April 2005 - Test - lists.nanog.org

IX Panel for Seattle
by Malayter, Christopher 18 Apr '05

18 Apr '05

Good Morning Nanog! I am looking for IX Operators of small to medium size, or that of regional scope of interest, or perhaps a naps offering unusual services to present at NANOG-SEA. After Las Vegas, I'm looking for a change of direction to get some new blood in. Smaller, perhaps member based, or not. Please email me with your interest. I need emails in the next 3-5 days with slides 3-5 days after. Thanks! Chris Malayter TDS Telecom - Network Services Data Network Engineering chris.malayter(a)tdstelecom.com Phone: (608) 664-4878 FAX: (608) 664-4644

1 0

RE: OpenTransit (france telecom) depeers cogent
by John van Oppen 18 Apr '05

18 Apr '05

All, Here is an output of show ip bgp regexp _5511_ on my cogent facing router (ie with a full cogent feed)... Most of the prefixes with best paths that are not through cogent don't exist in my cogent route feed at all (even via a non FT path). It looks like things are still a bit wonky. http://as23265.net/cogent.txt Thanks, John van Oppen PocketiNet Communications AS23265 -----Ursprüngliche Nachricht----- Von: Patrick W. Gilmore [mailto:patrick@ianai.net] Gesendet: Sunday, April 17, 2005 10:26 PM An: nanog(a)merit.edu Cc: Patrick W. Gilmore Betreff: Re: OpenTransit (france telecom) depeers cogent On Apr 17, 2005, at 11:16 PM, Patrick W. Gilmore wrote: > On Apr 17, 2005, at 10:49 PM, John van Oppen wrote: > > >> As a cogent customer, I still see no routes to 217.167.0.0/16 (the >> route that holds www.francetelecom.com) via my cogent feed. >> >> That /16 also appears to be unreachable from the looking glass on >> cogent's website still. >> > > I can trace from Cogent to FT just fine. > > Haven't checked all possible end points, but my spot check shows > connectivity. Replying to my own post, I still see some Cogent <-> FT strangeness. Tracing to www.opentransit.net works fine, but www.fracetelecom.com dies on the first hop. Spot checking other IPs in FT, they seem to work. Is it just the 'fracetelecom.com' sub-network that is still not connected? Anyone have any more info? -- TTFN, patrick

2 1

BCP for ISP to block worms at PEs and NAS
by Kim Onnel 17 Apr '05

17 Apr '05

Hello, Can someone confirm if my approach explained below is sufficient and if there is other/better ways to do this ? something i am missing. On my Cisco-based SP network with RPMs in MGX chassis acting as PEs: I have the ACL below applied on many network devices to block the common worms ports, On the NAS, i have placed the worm on the Group-Async interfaces so the worms will not propagate between user who dial up on the same NAS, and on the uplink ethernet interface.(in and out) On the PEs, i have placed it on the interface switches for the customers and on the uplink too, and then on the aggregating routers and on the gateway for all these. ip access-list extended worms deny tcp any any eq 5554 deny tcp any any range 135 139 deny udp any any range 135 netbios-ss deny tcp any any eq 445 deny udp any any eq 1026 permit ip any any Regards

8 16

Topics for NANOG 34
by Steve Feldman 17 Apr '05

17 Apr '05

Greetings - here are the topics we've lined up so far for Seattle. Keep an eye out as we post additional talks: http://www.nanog.org/mtg-0505/topics.html Also, just a quick reminder that the registration fee goes up $50 on Monday, April 25, and our hotel room block rate expires on April 27. TUTORIALS --------- - Challenges in Network Security Protocols Level: Introductory Radia Perlman, Sun - Bridges, Routers, Switches, Oh My! Level: Introductory Radia Perlman, Sun - Best Practices for Determining the Traffic Matrix in IP Networks Level: Intermediate Thomas Telkamp, Cariden - BGP Techniques for Service Providers Level: Introductory/Intermediate Philip Smith, Cisco SUNDAY EVENING COMMUNITY MEETING ------------------------------- - A follow-up to our meeting in Las Vegas (see http://www.nanog.org/mtg-0505/coordination.html) Please join us! GENERAL SESSION --------------- - DNS Anycast Stability Daniel Karrenberg, RIPE - Design Decisions and Architecture Analysis of a Global 10G Backbone (We Do it, so You Don't Have To) Vijay Gill, Time Warner - Securing Carrier VoIP: Session Border Control Hadriel Kaplan, Avici - Anatomy of a Leak: AS9121 (or, "How We Learned To Start Worrying and Hate Maximum Prefix Limits") Alin C. Popescu, Brian J. Premore, and Todd Underwood, Renesys - Building Nameserver Clusters with Free Software Joe Abley, ISC - Trust Reflection: A Distributed Approach to PGP Key Signing at Multi-Day Events Joe Abley, ISC - Anycast Measurements Used to Highlight Routing Instabilities Peter Boothe; Randy Bush, IIJ - Beyond 10 Gigabit Ethernet Neena Pemmaraju, Force10 - Internet Mini-Cores: Local Communications in the Internet's "Spur" Regions Steve Gibbard, PCH - The Spoofer Project: Inferring the Extent of Internet Source Address Filtering on the Internet Robert Beverly, MIT - Network-Wide Inter-Domain Routing Policies: Design and Realization Olaf Maennel, RIPE; Anja Feldmann and Christian Reiser, Technical University Munich; Ruediger Volk and Hagen Boehm, Deutsche Telekom BOFS ---- - ISP Security and NSP-SEC BOF IX - Peering BOF IX William B. Norton, Equinix, moderator - INOC-DBA BoF with INOC-DBA Operators Gaurab Raj Upadhaya, PCH, moderator

