October 2003 - Test - lists.nanog.org

ix's & prefix registration
by joshua sahala 14 Oct '03

14 Oct '03

hello to all i was wondering if there were some published docs online regarding the registration of route objects and membership at an ix - specifically, do ixp's around the world require that their members register all of their route objects prior to being allowed to exchange traffic at the ix? if so, how do you/they monitor this? is it left up to the other providers at the ix to verify that they are peering with someone who registers their objects? is this something that an ix could/should worry about? i know that many providers around the world are increasingly requiring registration, and that many build their filters from these registrations, but i have been unable to find anything wrt internet exchanges. replies on or off, i will summarize thanks /joshua "Walk with me through the Universe, And along the way see how all of us are Connected. Feast the eyes of your Soul, On the Love that abounds. In all places at once, seemingly endless, Like your own existence." - Stephen Hawking -

7 6

RE: domainmonger.com with wildcard NS?
by Mike Damm 14 Oct '03

14 Oct '03

This is for domain parking. Users can configure their domains (or use a default I assume) to use these name servers, which in turn point everything to a parking page. My guess is the parking page is a) down b) fat fingered IP c) intentionally left blank. I have seen hosting companies do this to automatically point all domains to their hosting machines without the need for zone maintenance. -Mike -----Original Message----- From: Rick Ernst [mailto:erond@legendz.com] Sent: Tuesday, October 14, 2003 10:07 AM To: nanog(a)merit.edu Subject: domainmonger.com with wildcard NS? This was brought to my attention by a friend. It looks like ns1.domainmonger.com and ns2.domainmonger.com are doing wildcard A records for all zones, including those that already exist. If you go to their site and try to register a domain, it properly shows if the domain exists or not. I'm trying to figure out what the reasoning is behind this. My friend alo pointed out this CERT alert, but I'm not sure how it relates: http://www.kb.cert.org/vuls/id/109475 Rick ------- ; <<>> DiG 9.2.3rc4 <<>> @ns1.domainmonger.com www.esdfsadfsdftreet.com a ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50340 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.esdfsadfsdftreet.com. IN A ;; ANSWER SECTION: www.esdfsadfsdftreet.com. 1200 IN A 216.52.102.86 ;; AUTHORITY SECTION: com. 1200 IN NS ns1.domainmonger.com. com. 1200 IN NS ns2.domainmonger.com. ;; Query time: 37 msec ;; SERVER: 216.98.150.33#53(ns1.domainmonger.com) ;; WHEN: Tue Oct 14 09:59:24 2003 ;; MSG SIZE rcvd: 107 ----- ; <<>> DiG 9.2.3rc4 <<>> @ns2.domainmonger.com www.legendz.com a ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40110 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.legendz.com. IN A ;; ANSWER SECTION: www.legendz.com. 1200 IN A 216.52.102.86 ;; AUTHORITY SECTION: com. 1200 IN NS ns1.domainmonger.com. com. 1200 IN NS ns2.domainmonger.com. ;; Query time: 91 msec ;; SERVER: 216.122.4.81#53(ns2.domainmonger.com) ;; WHEN: Tue Oct 14 10:01:28 2003 ;; MSG SIZE rcvd: 98

1 0

Frustrating loss of connectivity...FOLLOWUP
by Robert A. Hayden 14 Oct '03

14 Oct '03

I'd like to take a moment to quickly publicly thank Darryl, Kevin and Roy from Level 3 that jumped on this issue right away tearing through logs and historicals and then watching the suspect link and providing me the debugging information. In addition, I also was contacted by Todd from Covad and he provided some suggestions and information we'll be able to use to properly open a case and get it referred in the correct directions. THANKS GUYS! - Robert

1 0

RE: Extreme BlackDiamond
by sthaug＠nethelp.no 14 Oct '03

14 Oct '03

> > Aren't most of the 6500 blades the same as the 7600 ones anyway? Between > > these two IMHO we are looking at a blurry distinction between a router > > with very good switching capabilities and a L3 switch with very good > > routing capabilities. > > Does the 7600 have the same BGP Scanner problem as the 6509 does? 7600 runs the same code as 6500 with native IOS. It *is* the same box, as has been repeatedly pointed out. Maybe you could expand on the BGP scanner problems - we haven't seen them all the time we've been running 6500 native with full routes (about 1.5 years now). Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

7 7

Re: i'd like to know your opinions on the com/net wildcard issue
by Kevin Oberman 14 Oct '03

