April 2003 - Test - lists.nanog.org

RE: Re: Get as much IP space as you ever dreamed of, was: Re: Looking to buy IPv4 addresses from class C swamp
by Stewart, William C (Bill), RTSLS 01 May '03

01 May '03

[Let's try this again without fat-fingering the Send button :-)] Seems like an obvious case for using IPv6. RFC2373 site-local addresses assign a /48, with 16 bits of subnet ID and 64 bits of host ID. The average location probably doesn't have 2**16 extranets on one DMZ; picking a random value usually yields one that nobody you're talking to is also talking to, so almost nobody needs to use NAT for this kind of thing, assuming you plan to tunnel them.

5 5

RE: Get as much IP space as you ever dreamed of, was: Re: Looking to buy IPv4 addresses from class C swamp
by McBurnett, Jim 30 Apr '03

30 Apr '03

Better yet... Have then redistribute to Rob via a private AS and an access-list that could be pushed out via TACACS etc.. HMM Thoughts anyone? Jim >-----Original Message----- >From: Jack Bates [mailto:jbates@brightok.net] >Sent: Monday, April 28, 2003 6:33 PM >To: McBurnett, Jim >Cc: Stephen Sprunk; Daniel Golding; Kai Schlichting; North American >Noise and Off-topic Gripes >Subject: Re: Get as much IP space as you ever dreamed of, was: Re: >Looking to buy IPv4 addresses from class C swamp > > >McBurnett, Jim wrote: > >> Better IDEA: >> Rob can you add them to the BOGON Filters? >> >> What a wakeup call that would be.... >> Maybe... >> > >Actually, that would be something to push. Get companies that don't >route their addresses publicly to declare it and work with Rob to make >sure they are on the BOGON list. > >-Jack > >

19 27

RE: Open relays and open proxies
by McBurnett, Jim 30 Apr '03

30 Apr '03

Nathan, tell me, If I am a disgruntled former employee, and I decide my best method of revenge is to use a forging spam app to send out False advertisements about your company, how does that fit into you thoughts? Jim > >Why yes, yes it does. > >Why exactly should you be able to profit from spamming without hassle >or reproach? > >If you dislike being complained to because your customers are >spamming, your options are clear: ignore the complaints (in which case >the issue will certainly be taken up with your upstream providers), or >stop taking the spammers' money. > >Spam does not exist in a vacuum. It's an economy like any other, and >someone who hosts the spammers' sites is very much an active >participant. > >As Joe-Bob Briggs says, "I'm surprised I have to explain this." > >-n >

2 1

Open relays and open proxies
by Adi Linden 30 Apr '03

30 Apr '03

I am seeing an increasing number of hosts on our network become an open proxy. So far the response to this has been reactive, once I receive complaints from spam victims I deal with the source of the problem. Is there an accepted way of blocking open proxy and open relay traffic at the network edge? Adi

22 37

mobile.att.net dead
by Kai Schlichting 30 Apr '03

30 Apr '03

If you are relying on AT&T's paging/SMS service (for your phones) to be alerted to (most certainly undesirable) operational events (or if you are replying to them via the 2-way SMS service), this is a good time for a backup pager: mesdns02.mobile.att.net. 22h3s IN A 199.88.234.125 mesdns01.mobile.att.net. 22h3s IN A 199.88.234.61 Both are dead like a door stop, and we can speculate on wether they are located in the same physical building, on the same routed interface, and the same physical switch, which failed the single processor blade driving both of them. I have pagers in my queue that are now more than 65 minutes old.

4 4

Looking to buy IPv4 addresses from class C swamp
by Bill Mojo 30 Apr '03

30 Apr '03

Our client wants to purchase a number of IPv4 addresses. Yes we know ARIN allocates them but many people have had problems routing the new addresses and we don't have the time for those sort of problems. If you have arpas for sale get in touch. Bill Study Business at USQ's Australian Graduate School of Business. http://www.usq.edu.au/faculty/business/usqagsb/

14 19

RE: Get as much IP space as you ever dreamed of, was: Re: Looking to buy IPv4 addresses from class C swamp
by Temkin, David 30 Apr '03

30 Apr '03

And something else a lot of people tend to forget - just because space isn't in the tables doesn't mean it's not in use. There are companies that connect to thousands of other companies (see the financial markets) that require unique addressing between companies with non-colliding address ranges. 10.x.x.x doesn't quite cut it. -DT -----Original Message----- From: Stephen Sprunk [mailto:stephen@sprunk.org] Sent: Monday, April 28, 2003 6:01 PM To: Daniel Golding; Kai Schlichting Cc: North American Noise and Off-topic Gripes Subject: Re: Get as much IP space as you ever dreamed of, was: Re: Looking to buy IPv4 addresses from class C swamp Thus spake "Daniel Golding" <dgold(a)FDFNet.Net> > ARIN needs to repo any space that has [not] been advertised for a > reasonable length of time, and reissue it. So you're claiming that ARIN should revoke any allocations, including those made before it came into existence, simply because the addresses aren't in the global tables? If that's the position of the community, that's a drastic change from assertions made in the IETF WGs and may affect address allocation guidelines and even some protocol work. S Stephen Sprunk "God does not play dice." --Albert Einstein CCIE #3723 "God is an inveterate gambler, and He throws the K5SSS dice at every possible opportunity." --Stephen Hawking IMPORTANT:The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

