December 2003 - Test - lists.nanog.org

Re: In need of help from Comcast
by Stewart, William C (Bill), RTSLS 12 Dec '03

12 Dec '03

Kenneth Budd expressed his frustration about not being able to reach Comcast's blacklist management people by email because his site was blacklisted. It's not the first time that somebody's had that problem with some ISP. For ISPs, it's important to make sure that abuse@ and similar NOC addresses don't block incoming mail. (Similarly, spam filters can make it difficult to submit spam complaints...) But for people who are stuck when trying to reach addresses like that, remember that free or cheap email providers are widely available, so go get a Yahoo address if you're in an hurry, or spend the $20/month for an email address with some other provider so you've got an alternative. Sure, it looks funny to have "Big-ISP-1-admin(a)Big-ISP-2.net", and more dubious to have "Big-ISP-1-admin(a)yahoo.com", but go ahead... Bill Stewart

3 2

survey on BGP damping
by Beichuan Zhang 12 Dec '03

12 Dec '03

Hi, We are conducting a survey of BGP damping deployment and would greatly appreciate if you could take a few minutes to answer the following questions. There are a number of interesting results and various recommendations for damping settings. However, we have found only limited information on who does(does not) deploy damping and what parameter settings are selected in practice. If you are willing to participate, please send replies directly to us. We will collect the results (removing any private information regarding specific sites) and post the results to the list. Thanks! --- beichuan (1) Does your AS have BGP route flap damping turned on? * Yes * No (please skip to comments) (2) What damping parameters do you use? * Cisco Default * Juniper Default * RIPE recommendation * Customized (3) On which links do you enable damping? * To customers only * To providers * To peers * All the above (4) Comments Please tell us more such as: What kind of network are you managing (any specific names will be removed in the published study)? Why (why not) do you enable damping? If you enable damping, why did you choose your current parameters? Has your site seen specific problems that were prevented by damping (or caused by damping)? We welcome any other comments you feel are relevant. Thanks!

1 0

route-views up at PAIX (Palo Alto)
by David Meyer 12 Dec '03

12 Dec '03

Folks, We are now up and running at the PAIX (Palo Alto) and would like to invite folks at the PAIX to peer with with Route-Views. Please contact us at help(a)routeviews.org if you would like contribute your view. Thanks, The Route-Views Team

1 0

Re: Anyone from NeuLeve.bizl listening?
by Stewart, William C (Bill), RTSLS 12 Dec '03

12 Dec '03

I can see a couple of obvious approaches for getting Neulevel's attention - Their web site lists two Registry Relationship Managers, one with popup contact info Ivor Sequeira - Senior Manager, European, African, and Middle Eastern Regions 571-434-5776 ivor.sequeira(a)neulevel.biz (That appears to be +1-571-434-5776 ...) - Their whois entry for neulevel.biz lists +1.5714345757 as their phone number, fax +1.5714345758, and snailmail address list. http://www.whois.biz/whois.cgi?TLD=biz&WHOIS_QUERY=neulevel.biz&TYPE=DOMAIN… - They've got a snailmail address, you've got a lawyer and Fedex, they've got a Nasty Letter.... Since the requests to use your DNS server were bogus, you could probably file a John Doe suit and do discovery on Neulevel, but a Nasty Letter is probably enough. - They've got an online trademark dispute process. It's got pointers to ICANN dispute resolution mechanisms, which are more likely to get their attention than random email. Their entry point is stopsupport(a)neulevel.biz Normally, if somebody registers that annoying-little-spammer.com has nameserver 1.2.3.4, you'd be using this to complain that you own the name annoying-little-spammer.com, but you could try using it to complain that you own 1.2.3.4, and maybe even contend that since the registrant falsely listed you as the nameserver for the domain, that it's theft of service and you ought to be awarded ownership of the name. - You might also drop a note to ICANN about the lack of a phone number on their web site and the lack of email responsiveness. - Personally I like the suggestion that someone had that you start serving DNS for the fake names, either pointing to 127.0.0.3 or to a CNAME pointing to Annoying-spammers-forged-their-DNS-again.com, which is some disposable address block on which you run a web site and stub email server explaining that it's not your fault.

