April 2007 - Test - lists.nanog.org

RE: Hotmail blackholing certain IP ranges ?
by Gabriel Kuri 25 Apr '07

25 Apr '07

I've had the same issue with hotmail when email originates from 208.127.57.0/24. any mail sent from a server within that netblock is properly accepted by hotmail, given a queue id, but disappears and is never delivered. if anyone from hotmail has a clue as to what's going on, it would be appreciated. thanks much ... ----- Gabriel Kuri | Sr. Network Analyst Instructional and Information Technology Division California State Polytechnic University, Pomona http://www.csupomona.edu/~iit | +1 909 979 6363 > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Jeroen Wunnink > Sent: Wednesday, April 25, 2007 11:22 AM > To: nanog(a)merit.edu > Subject: Hotmail blackholing certain IP ranges ? > > > Does anyone have a clue why hotmail is appearantly blocking > certain IP ranges ? > > I provided a new server for a customer in his own IP subnet which is > a part of a /20 we announce, but for some reason all mail sent to > @hotmail.com addresses disappears. > > He has another server in a /24 we announce which is still part of > another network and that works like a charm. > > None of our subnets are blacklisted in any spamfilter I can find, so > i'm a bit puzzeled on what's up here. > > If any hotmail netadmin is reading this list, can you please check if > 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 > originating from AS39556) > > According to the mailserver logs all the mail is properly accepted by > the hotmail relays, never to be seen again after that. > > > > Met vriendelijke groet, > > Jeroen Wunnink, > EasyHosting B.V. Systeembeheerder > systeembeheer(a)easyhosting.nl > > telefoon:+31 (035) 6285455 Postbus 48 > fax: +31 (035) 6838242 3755 ZG Eemnes > > http://www.easyhosting.nl > http://www.easycolocate.nl > > >

1 0

RE: Hotmail blackholing certain IP ranges ?
by Stasiniewicz, Adam 25 Apr '07

25 Apr '07

Jeroen, A quick check of those IPs shows that most don't have rDNS records. Make sure the A and PTR records for the mail server match the hostname it is using in the outbound SMTP session. Hope that helps, Adam Stasiniewicz ________________________________ From: owner-nanog(a)merit.edu on behalf of Jeroen Wunnink Sent: Wed 4/25/2007 1:22 PM To: nanog(a)merit.edu Subject: Hotmail blackholing certain IP ranges ? Does anyone have a clue why hotmail is appearantly blocking certain IP ranges ? I provided a new server for a customer in his own IP subnet which is a part of a /20 we announce, but for some reason all mail sent to @hotmail.com addresses disappears. He has another server in a /24 we announce which is still part of another network and that works like a charm. None of our subnets are blacklisted in any spamfilter I can find, so i'm a bit puzzeled on what's up here. If any hotmail netadmin is reading this list, can you please check if 81.26.212.0/26 is blocked in any way (It's part of 81.26.208.0/20 originating from AS39556) According to the mailserver logs all the mail is properly accepted by the hotmail relays, never to be seen again after that. Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer(a)easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl <http://www.easyhosting.nl/> http://www.easycolocate.nl <http://www.easycolocate.nl/>

1 0

Comcast blocking all Gmail!
by William Allen Simpson 25 Apr '07

25 Apr '07

Heads up on operational problem! ==== Subject: Delivery Status Notification (Failure) Date: Wed, 25 Apr 2007 06:56:24 -0700 (PDT) From: Mail Delivery Subsystem <mailer-daemon(a)googlemail.com> To: William.Allen.Simpson(a)gmail.com This is an automatically generated Delivery Status Notification Delivery to the following recipient failed permanently: XXXXXXXX(a)comcast.net Technical details of permanent failure: PERM_FAILURE: SMTP Error (state 8): 550 72.14.246.249 blocked by ldap:ou=rblmx,dc=comcast,dc=net -> BL004 Blocked for spam. Please see http://www.comcast.net/help/faq/index.jsp?faq=SecurityMail_Policy18628 ==== Mail to Comcast is rejected and is returned with an error message containing the code BL004. What does this mean? Our filters have determined that email from your mail server has been sent in patterns which are characteristic of spam. In an effort to protect subscribers, your mail server has been blocked from sending email to the Comcast network. Mail servers are typically shared by many users so it may be the case that another party using your mail server has sent spam, even if you have not. ....