14 Oct '03

> Date: Mon, 13 Oct 2003 16:17:14 -0500 > From: "Pete Templin" <pete.templin(a)texlink.com> > Sender: owner-nanog(a)merit.edu > > > That suggests that it's an ASL (Analog Subscriber Line)... When the signal is placed on the wire, it is very analog. the digital signal is modulated onto the wire and demodulated off of it and the box that connects to the phone line at each end is properly and fairly commonly called a DSL modem. If the path was entirely digital, it would be a CODEC (CODer/DECoder). It is a modem. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman(a)es.net Phone: +1 510 486-8634

2 1

RE: Extreme BlackDiamond
by Temkin, David 14 Oct '03

14 Oct '03

... And seeing as that all most switches are is a glorified multiple port bridge, feel free to go to your 7500 and make it a switch by placing "bridge-group 1" on every port, and if you want to get really crazy and make it a L3 switch, go all out and put in a "bridge 1 route ip". :-) -----Original Message----- From: Michel Py [mailto:michel@arneill-py.sacramento.ca.us] Sent: Monday, October 13, 2003 7:02 PM To: Richard A Steenbergen; Mikael Abrahamsson Cc: nanog(a)merit.edu Subject: RE: Extreme BlackDiamond > Richard A Steenbergen wrote: > So a 7500 with a fast cache is a L3 switch? :) Of course. It does wire-speed switching with one and Possibly more CX-EIP6 if you enable dCEF :-) Michel.

1 0

CERT DNS Off air?
by Mark Vevers 14 Oct '03

14 Oct '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 dig @192.88.209.21 cert.org SOA ; <<>> DiG 9.2.1 <<>> @192.88.209.21 cert.org SOA ;; global options: printcmd ;; connection timed out; no servers could be reached Same for .5 their other DNS server .... traceroutes die at: cert-i1.psc.net (192.88.115.90) 99.533 ms 100.103 ms 99.858 ms Although from some other traceroute sites we can get one hop further if the enter cert's network via cert-i2: 192.88.209.195 (192.88.209.195) 80.127 ms 79.990 ms 80.038 ms Also, using other DNS search tools on the net reveals no answer .... Mark - -- Mark Vevers. mark(a)ifl.net / mark(a)vevers.net Principal Internet Engineer, Internet for Learning, Research Machines Plc. (AS5503) - -- GPG Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB08F3CA3 Fingerprint: 85BA 30C4 9EC8 1792 4C8C C31E 58B5 3D1C B08F 3CA3 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/i9BOWLU9HLCPPKMRAsZXAJ9l3P9cfJzyYqfmb4fxLo8s0+osTwCeLg4c 8+VORXGcoDHtoXjhVF1eFtQ= =K+Xm -----END PGP SIGNATURE-----

1 0

Re: Extreme BlackDiamond
by Michael.Dillon＠radianz.com 14 Oct '03

14 Oct '03

>> and I would be happy to see the list owner come >> down hard on the perp. Banishment? >You should make sure you know who the perp is before making such >pronouncements (or maybe it doesn't matter). Not really. It's the list owner who should know who the perp is before taking action. In any case, it's quite easy to figure out who dragged the dispute onto the list by checking the incoming messages. In this case one person sent a private email and the perp sent a profane reply copied to the list. Clearcut case.

1 0

Re: ... WWIU / Orientation
by Johnny Eriksson 13 Oct '03

13 Oct '03

> > | "From now on, we should make this a primary distinction between switch > > | and a router: If a device has vertical line cards, it is a router, if > > | horizontal, it is a switch, unless there are two or more vertical slots > > | within any horizontal slot plane, then it is, in fact, a router." > > | > > | How does that sound? > > > > Like the start of some new RFC :-) > > > > which way is up? perhaps you had better state the > problem in terms of X,Y,Z coordinates at a minium. > Adding the fourth vector, time, may be useful as well; > e.g. "... it was a router last night..." maybe polar coordinates are better situated for distance vector protocols? > --bill --Johnny

1 0

Juniper M7i, M10i and the US DREN's IPV6 project
by Eric Kuhnke 13 Oct '03

13 Oct '03

Here are some interesting tidbits found recently... The US DoD will be using a Juniper "M7i" for their ipv6 testbed: https://spot.hpcmo.hpc.mil/hpc/docs/Htdocs/DOC-MIL/DREN/CONFERENCE/2003/200… Mention of the M7i and M10i in this document: http://216.239.41.104/search?q=cache:CHexJWF9Db0J:www.ietf.org/IESG/Impleme… From the PDF, regarding DREN implemention of ipv6: No great incentive for DREN sites to implement IPv6 no near term win additional effort and complexity, generally not funded Can't deploy in a safe and secure manner Existing DREN intrusion detection (IDS) architecture incompatible with maturity of products in use Juniper port mirror lacks IPv6 support Anybody know what a the new M7i and M10i routers are? Specs, price estimates, release dates, etc?

3 2