May 2008 - Test - lists.nanog.org

[NANOG] Installation troubles with GlobalCrossing
by Erich Hohermuth 19 May '08

19 May '08

Dear members, I just want to ask if anyone else have major troubles to install new or upgrade services with Global Crossing ? The story: Last year on December we ordered two layer2 point to point connections based on gigabit ethernet connections. The main idea was to directly connect to the peering point. After waiting 3 months and lots of mails they get the right hardware in place but now 6 months later we still don't have a running service, because they just implement something with tagged interfaces on one the peering point site without asking. Regards Eric

6 6

[NANOG] Earthlink Relayed Spam Increase
by Jason J. W. Williams 19 May '08

19 May '08

Hey Y'all, We're seeing a marked increase of spam originating from Earthlink mail servers over the past week and a half. Is anyone else seeing a spike localized to Earthlink as well? Thank you in advance. Best Regards, Jason --- Jason J. W. Williams COO/CTO, DigiTar http://www.digitar.com E: williamsjj(a)digitar.com V: 208-343-8520 M: 208-863-0727 F: 208-322-8520 XMPP: williamsjj(a)digitar.com

2 2

Re: [NANOG] IOS rootkits
by Matthew Moyle-Croft 19 May '08

19 May '08

> I'd love to know what magical mystical protection your routers have that will > enable them to avoid the same fate as every other device and operating system > has. There's only one thing up there that doesn't have known rootkits > in the wild. Yet. > The question isn't IF routers have security vunerabilities, but whether Gadi has an example he can demonstrate now of installing a root kit on an IOS router NOW or not. MMC

8 7

Re: [NANOG] Installation troubles with GlobalCrossing
by Robert Bonomi 19 May '08

19 May '08

> From nanog-bounces(a)nanog.org Mon May 19 06:30:15 2008 > From: Erich Hohermuth <eh(a)profzone.ch> > To: nanog(a)nanog.org > Date: Mon, 19 May 2008 13:29:39 +0200 > Subject: Re: [NANOG] Installation troubles with GlobalCrossing > > Dear list, > > Thanks to everyone who has respond to me by privat mails. > > > I just want to ask if anyone else have major troubles to install new or > > upgrade services with Global Crossing ? > > It seems that I'm not the only one who has troubles with installations > and trouble tickets in the past 12 months. I also get some offers from > competitors which promise to bring up a point two point link within 10 > days. Easy way to find out if the competitors mean it, or are just more marketing smoke -- see if they'll sign a contract with the fixed turn-up date, *AND* a, say, 500 Euro/day penalty (payable in cash, not just a service credit) for each day they miss the promised date. If they won't sign that contract, ask "why not?" The non-answers for that can be really entertaining. <wry grin>

1 0

10GE router resource
by user user 19 May '08

19 May '08

Hi everybody! I find myself in the market for some 10GE routers. As I don't buy these everyday, I was wondering if any of you guys had any good resources for evaluating different vendors and models. I'm mainly thinking about non-vendor resources as the vendorspeak sites are not that hard to find. Also I'd love to hear recommendatios for "budget" 10GE routers. The "budget" router would be used to hook up client networks through one 10GE interface and connect to different transit providers through two 10GE interfaces. - Zed ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

34 55

[NANOG] US DoD receives chunked IPv6 /13 (14x /22 but not totally consecutive)
by Jeroen Massar 18 May '08

18 May '08

Hi folks, As everybody is a big fan of securing their networks against foreign attacks, be aware that the US DoD has been assigned 14 /22's, IPv6 that is, not IPv4, they all come from a single IPv6 /13 though, which is what they apparently asked for in the beginning, at least that was the rumor, well they got what they wanted. I've recorded it into GRH as a single /13 though, as that is what it is, and I am not going to bother whois'ing and entering the 14 separate entries there, as that is useless, especially as they will most likely never appear in the global routing tables anyway. Depending on your love for the US, you might want to add special rules in your network to be able to easily detect Cyber Attacks and other such things towards that address space, to be able to better serve your country, may that be the US or any other country for that matter. I am of course wondering why ARIN gave 1 organization 14 separate /22's, even though they are recorded exactly the same, just different prefixes and netnames and it is effectively one huge /13. They could easily have been recorded as that one /13, it is not like eg Canada (no other countries that fall under ARIN now is there) will get a couple of the chunks of remaining space in between there. By assigning them separate /22's, they effectively are stating that it is good to fragment the address space and by having them recorded in whois, also that announcing more specifics from that /13 is just fine. The other fun question is of course what a single organization has to do with (2^(48-13)=) 34.359.738.368, yes indeed, 34 billion /48's which cover 2.251.799.813.685.248 /64's which is a number that I can't even pronounce. According to Wikipedia the US only has a mere population of 304,080,000, that means that every US citizen can get a 1000+ /48's from their DoD, thus maybe every nuclear warhead and every bullet is getting their own /48 or something to be able to justify for that amount of address space. At least this gives the opportunity to hardcode that block out of hardware if you want to avoid it being ever used by the publicly known part of the US DoD. I wouldn't mind seeing the request form that can justify this amount of address space though, must be a lot of fun. Now back to your regular NANOG schedule.... Greets, Jeroen (who will hide himself in a nice Swiss nuclear bunker till the flames are all gone ;) 1) http://en.wikipedia.org/wiki/United_States which points to: http://www.census.gov/population/www/popclockus.html

8 8

[NANOG] Routing Tools BOF at NANOG tuesday June 3rd
by Joel Jaeggli 18 May '08

18 May '08

We've got some interesting material already lined up that should be appearing on the agenda shortly. I wonder however if there's anyone in the community interested in discussing their personal operational experience with tools for black-hole automation, or prefix hijacking detection? I'm sure your colleagues would appreciate a view from the the trenches on what tools get used. Thanks Joel

1 0

[NANOG] Routing table for BGP
by devang patel 18 May '08

18 May '08

Hi, I would like to know what route should i accept from internet full or partial? if Partial then what routes should i accept? and how many route does my router have if i will go for Partial routing table? actually I am trying to understand it by concept... my organization is small but I want to know if it is large organization or small provider then what kind of routes do i need in my routing table? regards Devang Patel

7 7

Re: [NANOG] IOS rootkits
by Gadi Evron 17 May '08

17 May '08

On Sat, 17 May 2008, Felix 'FX' Lindner wrote: > > But I don't see a reason for panic and Cisco is at least partially > right with their response > ( http://www.cisco.com/en/US/products/products_security_response09186a0080997… ) > to the whole issue: someone still needs a privilege level 15 VTY on > your router and no matter what press is currently making of the > rootkit, this prerequisite step is non-trivial (or should be, > depending on your configuration). On this rootkit and IOS security and how it works FX's word is of the most qualified. > > cheers > FX > > -- > Recurity Labs GmbH | Felix 'FX' Lindner > http://www.recurity-labs.com | fx(a)recurity-labs.com > Wrangelstrasse 4 | Fon: +49 30 69539993-0 > 10997 Berlin | PGP: A740 DE51 9891 19DF 0D05 > Germany | 13B3 1759 C388 C92D 6BBB > HRB 105213 B, Amtsgericht Charlottenburg, GF Felix Lindner >

1 0

[NANOG] financing IRU purchase
by Zitibake 17 May '08

17 May '08

I'm looking for financing sources to help with the purchase of an IRU within my metro area. I'd be interested in hearing suggestions of how to describe the asset to potential lenders; or in hearing of lenders that are already familiar with IRUs as "attachable assets".

2 1