3 2

BGP cost community
by Yi Wang 24 Apr '07

24 Apr '07

Hello, I know Cisco routers has the "BGP cost community" feature. Could anyone tell me whether Juniper and other router vendors offer same/similar feature? Thanks, Yi

1 0

Re: IP Block 99/8 (DHS insanity - offtopic)
by Scott Weeks 24 Apr '07

24 Apr '07

-------------Marcus H. Sachs wrote:------------ > Mr. Oquendo (I presume "Mr." but if it's "Ms." please accept my > apologies...), it appears that there is little common ground between you and > me. So, rather than stringing this out for the next several days and boring > everybody else to tears, I will say thanks for the "chat" and I look forward > to continuing this in person over a beer or other libation at some future > gathering. -------------------------------------------------- --- leigh.porter(a)ukbroadband.com wrote: : Don't forget to post to the list where you will do this so : I can come and watch ;-) ------------------------------------------------ Same here. Original challenge; challenge accepted; challenger backs out quickly. I want to see the answers. Not sure about the AUP, but this'd seem to affect all network operators, so if others here agree how about we continue the show here? >;-) scott

1 0

IP Block 99/8
by Shai Balasingham 24 Apr '07

24 Apr '07

Hi, I am Shai from Rogers Cable Inc. ISP in Canada. We have IP block 99.x.x.x assigned to our customers. Which happened to be bogons block in the past and was given to ARIN in Oct 2006. As we have recently started using this block, we are getting complains from our customers who are unable to surf some web site. After investigation we found that there are still some prefix lists/acls blocks this IP block. We own the following blocks: 99.224.0.0/12 99.240.0.0/13 99.248.0.0/14 99.252.0.0/16 99.253.128.0/19 Please update your bogons list. Shai. end

19 38

New AS Number Block allocated to the RIPE NCC
by Alex Le Heux 24 Apr '07

24 Apr '07

Dear Colleagues, The RIPE NCC received the AS Number Block 43008 - 44031 from the IANA in April 2007. You may want to update your records accordingly. Best regards, Alex Le Heux RIPE NCC

1 0

UK ISP threatens security researcher
by Gadi Evron 24 Apr '07

24 Apr '07

http://www.theregister.com/2007/04/17/hackers_service_terminated/ "A 21-year-old college student in London had his internet service terminated and was threatened with legal action after publishing details of a critical vulnerability that can compromise the security of the ISP's subscribers." I happen to know the guy, and I am saddened by this. Gadi.

19 31

Very high latency from Monaco377>CW>NTLWorld
by Alexander Harrowell 23 Apr '07

23 Apr '07

traceroute to 86.0.6.36 (86.0.6.36), 64 hops max, 40 byte packets 1 192.168.32.1 (192.168.32.1) 2.607 ms 1.162 ms 1.068 ms 2 netsgo-195-78-19-65.monaco377.com (195.78.19.65) 745.752 ms 608.475ms 639.013 ms 3 * netsgo-195-78-19-81.monaco377.com (195.78.19.81) 701.242 ms 579.526ms 4 195.78.8.1 (195.78.8.1) 466.199 ms 620.392 ms 645.002 ms 5 195.78.4.18 (195.78.4.18) 532.842 ms 534.536 ms 690.368 ms 6 * * * 7 so-5-2-0-dcr2.par.cw.net (195.2.10.94) 867.274 ms 582.233 ms 737.946ms 8 * so-0-0-0-dcr2.tsd.cw.net (195.2.10.138) 179.080 ms 642.880 ms 9 ntl-interconnect-lnd.cw.net (195.2.9.150) 690.381 ms 954.678 ms 817.904 ms 10 bre-bb-b-ge-000-0.inet.ntl.com (213.105.174.226) 717.548 ms 553.635ms 621.631 ms [snipped] WTF?

