April 2004 - Test - lists.nanog.org

Re: Lazy network operators
by Paul Vixie 16 Apr '04

16 Apr '04

> On the other hand, we've had DDoS prevention mechanisms (based on > multiple rate-limiters, for different kinds of packets) deployed for > over 6 months now. They seem to work just fine, are always active, > and require no state in the network. you know how to rate-limit without state in the network? please explain.

2 1

NSP-SEC BOF CFP
by Danny McPherson 16 Apr '04

16 Apr '04

Folks, Merike & I are chairing the NSP-SEC BOF at NANOG in SF in a few weeks. Anyone with topics you'd like to see discussed, or topics you'd like to discuss, please let us know ASAP. Thanks! -danny & merike

2 1

The Cidr Report
by cidr-report＠potaroo.net 16 Apr '04

16 Apr '04

This report has been generated at Fri Apr 16 21:44:13 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 09-04-04 133208 93271 10-04-04 133231 93284 11-04-04 133153 93021 12-04-04 133240 93272 13-04-04 133257 93290 14-04-04 133326 93436 15-04-04 133395 93472 16-04-04 133338 93463 AS Summary 16945 Number of ASes in routing system 6817 Number of ASes announcing only one prefix 1416 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 73611264 Largest address span announced by an AS (/32s) AS568 : DISOUN DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 16Apr04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 133415 93537 39878 29.9% All ASes AS4134 695 139 556 80.0% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 709 199 510 71.9% TWTC Time Warner Telecom AS7018 1416 985 431 30.4% ATTW AT&T WorldNet Services AS7843 533 113 420 78.8% ADELPH-13 Adelphia Corp. AS6197 685 301 384 56.1% BNS-14 BellSouth Network Solutions, Inc AS27364 405 33 372 91.9% ARMC Armstrong Cable Services AS701 1297 934 363 28.0% UU UUNET Technologies, Inc. AS22909 382 31 351 91.9% CMCS Comcast Cable Communications, Inc. AS6198 562 226 336 59.8% BNS-14 BellSouth Network Solutions, Inc AS9583 436 116 320 73.4% SATYAMNET-AS Satyam Infoway Ltd., AS22773 359 40 319 88.9% CXAB Cox Communications Inc. Atlanta AS9929 338 31 307 90.8% CNCNET-CN China Netcom Corp. AS1239 944 641 303 32.1% SPRN Sprint AS4355 384 99 285 74.2% ERSD EARTHLINK, INC AS6140 379 111 268 70.7% IMPSA ImpSat AS17676 307 45 262 85.3% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS6478 293 44 249 85.0% ATTW AT&T WorldNet Services AS209 761 520 241 31.7% QWEST-4 Qwest AS1221 865 631 234 27.1% ASN-TELSTRA Telstra Pty Ltd AS6347 376 145 231 61.4% SAVV SAVVIS Communications Corporation AS25844 243 17 226 93.0% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS14654 226 4 222 98.2% WAYPOR-3 Wayport AS11305 241 31 210 87.1% INTERL-80 Interland Incorporated AS3356 895 692 203 22.7% LEVEL3 Level 3 Communications AS4766 454 253 201 44.3% KIX Korea Internet Exchange for "96 World Internet Exposition AS9443 358 169 189 52.8% INTERNETPRIMUS-AS-AP Primus Telecommunications AS2386 432 244 188 43.5% ADCS-1 AT&T Data Communications Services AS4519 205 22 183 89.3% MAASCO Maas Communications AS6327 206 28 178 86.4% SHAWC-2 Shaw Communications Inc. AS20115 584 409 175 30.0% CC04 Charter Communications Total 15970 7253 8717 54.6% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 60.254.0.0/20 AS23889 MAURITIUS-TELECOM-AS-AP MAURITIUS TELECOM 64.22.0.0/18 AS3561 CWU Cable & Wireless USA 64.46.0.0/18 AS7850 IHIGHW iHighway.net, Inc. 64.46.4.0/22 AS11711 TULARO TULAROSA COMMUNICATIONS 64.46.12.