2 2

grrr
by Scott Grayban 17 Apr '05

17 Apr '05

If there are any eBay admin here please fix your spoof@ & abuse@ address because it is denying every spoof complaint sent to it. It constantly replies back "Your email has not been delivered" I dont understand why this company has to be so hard headed in abuse issues. -- Scott Grayban Security/Abuse Engineer FCT Enterprises -- www.fctsupport.com

7 6

ATT.net Security Contact
by Joseph W. Breu 17 Apr '05

17 Apr '05

Can someone from ATT.net security contact me offlist RE: our network in their RBL? -- Thanks, --------------------------------------------------------- Joseph W. Breu, CCNA phone : +1.319.268.5228 Senior Network Administrator fax : +1.319.266.8158 Cedar Falls Utilities cell : +1.319.493.1686 support: +1.319.268.5221 url : http://www.cfu.net

2 1

RE: cost of doing business (was:Re: OpenTransit (france telecom) depeers cogent)
by Malayter, Christopher 17 Apr '05

17 Apr '05

> -----Original Message----- > From: Mikael Abrahamsson [mailto:swmike@swm.pp.se] > Sent: Sunday, April 17, 2005 12:55 PM > To: Randy Bush > Cc: nanog(a)nanog.org > Subject: Re: cost of doing business (was:Re: OpenTransit > (france telecom) depeers cogent) > > > > On Sat, 16 Apr 2005, Randy Bush wrote: > > > fwiw, 100mb to the home costs about that in japan > > Well, I dont really see the average home actually using > 100meg all the > time in the near future, thus my 5 meg utilization average estimate. > Access could be whatever speed of course, access speed not > used doesn't > cost very much. I think you're very wrong here. For packet delivery of video based services, I could see a home using 100mb/s between voice, video, and data within the next 12-24 months. All of the product roadmaps I've been looking at contain "How to get 100mb/s to the home", "How do we push BRAS/Multicast deployment closer to the edge", "What is the roadmap for converged services past triple play?" Regards, Chris Malayter TDS Telecom - Network Services Data Network Engineering chris.malayter(a)tdstelecom.com Phone: (608) 664-4878 FAX: (608) 664-4644

2 1

RE: cost of doing business (was:Re: OpenTransit (france telecom) depeers cogent)
by Hannigan, Martin 17 Apr '05

17 Apr '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > jmalcolm(a)uraeus.com > Sent: Saturday, April 16, 2005 1:58 PM > To: nanog(a)nanog.org > Subject: cost of doing business (was:Re: OpenTransit (france telecom) > depeers cogent) > > > > Mikael Abrahamsson writes: > >So what will people do? Stop selling when their networks are > full? Ignore > >the economics and let other business carry the cost of bulk > internet? Go > >for cheaper platforms? Go bankrupt (if no other business can > carry the > >cost) ? > > This problem will be fixed when the excess capacity built in the > latter years of the boom is gone. That's not to say that the > adjustment won't be painful - I'm sure a few more provider failures > are in the offing - but obviously if the marginal price for bandwith > doesn't pay for the capital costs of expansion, either eventually > bandwidth will be more expensive, or the equipment will be cheaper. As long as the hardware can keep up, the amount of glass in spectrum in the ground should make this an impossibility for the near term, 10 years plus. -M<

2 1

Re: cost of doing business (was:Re: OpenTransit (france telecom) depeers cogent)
by Brandon Butterworth 17 Apr '05

17 Apr '05

> I'm sure a few more provider failures > are in the offing - but obviously if the marginal price for bandwith > doesn't pay for the capital costs of expansion, either eventually > bandwidth will be more expensive, or the equipment will be cheaper. Perhaps they aim to keep driving the competition out of business to ensure there's a cheap supply of equipment so they can grow whilst charging so little? brandon

2 1

Re: Memory leak cause of Comcast DNS problems
by Fergie (Paul Ferguson) 17 Apr '05

17 Apr '05

Regardless of whether it actually _was_ a memory leak, or not, it appears that the impact was on a rather large enough scale. - ferg -- Florian Weimer <fw(a)deneb.enyo.de> wrote: | The maximum amount of memory to use for the server's cache, in | bytes. [...] The default is unlimited, meaning that records are | purged from the cache only when their TTLs expire. The number of complaints I've heard that "DNS resolvers eat *so* much memory" suggests that few people tweak the default configuration. 8-( However, it's unlikely that this was the cause of Comcast's problems because DNS cache overflows would have an impact on a much larger scale. -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1