3 2

RE: IP Block 99/8
by David Lemon 23 Apr '07

23 Apr '07

All, Much appreciated for the support. Below are a few sites which we're having reachabliity issues to. If you operate one of these networks please check that you can see our allocated blocks and can trace to the following addresses: Allocated blocks: 99.224.0.0/12 99.240.0.0/13 99.248.0.0/14 99.252.0.0/16 99.253.128.0/19 /32's for traces: 99.245.135.129 99.246.224.1 99.244.192.1 lavalife.com AS 15290 Youtube.com AS 36561 Google.com AS 15169 RTSConsulting.com AS 7252 chatsuites.com AS 11595 www.cnn.com AS 1668 www.homedepot.ca Akaimai www.bia2music.com AS 3561 Nbc.ca AS 3848 Costco.ca AS 11283 WWW.ACANAC.C AS 33139 www.cnnsi.com AS 5662 skysport.com AS 4355 CBS.SPORTSLINE.COM AS 6641 www.liveworld.com AS 19148 ebay.com AS 11643 www.nascar.com AS 5662 www.zep.com AS 27584 Thanks in advance, -David -----Original Message----- From: Daniel J. Frasnelli [mailto:daniel.frasnelli@verizonbusiness.com] Sent: Monday, April 23, 2007 11:02 AM To: David Lemon Subject: RE: IP Block 99/8 David, Appears to be correct in our configurations and it passes my "traceroute inside AS701" test. Let me know if the problem appears to be with our public networks (701/702/703) and I'll route the issue appropriately. VR, Daniel J. Frasnelli <daniel.frasnelli(a)verizonbusiness.com> 22001 Loudoun County Parkway Ashburn, VA 20147 (+001) 703.886.5632 - office (+001) 571.594.7397 - mobile Verizon Business - Network & Information Security % traceroute -n 99.246.224.1 traceroute to 99.246.224.1 (99.246.224.1), 30 hops max, 40 byte packets [snip] 3 207.18.173.189 0.799 ms 0.500 ms 0.636 ms 4 152.63.34.166 0.734 ms 0.960 ms 0.569 ms 5 152.63.40.49 3.092 ms 3.454 ms 3.217 ms 6 152.63.38.117 3.018 ms 2.947 ms 3.160 ms 7 64.125.13.89 5.075 ms 4.826 ms 4.832 ms 8 64.125.30.113 4.956 ms 4.948 ms 5.027 ms 9 216.200.56.2 27.961 ms 28.020 ms 27.879 ms 10 66.185.80.189 27.939 ms 27.960 ms 27.851 ms 11 66.185.80.42 22.859 ms 22.784 ms 23.111 ms 12 66.185.81.62 26.379 ms 26.702 ms 26.643 ms 13 66.185.81.85 28.074 ms 28.094 ms 28.023 ms 14 64.71.241.70 28.087 ms 27.892 ms 28.068 ms 15 66.185.90.251 25.769 ms^C % traceroute -n 99.245.135.129 traceroute to 99.245.135.129 (99.245.135.129), 30 hops max, 40 byte packets [snip] 3 207.18.173.189 0.490 ms 0.439 ms 0.704 ms 4 152.63.34.158 0.818 ms 0.701 ms 0.572 ms 5 152.63.40.49 2.984 ms 3.129 ms 3.200 ms 6 152.63.38.117 3.097 ms 3.125 ms 2.873 ms 7 64.125.13.89 4.866 ms 5.290 ms 5.157 ms 8 64.125.30.113 4.963 ms 5.012 ms 4.828 ms 9 216.200.56.2 27.969 ms 28.070 ms 27.862 ms 10 66.185.80.189 27.888 ms 27.827 ms 28.085 ms 11 66.185.83.117 28.453 ms 28.340 ms 28.620 ms 12 66.185.83.94 25.472 ms 25.646 ms 25.479 ms 13 66.185.90.100 29.384 ms^C % traceroute -n 99.244.192.1 traceroute to 99.244.192.1 (99.244.192.1), 30 hops max, 40 byte packets [snip] 3 207.18.173.189 0.470 ms 0.568 ms 0.571 ms 4 152.63.34.158 0.868 ms 0.764 ms 0.835 ms 5 152.63.40.49 3.032 ms 3.320 ms 3.333 ms 6 152.63.38.117 3.138 ms 2.924 