4 3

In need of help from Comcast
by Ken Budd 12 Dec '03

12 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm trying to find someone from Comcast who can deal with a blacklist issue? I notified you last week stating that we were put on your blacklist and requested to be taken off with an explanation of why this action was taken. I received a reply email giving no explanation but that we would be taken off within 72 hours. It's been well over 72 hours and the problem still persists. I have tried calling received no help. And now I can't email you. Why? Because we've has been blacklisted. Thank you. ______________________________________________ Kenneth Budd | 702 Main Ave Data Systems Engineer | Moorhead, MN 56560 702 Communications | phone# 218.284.5702 ~~CCNA - MCSE~~ | Fax# 218.284.5746 http://www.702com.net ______________________________________________ "I'd rather try and fail, than do nothing and succeed" - Robert Schuller -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQA/AwUBP9ngpP1D1N+hTR4dEQJkDACg43FGmQLk/vOFgddLloQBIV5fJ84An2pM 45FpbhA/f8QryUZeKvyY4Lnc =BC7G -----END PGP SIGNATURE-----

1 0

AS Path Loops in practice ?
by Jaideep Chandrashekar 12 Dec '03

12 Dec '03

Hi. Apologies if this posting is off topic. I'd observed some loops in the AS Paths as seen by the Route-Views routeserver. In one particular snapshot -- about 2% of the paths involved such loops. Here are some examples.....(taken from route-views). 11608 2914 1239 12064 22773 12064 11836 1221 4637 1239 12064 22773 12064 11836 1224 38 7228 1239 12064 22773 12064 11836 1239 12064 22773 12064 1239 12064 22773 12064 11836 19092 3356 1299 766 288 766 3356 1299 766 288 766 4181 3356 1299 766 288 766 6079 3356 1299 766 288 766 8220 1 3356 701 668 5058 48 3356 RFC 1771 has the following to say: ----------------------------- 9.3 Route Selection Criteria Generally speaking, additional rules for comparing routes among several alternatives are outside the scope of this document. There are two exceptions: - If the local AS appears in the AS path of the new route being considered, then that new route cannot be viewed as better than any other route. If such a route were ever used, a routing loop would result. ------------------------------ So it seems to me that these paths violate the BGP spec. Can anybody comment about whether these paths are in fact valid. Are these used in specific settings by ISP's. Most of these loops are of length < 3, but there are also some that are really long (5-6). Looking closely at the shorter paths, I get the feeling that these loops are intentional, perhaps to acheive some traffic engineering goal. Note that we tried to traceroute along some of these loops, and in almost all the cases, there was no forwarding loop (so probably not a flaky route). What sort of situations would warrant these AS Path loops. From my understanding of the BGP decision process - routes that contain the current AS in the path are automatically excluded from the path selection process. Is this correct ? Any comments would be helpful. thanks. -jaideep

9 13

John Sidgmore
by Aviva Garrett 12 Dec '03

12 Dec '03

http://www.washingtonpost.com/wp-dyn/articles/A57933-2003Dec11.html John W. Sidgmore, 52, an executive whose company became the world's largest Internet access provider and who later presided over WorldCom Inc. as its bankruptcy case turned into the biggest in U.S. history, died Dec. 11 of complications of acute pancreatitis. ---------------------- Aviva Garrett Juniper Networks, Inc. (408) 745-2077