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.46.34.0/24 AS3408 64.46.60.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.63.0/24 AS7850 IHIGHW iHighway.net, Inc. 66.51.128.0/20 AS23401 NAC Net Access Corporation 66.51.140.0/24 AS23401 NAC Net Access Corporation 66.114.0.0/19 AS16526 BIRCHT Birch Telecom, Inc. 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS568 DISOUN DISO-UNRRA 137.0.0.0/13 AS568 DISOUN DISO-UNRRA 138.136.0.0/13 AS568 DISOUN DISO-UNRRA 158.0.0.0/13 AS568 DISOUN DISO-UNRRA 160.213.112.0/20 AS25440 INFONET-NESTLE Nestle European Data Center 160.213.240.0/20 AS25440 INFONET-NESTLE Nestle European Data Center 164.234.0.0/16 AS721 DNIC DoD Network Information Center 164.234.0.0/18 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 DISOUN DISO-UNRRA 192.172.0.0/19 AS568 DISOUN DISO-UNRRA 192.188.208.0/20 AS568 DISOUN DISO-UNRRA 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS568 DISOUN DISO-UNRRA 198.97.80.0/20 AS568 DISOUN DISO-UNRRA 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.192.0/20 AS568 DISOUN DISO-UNRRA 198.97.240.0/20 AS568 DISOUN DISO-UNRRA 198.101.4.0/22 AS568 DISOUN DISO-UNRRA 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS568 DISOUN DISO-UNRRA 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.84.0.0/16 AS701 UU UUNET Technologies, Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS568 DISOUN DISO-UNRRA 199.114.128.0/18 AS568 DISOUN DISO-UNRRA 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 DISOUN DISO-UNRRA 199.123.0.0/18 AS568 DISOUN DISO-UNRRA 199.123.16.0/20 AS568 DISOUN DISO-UNRRA 199.123.80.0/21 AS568 DISOUN DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.197.8.0/22 AS21814 PARSON-18 Parsons Corp. 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.2.64.0/20 AS9729 IS-AP iAdvantage Limited 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.142.0/24 AS30362 HAWAI-1 Hawaii-Pacific Teleport 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.123.96.0/20 AS9288 COMCEN-AS-AP Com-Cen Pty Ltd 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.155.243.0/24 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 204.69.144.0/22 AS5668 CIH-12 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 205.159.72.0/24 AS1660 ANSCOM-5 ANS Communications 206.41.32.0/19 AS14824 NCC-105 NewSouth Communications Corp. 206.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 206.253.190.0/23 AS8123 POLYBA Polybase 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.169.219.0/24 AS189 GNTY Genuity 209.169.223.0/24 AS189 GNTY Genuity 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.51.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.55.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.56.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL-33 Telesat International Ltd. 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 209.251.64.0/19 AS10266 MDCN MDC, Inc. 210.213.0.0/19 AS6453 GLOBEINTERNET Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.130.0/24 AS11937 TRXI TRX Inc. 216.145.132.0/24 AS11937 TRXI TRX Inc. 216.145.133.0/24 AS11937 TRXI TRX Inc. 216.145.134.0/24 AS11937 TRXI TRX Inc. 216.145.135.0/24 AS11937 TRXI TRX Inc. 216.145.152.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/19 AS3561 CWU Cable & Wireless USA 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: SORBS Insanity
by Matthew Sullivan 15 Apr '04