ms 3.070 ms 7 64.125.13.85 4.851 ms 5.212 ms 52.033 ms 8 64.125.30.113 4.772 ms 4.761 ms 4.833 ms 9 216.200.56.2 27.941 ms 27.758 ms 27.963 ms 10 66.185.80.189 27.947 ms 27.771 ms 27.708 ms 11 66.185.81.214 28.246 ms 28.157 ms 28.088 ms 12 24.153.4.230 28.118 ms 28.216 ms 29.882 ms 13 66.185.90.212 29.041 ms^C On Mon, 2007-04-23 at 13:42 +0000, David Lemon wrote: > > All, > > My name is David Lemon, and I work within the same group as Shai. > We're still in dire need of assistance from this list as we still have > many complaints from residential customers that cannot reach certain > sites. Shai has provided a few /32's from blocks that we have > currently started to provision. Unfortunately we cannot swap these > blocks for different blocks with ARIN. > > As you can see we do indeed own these blocks: > > whois 99.245.135.129 > [whois.arin.net] > > OrgName: Rogers Cable Communications Inc. > OrgID: RCC-99 > Address: One Mount Pleasant > City: Toronto > StateProv: ON > PostalCode: M4Y-2Y5 > Country: CA > > NetRange: 99.224.0.0 - 99.253.159.255 > CIDR: 99.224.0.0/12, 99.240.0.0/13, 99.248.0.0/14, > 99.252.0.0/16, > 99.253.0.0/17, 99.253.128.0/19 > NetName: ROGERS-CAB-99 > > We also have these blocks within RADB as well: > > whois -h whois.radb.net 99.240.0.0/13 > [whois.radb.net] > route: 99.240.0.0/13 > descr: ROGERS-13-BLOCK > origin: AS812 > notify: radb-notify(a)rogers.wave.ca > mnt-by: MAINT-AS812 > changed: radb-maint(a)rogers.wave.ca 20070412 > source: RADB > > etc.. > > If anyone has any questions, or I can provide any additional > information which anyone may require, please feel free to email me > directly or call our TAC @ 416.935.5700. > > Thanks in advance for your support, > > -David > > -----Original Message----- > Sent: Friday, April 20, 2007 14:38 PM > To: 'nanog(a)merit.edu' > Subject: IP Block 99/8 > > We recently started to assign these blocks. So all the ranges are not > assigned yet. Following are some... > > 99.245.135.129 > 99.246.224.1 > 99.244.192.1 > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf > Of Frank Bulk > Sent: Friday, April 20, 2007 2:14 PM > To: nanog(a)merit.edu > Subject: RE: IP Block 99/8 > > > > Please provide a pingable IP address on each block so that we can > check. > > Thanks, > > Frank > > -----Original Message----- > Sent: Friday, April 20, 2007 1:09 PM > To: 'nanog(a)merit.edu' > Subject: IP Block 99/8 > > Hi, > > I am Shai from Rogers Cable Inc. ISP in Canada. We have IP block > 99.x.x.x assigned to our customers. Which happened to be bogons block > in the past and was given to ARIN in Oct 2006. As we have recently > started using this block, we are getting complaints from our customers > who are unable to surf some web sites. After investigation we found > that there are still some prefix lists/acls blocks this IP block. > > We own the following blocks: > > 99.224.0.0/12 > 99.240.0.0/13 > 99.248.0.0/14 > 99.252.0.0/16 > 99.253.128.0/19 > > Please update your bogons list. > > Shai. > > end > > >

2 2