do some pretty messed up stuff, and everybody knows about various commercial apps that do really, really messed up stuff, but none of us can think of anything that turning NAT off will break. But perhaps all of our minds are just too cluttered with all of the weird stuff that turning off NAT will allow to _work._ Has anyone here been in a similar situation? Did turning off NAT break anything? Is anyone aware of or can think of anything that turning off NAT might break? (Ignore the fact any customers connected during the actual change may have service intrupted. I am only worried about something that doesn't work next time they dial-up after the change.) Thanks. -- Crist J. Clark | cjclark(a)alum.mit.edu | cjclark(a)jhu.edu http://people.freebsd.org/~cjc/ | cjc(a)freebsd.org

3 4

"VeriSign Moves DNS Server To Boost Security"
by Gil Cohen 11 Nov '02

11 Nov '02

In an effort to protect the Internet from future hacking attacks, VeriSign (Nasdaq: VRSN - news) has moved one of the Net's root servers to an undisclosed physical and virtual location. http://story.news.yahoo.com/news?tmpl=story2&cid=620&ncid=738&e=9&u=/nf/2002 1108/bs_nf/19918 Funny read. Signed, Gil

14 16

huge power outage in sj
by Scott Granados 11 Nov '02

11 Nov '02

Just a note, about ten minutes ago a big jult went through our building at 35 S. Market and we lost power entirely. It looks like 55 S market is also with out power although I assume generators have kicked in. Cause is unknown yet but there is lots of fire and police activity near by so probably a substation or something blew up.

2 1

Re: huge power outage in sj
by George William Herbert 11 Nov '02

11 Nov '02

I have a couple of companies I work with reporting 55 South Market San Jose also lost AC power temporarily, but the generators are on and stable at this time. No word as to the cause from either of them. -george william herbert gherbert(a)retro.com

1 0

PCCW/CAIS as transit
by Bogdan Surdu 11 Nov '02

11 Nov '02

Hi, Can someone give me a few impressions (offline) about PCCW/BtN (ex CAIS) as transit supplier. Thanks, Tim --- Be different. Think.

1 0

telis
by Scott Granados 11 Nov '02

11 Nov '02

Just a note, telis has cleared their bogan filters on 69.x.x.x and it appears it was a couple weeks ago my fault:). THey also were very responsive with this so hats off to them. THanks again! Scott

1 0

RE: Could someone from Bell Nexxia contact me offlist
by nanog＠jamesstewartsmith.com 11 Nov '02

11 Nov '02

The Bell Nexxia looking glass is (I got this from traceroute.org) http://looking-glass.in.bellnexxia.net:8080/ Mind sharing the Nexxia looking glass URL? Thanks, Joel > -----Original Message----- > From: nanog(a)jamesstewartsmith.com [mailto:nanog@jamesstewartsmith.com] > Sent: November 10, 2002 12:35 PM > To: nanog(a)merit.edu > Subject: Could someone from Bell Nexxia contact me offlist > > > > I'm having a routing issue where anyone on the Bell Nexxia > network can't connect to my web server, but they can get to > every other IP > address on the same network. There seems to be something odd > I found in a > Bell Nexxia looking glass. Any help would be appreciated. > > > -- > James Smith > > CCNP Certified > Sun Certified Systems Administrator for Solaris 8 > > -- James Smith CCNP Certified Sun Certified Systems Administrator for Solaris 8

1 0

Re: Call for papers - Second Nordnog
by Kurt Erik Lindqvist 11 Nov '02

11 Nov '02

This was the call for papers.... - kurtis - On måndag, nov 11, 2002, at 16:10 Europe/Stockholm, Rasmus Aveskogh wrote: > > Unfortunately there's a 404 on > > http://www.nordnog.org/nordnog2/agenda.html > > -ra > > ----- Original Message ----- > From: Kurt Erik Lindqvist <kurtis(a)kurtis.pp.se> > Date: Monday, November 11, 2002 12:06 pm > Subject: Call for papers - Second Nordnog > >> >> >> >> (Apologies for eventual off-topic posting) >> >> The second Nordic Operator Conference, Nordnog-2, will be held 12- >> 13/2 >> 2003 at the Quality Globe Hotel in Stockholm, Sweden. For >> information >> on the hotel, please see http://www.globehotel.se/default_1.html. >> >> If you have something you want to present, please contact >> kurtis(a)kurtis.pp.se. To see the agenda, please look at >> http://www.nordnog.org. >> >> For registration please send email to register(a)nordnog.org with >> the >> followoing information : >> >> First name: >> Last name: >> Company: >> Attending Day1: >> Attending Day2: >> >> >> Best regards, >> >> - kurtis - >> >> >

1 0

Call for papers - Second Nordnog
by Kurt Erik Lindqvist 11 Nov '02

11 Nov '02

(Apologies for eventual off-topic posting) The second Nordic Operator Conference, Nordnog-2, will be held 12-13/2 2003 at the Quality Globe Hotel in Stockholm, Sweden. For information on the hotel, please see http://www.globehotel.se/default_1.html. If you have something you want to present, please contact kurtis(a)kurtis.pp.se. To see the agenda, please look at http://www.nordnog.org. For registration please send email to register(a)nordnog.org with the followoing information : First name: Last name: Company: Attending Day1: Attending Day2: Best regards, - kurtis -

1 0

Re: Telus (AS852) problems ?
by Mike Tancsa 10 Nov '02

10 Nov '02

Finally got through. The front line folks just said there is a, "global affecting problem in Toronto" and opened a ticket for me. No details other than that. However, the session just came back to normal levels. ---Mike At 08:57 PM 11/10/2002 -0500, Jason Lixfeld wrote: >They've definitely got some funky routing going on. > >Not too sure if it's normal, but regardless, it's strange. > >On Sun, 2002-11-10 at 20:42, Mike Tancsa wrote: > > > > Anyone else seeing any problems with Telus (AS852) tonight ? This morning > > an IGP config typo (dont know many details beyond that) black holed a lot > > of routes for me and now I only see 30 prefixes from them. > > > > From their route server (route-views.on.bb.telus.com) I dont even have a > > path back to the other side of the router I peer with > > > > route-views.on>traceroute 209.115.141.1 > > > > Type escape sequence to abort. > > Tracing the route to toroonzddr00.bb.telus.com (209.115.141.1) > > > > 1 * * * > > > > Yet I can see it from my side... Perhaps more IGP issues ? I have been > > stuck in the phone queue for some time now, so perhaps someone on the list > > might know whats up ? I know there are a few Telus people who monitor > NANOG... > > > > ---Mike > > -------------------------------------------------------------------- > > Mike Tancsa, tel +1 519 651 3400 > > Sentex Communications, mike(a)sentex.net > > Providing Internet since 1994 www.sentex.net > > Cambridge, Ontario Canada www.sentex.net/mike > > >-- >Regards, > >Jason A. Lixfeld Fastvibe Corporation >Senior IP Network Engineer 220-156 Front St. W >jlixfeld(a)fastvibe.com Toronto, ON M5V-2L6 >------------------------------------------------------------- >tel://416.341.0099:223 fax://416.341.0088 -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike(a)sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike

3 2