May 2007 - Test - lists.nanog.org

[urgent assistance] 198.32.0.0/16 - Disappeared...
by Fergie 31 Aug '07

31 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Paging Bill Manning... Unfortunately, we've tried to reach Bill, as well as other folks at EP.NET to no avail, and this is impacting us quite negatively. [snip] Not available in any routing tables I have access to or any of the looking glasses from http://www.nanog.org/lookingglass.html. this is significant because any in-addr blocks that are authoritative @ flag.ep.net and dot.ep.net will now suffer from reverse name resolution issues. - From ATT route server: route-server>sh ip bgp 198.32.4.13 % Network not in table - From CerfNET route server: route-server>sh ip bgp 198.32.4.13 % Network not in table Allstream Toronto: route-server.east>sh ip bgp 198.32.4.13 % Network not in table This has been a problem since yesterday evening. [snip] FYI, some of our address space has been sub-allocated via EP.net and relies on it's reachability: [DOMAIN whois information for EP.NET ] Domain Name: EP.NET Namespace: ICANN Unsponsored Generic TLD - http://www.icann.org TLD Info: See IANA Whois - http://www.iana.org/root-whois/net.htm Registry: VeriSign, Inc. - http://www.verisign-grs.com Registrar: NETWORK SOLUTIONS, LLC. - http://www.networksolutions.com Whois Server: whois.networksolutions.com Name Server[whois+dns with ip] DOT.EP.NET 198.32.2.10 Name Server[from whois+dns, whois ip]: DOT.EP.NET 2001:478:6:0:230:48FF:FE22:6A29 Name Server[whois+dns with ip] FLAG.EP.NET 198.32.4.13 Updated Date: 11-Jan-2007 Creation Date: 09-Dec-1994 Expiration Date: 08-Dec-2012 Status: clientTransferProhibited [whois.networksolutions.com] Welcome to the Network Solutions Registrar WHOIS Server. The IP address from which you have visited the Network Solutions Registrar WHOIS database is contained within a list of IP addresses that may have failed to abide by Network Solutions' WHOIS policy. Failure to abide by this policy can adversely impact our systems and servers, preventing the processing of other WHOIS requests. To see the Network Solutions WHOIS Policy, click on or copy and paste the following URL into your browser: http://www.networksolutions.com/whois/index.jhtml If you feel that you have received this message in error, please contact us at: whoisquery(a)networksolutions.com and include the following information: Whois Query: domain ep.net YOUR IP address is 216.151.198.186 Date and Time of Query: Fri May 11 21:39:55 EDT 2007 Reason Code: CE [whois.networksolutions.com] Please contact me off-list is you have any inisght into this. Thanks, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.1 (Build 1012) wj8DBQFGRRydq1pz9mNUZTMRAt1RAJ0daUTj2zsy4yw9Yq83mTgQdYBXcQCg+lgC Hs2XTn1hp42IjMLXmTfU4Vs= =D8x5 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

5 6

messy
by Lucy Lynch 02 Jul '07

02 Jul '07

and hard to read... http://www.ntia.doc.gov/osmhome/allochrt.pdf adhoc allocation taken to it's limits?

3 4

Cable-Tying with Waxed Twine
by Dan Mahoney, System Admin 30 Jun '07

30 Jun '07

Hey all, This seems a wee bit off topic, but definitely relates to network operations (somewhere below layer 1) and I can't think of a better place to ask. Upon leaving a router at telx and asking one of their techs to plug in the equipment for me, I came back to find all my cat5 cables neatly tied with some sort of waxed twine, using an interesting looping knot pattern that repeated every six inches or so using a single piece of string. For some reason, I found this trick really cool. I have tried googling for the method, (it's apparently standard, I've seen it in play elsewhere), and for the type of twine, but had little luck. I was wondering if any of the gurus out there would care to share what this knot-pattern is actually called, and/or if there's a (illustrated) howto somewhere? -Dan "Tired of getting scratched up by jagged cable ties" Mahoney -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org ---------------------------

21 20

who was the last legit spammer?
by Travis H. 27 Jun '07

27 Jun '07

Hey, was discussing something from the long distant past recently. Specifically it was my memory of the last legitimate spamhaus, and how (IIRC) their backbone was DDoS'd as an act of pseudo-vigilante justice. I also seem to remember their backbone as spinning it as a content-neutral free-speech kind of thing, but they buckled and the Internet was probably better off. This isn't the kind of thing where one can make an easy google query, but I'll bet you that someone here remembers a name that would lead to a URL that I could forward to the person asking for more info. TIA. -- ``Unthinking respect for authority is the greatest enemy of truth.'' -- Albert Einstein -><- <URL:http://www.subspacefield.org/~travis/> For a good time on my UBE blacklist, email john(a)subspacefield.org.

5 5

Re: NANOG 40 agenda posted
by Martin Hannigan 05 Jun '07

05 Jun '07

>The NANOG Program Committee is pleased to announce that the >agenda for the upcoming meeting in Bellevue, WA has been posted: > > http://www.nanog.org/mtg-0706/topics.html > >If you haven't already registered to attend, now is a great time! Sorry to post 4 times this year, and really, it just kind of stuck out when I went to look at the agenda, but: Nothing about V6? Not a workshop, tutorial, or even a panel? Any reason why? Is V6 not happening? Best, Martin

58 193

Yahoo! clue
by Simon Waters 05 Jun '07

05 Jun '07

Is there a Yahoo! abuse contact around who will talk, and not just sended me canned responses? Their abuse team seems very responsive, but I fear they don't actually read the whole email, but just hit the button for the most appropriate "canned response" as soon as they think they know what is being said. (Let he who is without sin here, cast the first stone). Thanks, Simon

6 6

IPv6 Training?
by Alex Rubenstein 03 Jun '07

03 Jun '07

Does anyone know of any good IPv6 training resources (classroom, or self-guided)? Looking to send several 1st and 2nd tier guys, for some platform/vendor-agnostic training. Any clues? Thanks.. -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben Net Access Corporation, 800-NET-ME-36, http://www.nac.net

17 20

Re: IPv6 Advertisements
by Brandon Butterworth 02 Jun '07

02 Jun '07

> >> I understand the problems but I think there are clear cut cases where > >> /48's make sense- a large scale anycast DNS provider would seem to be a > >> good candidate for a /48 and I would hope it would get routed. Then again > >> that might be the only sensible reason... > > > > Don't give people an excuse to deagg their /32 > RIPE may only give out /32's but ARIN gives out /48's so there wouldn't be > any deaggregation in that case. That's not what I said. If /48 are accepted by * then people with a /32 or whatever will deagg to /48. How much and why they deagg will vary but *hand waving argument* it'll be a lot more pressure on routing table size than people doing PI You get one shot at fixed prefix size filters, miss and you'll pay forever. Which is more scarce, /32's or routing table entries. brandon

12 24

Slate Podcast on Estonian DOS atatck
by Tom Vest 01 Jun '07

01 Jun '07

http://www.slate.com/id/2166749/fr/podcast/ TV

11 18

Port 1080 probes from AOL
by up＠3.am 31 May '07

31 May '07

One of my virtual web host servers have been getting multiple probes to TCP port 1080 (socks) every day for months from AOL IP addresses. Is AOL known to be doing something relatively innocuous on that port? I ask because I have portsentry null routing IP addresses that make probes like this. TIA, James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

2 1