15 Apr '04

Jeremy Kister wrote: >Hi Matthew, > >I highly appreciate your time in replying to my emails. I further >appreciate you removing 64.115.0.0/16 from the sorbs duhl. > >One of my partners in crime sent the first email (via web-form) to sorbs on >April 6th. On april 10th, I repeated. both were addressed from >abuse(a)broadviewnet.net. I havent received anything further about these. > Most of the time we investigate them first - if the contact is from the RIR PoC we contact them immediately (as soon as we get to the ticket of course) >On april 11th i helped a friend who is using 64.115.47.0/24 by filling out >the web-form, addressed from sorbs.net(a)jeremykister.com. i received >sorbs.net # 5799 on this. but again, this was only for that /24. > That's the one that I saw. >on april 13th at about 7pm, i sent the following email to duhl(a)sorbs.net >from jkister(a)broadviewnet.net > Ok didn't see this one - but it depends on the subject - I searched on the IP in the subject in this case. >>true dynamic ranges out of the 64.115.0.0/16 are: >> >> <snip> Got them and fixed up the DUHL. >>to prevent further hysteria, dns now shows >>"static-64-115-x-x.isp.broadviewnet.net". it would have been quite >>simple to send an email to {abuse,ipadmin,isp-noc}(a)broadviewnet.net >>(as listed in ARIN lookup), call our support line (as listed in ARIN, >>whois, and our web site), or send us a letter (as listed on our web site, >>and whois information) to confirm your unfounded opinions about our >>network. Next time, you should give it a try; you may not receive such >>emotional emails from frustrated Systems Engineers trying to deal with >>worthless projects ran by ignorant half-wits. >> >As you can see I was quite frustrated at the time, and may have been a bit >harsh. At that point i was dealing with the problem for 10 days -- and saw >no end in sight. > End is awlways in sight, unfortunately not fast enough for some people - there is always the option of mailing me direct - the problem is (as always) I am probably the most busiest person at SORBS and have the least time to deal with tickets - the last 48-72 hours have have left me with time to answer 3 tickets. All done now, I'll fix up the ticket closures when I get a chance. Yours Mat

1 0

Gambling on power: Learning lessons
by Sean Donelan 15 Apr '04

15 Apr '04

The power at the Bellagio failed for about three days. The failure involved about 1,000 feet of internal primary power cable. Although the Bellagio had emergency and backup power, because it was an internal cable, the backup generators couldn't supply power either. The Las Vegas Sun has one of the best general media coverage I've seen of a technical issue involving power failures. Some data centers and colo facilities would be vulnerable to the same type of problem. Its difficult and expensive to protect against everything in a single location. Geographic diversity is almost always and advantage. http://www.lasvegassun.com/sunbin/stories/gaming/2004/apr/15/516694304.html The power outage that shut down the Bellagio and caused the evacuation of thousands of employees and customers could happen at any resort on the Las Vegas Strip and at any time, Clark County's top building inspector said Wednesday.

1 0

Lazy network operators
by Chris Boyd 15 Apr '04

15 Apr '04

NTL World no longer accepts abuse@ email. You have to go to a web form that requires javascript be enabled and enter all of the information for them. I guess that they got tired of processing the the abuse@ mail load and just bit bucketed it. From the email I got back from them: Please note that we no longer accept any network abuse reports at this address. Any reports must be submitted by using the following web form: http://www.ntlworld.com/netreport Any reports sent to this email address will not be read and will be automatically deleted. -- Will do networking for PowerMac G5 dual 2GHz. Outlook, the exploding Pinto on the information superhighway. - Sean Donelan Chris Boyd

27 50

Re: Lazy network operators
by Miquel van Smoorenburg 15 Apr '04

15 Apr '04

In article <cistron.407CDBCC.60004(a)he.iki.fi>, Petri Helenius <pete(a)he.iki.fi> wrote: > >Paul Vixie wrote: > >>that's somewhat the opposite of empowerment. if a "spam solution" can >>take away that crisis and the expense is that my dsl-connected end host >>has to tunnel its e-mail to someplace out in <www.vix.com/personalcolo> >>then that's a tradeoff i can live with. >> >> >> >You, sure, how about the people who are not really computer literate and >use SMTP AUTH to send their mail from various places? Remember that >convinience almost always outweighs security with the general >population. If it wouldnŽt, the ICT market would not look like it looks >today. That was solved 6 years ago. You let them use port 587 instead of 25. http://www.faqs.org/rfcs/rfc2476.html Mike.