10 21

Re: mobile.att.net dead
by Alex Rubenstein 30 Apr '03

30 Apr '03

Yes, SkyTel^H^H^H^H^H^HMCI does have clueful folks -- they were one of the last paging companies we dealt with. Also on the very clued side, believe it or not, was Sprint Paging (dunno if they are around anymore) who resold PageNET, and recently, for us, TSR Wireless had extremely good service, and an unlimited paging product. On Wed, 30 Apr 2003, Vincent J. Bono wrote: > Skytel does both SNPP and TAP. > > We use them both, plus their tech staff were very helpful. > > -vb > > ----- Original Message ----- > From: "Alex Rubenstein" <alex(a)nac.net> > To: <jspam(a)netbahamas.com> > Cc: "Kai Schlichting" <kai(a)pac-rim.net>; <nanog(a)merit.edu> > Sent: Wednesday, April 30, 2003 8:27 AM > Subject: Re: mobile.att.net dead > > > > > > > > OK, perhaps > > > > > > Back in the day when we had pagers (they still make those?), we'd find > > > > that emailing things to pagers wasn't the brightest idea around. > > > > should have read > > > > > > Back in the day when we had pagers (they still make those?), we'd find > > > > that USING IP to ACCESS OUR pagers wasn't the brightest idea around. > > > > > > On Wed, 30 Apr 2003, jspam(a)netbahamas.com wrote: > > > > > If you have a clueful paging provider, they should let you do SNPP. > Think > > > of it as TAP over IP. > > > > > > http://www.snpp.info/ > > > > > > > > -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- > > -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net -- > > > > > -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --

1 0

Re: The in-your-face hijacking example, was: Re: Who is announcing bogons?
by Hank Nussbacher 30 Apr '03

30 Apr '03

At 06:09 AM 30-04-03 +0000, Christopher L. Morrow wrote: >That may be true, but what does a provider do when they are presented with >written 'authority to use address space' from a customer? Certianly if the >customer provides 'proper' documentation that the ip space is available >for them to route, and that they have authority from the 'owner' to do >this... what is an ISP to do? Aside from route the blocks? Just had a case today where a downstream "clueless" tier-4 ISP got a new customer. The "clueless" customer wants his /24 to be announced. We asked for proof of ownership. Clueless customer sends official letter to clueless tier-4 ISP, who tells us "route it now!" We do a check in APNIC and see it is part of a larger /19 assigned to someone else (probably clueless's customer former upstream ISP). We told clueless tier-4 ISP that we can't announce the /24. I am now waiting for an email stating "but Bulbul ISP never checked APNIC, so why should you?" These battles are won slowly and one at a time. -Hank

1 0

Re: Missing registrations (when is a bogon not a bogon)
by Hank Nussbacher 30 Apr '03

30 Apr '03

At 11:38 PM 29-04-03 -0400, Sean Donelan wrote: >Based on the e-mail I got, I think several people missed Hank Nussbacher >and Barry Greene's presentation at the last NANOG. We got a new volunteer, Terry Baranski to help out with the load. >http://www.nanog.org/mtg-0302/ppt/hank.pdf > >In the presentation they list several ASN and Network blocks in use, but >not registered in any database. We just got Lucent to correct their announcements. They had been announcing: Network Origin AS Description 135.0.0.0/13 10455 Lucent Technologies and with the help of Internap they have now fixed their announcement to comply with what appears in ARIN. >The US Department of Defense (AS 568) wins the prize for the most >unregistered network blocks being announced. But they weren't alone. If anyone can help out here - it would be appreciated. We have been sending emails to anyone and everyone in AS568 since January - all of them generating not a single reply. So if the US Military can hijack a few IPs, we will have a hard time convincing spammers and their shills to stop hijacking other available address space: Network Origin AS Description 132.0.0.0/10 568 DISO-UNRRA 137.0.0.0/13 568 DISO-UNRRA 158.0.0.0/13 568 DISO-UNRRA 192.153.136.0/21 568 DISO-UNRRA 192.172.0.0/19 568 DISO-UNRRA >If you are going to start blackholing unregistered network blocks, I >suggest checking if the current user has nuclear weapons. But once again, >which ISP's aren't filtering? Obviously, there are some since we do see these announcements pop up here and there. -Hank

1 0