1 0

The Cidr Report
by cidr-report＠potaroo.net 12 Dec '03

12 Dec '03

This report has been generated at Fri Dec 12 21:47:24 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 05-12-03 128663 90423 06-12-03 128656 90356 07-12-03 128631 90247 08-12-03 128530 90341 09-12-03 128679 90366 10-12-03 128743 90273 11-12-03 128672 90436 12-12-03 128773 90445 AS Summary 16242 Number of ASes in routing system 6471 Number of ASes announcing only one prefix 1396 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 74639616 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 12Dec03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 128972 90500 38472 29.8% All ASes AS6197 800 306 494 61.8% BATI-ATL BellSouth Network Solutions, Inc AS4134 610 121 489 80.2% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 676 207 469 69.4% TW-COMM Time Warner Communications, Inc. AS701 1396 962 434 31.1% ALTERNET-AS UUNET Technologies, Inc. AS7018 1390 962 428 30.8% ATT-INTERNET4 AT&T WorldNet Services AS7843 504 121 383 76.0% ADELPHIA-AS Adelphia Corp. AS6198 561 221 340 60.6% BATI-MIA BellSouth Network Solutions, Inc AS209 857 531 326 38.0% ASN-QWEST Qwest AS22909 321 13 308 96.0% DNEO-OSP1 Comcast Cable Communications, Inc. AS1239 963 673 290 30.1% SPRINTLINK Sprint AS22773 317 32 285 89.9% CCINET-2 Cox Communications Inc. Atlanta AS4355 383 101 282 73.6% ERMS-EARTHLNK EARTHLINK, INC AS27364 354 78 276 78.0% ACS-INTERNET Armstrong Cable Services AS1221 938 669 269 28.7% ASN-TELSTRA Telstra Pty Ltd AS17676 287 42 245 85.4% GIGAINFRA Softbank BB Corp. AS6347 329 85 244 74.2% DIAMOND SAVVIS Communications Corporation AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6140 346 132 214 61.8% IMPSAT-USA ImpSat AS14654 202 2 200 99.0% WAYPORT Wayport AS9583 248 55 193 77.8% SATYAMNET-AS Satyam Infoway Ltd., AS11305 230 37 193 83.9% INTERLAND-NET1 Interland Incorporated AS2386 403 219 184 45.7% INS-AS AT&T Data Communications Services AS4519 194 13 181 93.3% MAAS Maas Communications AS6327 204 28 176 86.3% SHAW Shaw Communications Inc. AS20115 581 413 168 28.9% CHARTER-NET-HKY-NC Charter Communications AS2048 250 84 166 66.4% LANET-1 State of Louisiana AS9929 199 34 165 82.9% CNCNET-CN China Netcom Corp. AS6478 203 39 164 80.8% ATT-INTERNET3 AT&T WorldNet Services AS15270 204 41 163 79.9% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. AS1761 177 25 152 85.9% TGSCNET General Services Commission Total 14370 6262 8108 56.4% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.62.64.0/24 AS3549 GBLX Global Crossing 64.62.126.0/23 AS25700 SWIFTDESK SWIFTDESK VENTURE 66.41.192.0/18 AS13367 CCCH-AS3 Comcast Cable Communications Holdings, Inc 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.143.2.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 AS719 LANLINK autonomous system 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.0.180.0/24 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.4.252.0/22 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.72.112.0/22 AS22351 INTELSAT-1 INTELSAT 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.179.64.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.65.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.66.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.67.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 202.179.68.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 203.29.222.0/24 AS22934 EBROADBANDNOW E Broadband Now Inc. 203.32.4.0/23 AS7617 APNIC-AS-2-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.132.95.0/24 AS9787 CONCEPT-AU-AP Concept Networks 203.132.97.0/24 AS7652 VIANET-AS-AP Vianet Communications Pty Ltd 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.112.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.125.0/24 AS4817 TECHEX1-AS-AP Techex Primary Netblock 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 TELEGLOBE-AS Teleglobe Inc 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.36.46.0/24 AS7176 GENUITY-AS7176 Genuity 216.36.47.0/24 AS7176 GENUITY-AS7176 Genuity 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 218.211.0.0/16 AS4788 TMNET-AS-AP TMnet, Telekom Malaysia Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Former WorldCom C.E.O. John Sidgmore Dies at 52
by joe mcguckin 11 Dec '03

11 Dec '03

(From the New York Times) WASHINGTON (AP) -- John Sidgmore, the WorldComexecutive who helped reveal the accounting troubles that led to the biggest bankruptcy filing in U.S. history, died Thursday at 52. He died of complications associated with acute pancreatitis, said B. Jay Cooper, a family spokesman. http://www.nytimes.com/aponline/business/AP-Obit-Sidgmore.html

1 0

Microsoft Probes Flaw That Could Help Fraudsters Create Fake Web Sites
by Mike Tomasura 11 Dec '03

11 Dec '03

Did anyone else see this? http://www.secunia.com/internet_explorer_address_bar_spoofing_test http://news.google.com/url?ntc=0M4C0&q=http://www.informationweek.com/story/ showArticle.jhtml%3FarticleID%3D16700218

4 3