8 9

Re: Lazy network operators
by Stewart, William C (Bill), RTSLS 15 Apr '04

15 Apr '04

As far as your own incoming mail is concerned, you get the same results by either requiring almost every ISP in the world to block outgoing SMTP from almost all of their users, or by using a blocking list that blocks the same users. The blocking list approach preserves the end-to-end behavior of the Internet, and lets the end users decide whose opinions to follow about which Internet users are first-class citizens vs. second-class citizens. Of course, I was planning to write that comparison before the recent complaints about how bad a job SORBS is doing on deciding who to block. :-) But it's still equivalent. If an ISP wants to be "responsible" about preventing untrustworthy users from sending SMTP that bothers people, they can contribute to blocking lists rather than dropping the users' packets, and the blocking lists can provide some convenient mechanism for the ISPs to update them. Where the two approaches diverge is that the recipient-based approaches can also support whitelists, either individually run or shared exception systems such as Habeas or bonded sender things, while the ISP-blocking approach isn't something you can easily override, except by doing tunneling or other protocol-heavy workarounds. Bill Stewart, bill.stewart(a)pobox.com

2 1

SORBS Insanity
by Jeremy Kister 15 Apr '04

15 Apr '04

I became aware that just about all of 64.115.0.0/16, a network that I (among others) run, has been listed as "dynamic ip space" in sorbs as of April 2nd. On April 6th I sent my first email (via web-form) to sorbs telling them they were mistaken. Finding no documentation on how they deem networks "dynamic" or "static" I changed my rDNS scheme from ppp-64-115-x-x to 64-115-x-x Note to all: "ppp" in no way signifies dial-up; we run ppp over almost every circuit we have -- from dialup to OC12, to Ethernet and ATM. I also stated how all of our network was scanned twice a day for open-relay mail servers. Being a bigish ISP, we are _huge_ on our abuse policies, and our abuse bucket [usually] has only memories of tumbleweed blowing by. On april 10th I again wrote, only to be ignored further. Yesterday, April 13th, One of my customers opened a trouble ticket stating that he had successfully received a response from SORBS, and had forwarded me the conversation. I sent an email to duhl(a)sorbs.net (the author of the email) quoting what they had written one of my customers. They said to my customer that I had to either provide custom reverse DNS for each customer who was not dynamic, or I had to provide sorbs with POCs for all my non-dynamic customers. I stated how this was absurd, and that there was already a functioning medium for this task -- rwhois. In this same email, I also stated: 1. exactly which 64.115 networks were dynamic 2. that to prevent further hysteria, I had changed the reverse dns from ppp-64-115-x-x to static-64-115-x-x and dynamic-64-115-x-x, respectively. 3. their blindness was very unprofessional, deeming SORBS a Worthless Project ran by Ignorant Half-Wits As of this date I have not received a response from anyone at sorbs, and do not expect one. Our support crew is overwhelmed with upset customers who cant send email to their associates. Our only response to them is that we have tried to resolve the issue, but could not, and that the remote ISP should stop using sorbs. I am upset that they blindly blacklisted most of 64.115.0.0/16 because some of the reverse dns was generic. 64.115.47.0/25, for example, hasnt very much generic rDNS at all, but was blacklisted just the same. I hope all stop using SORBS. I especially hope Mr. Vixie reconsiders his helpfulness to such a harmful organization. For google: <a href="http://www.sorbs.net">A Worthless Project</a> Jeremy Kister www.jeremykister.com/jeremy/ Argus: The World's Most Advanced Monitoring Software: http://argus.tcp4me.com

5 7

RE: Lazy network operators
by Michel Py 14 Apr '04

14 Apr '04

> Paul Vixie wrote: > (dunno if you heard, but in spite of 128 bits of address space, > the enterprise user community is now asking for IPv6 NAT.) Not exactly, as most enterprise operators avoid NAT like the plague when they have a choice. Address scarcity has never been an operational problem in the enterprise and in fact, what the enterprise user community is asking for is not NAT but what NAT provides which is mostly two things: a) portable and stable address space and b) scoped addresses. Since they can't get either one with IPv6 they fall back to the next best thing which is NAT, despite its loads of problems. If they ever deploy IPv6, that is. Michel.

1 0