July 2008 - Test - lists.nanog.org

Thanks
by Andrew D Kirch 11 Jul '08

11 Jul '08

I got a reply from several network engineers at Comcast, and they're now working on a resolution. Thanks for the fast work guys! Andrew

2 1

Comcast routing issue
by Andrew D Kirch 10 Jul '08

10 Jul '08

Would a Comcast routing engineer contact me off list regarding a routing issue in Chicago? Andrew

1 0

Re: Multiple DNS implementations vulnerable to cache poisoning
by Russ Mundy 10 Jul '08

10 Jul '08

At 11:08 AM -0400 7/10/08, Christopher Morrow wrote: >On Thu, Jul 10, 2008 at 10:22 AM, Wes Hardaker <wjhns61(a)hardakers.net> wrote: >>>>>>> On Wed, 9 Jul 2008 22:55:05 -0400, "Christopher Morrow" >>>>>>><morrowc.lists(a)gmail.com> said: >> >>>>> aside from just getting some cctlds signed, i will be interested in the >>>>> tools, usability, work flow, ... i.e. what is it like for a poor >>>>> innocent cctld which wants to sign their zone? >>>> >>>> If there is sufficient interest, we could do a bar bof to describe some of >>>> the tools IANA has... >>>> >> >> CM> I think Sandy Murphy or other Sparta folks have presented some of the >> CM> work they've done on this... Perhaps finding one/some of them and >> CM> having a more operations focused presentation in LAX or ... is a good >> CM> idea as well? >> >> The tools that Sparta developed (and made freely available via an open >> source packaged that is BSD licensed) can be found at >> http://www.dnssec-tools.org/ . In particular, signing a zone is > >yup, and that's helpful stuff. > Great, we're trying to provide tools that will help with the deployment and operation of DNSSEC. We also try to keep a listing of all the 'pieces' that we know about that could be helpful to folks who want to deploy and use DNSSEC in various ways whether they are operating a signed zone, running a validating resolver or wanting DNSSEC-aware applications. The url for the listing is: http://www.dnssec-deployment.org/tracker We provide the listing as community resource and try to keep it reasonably current. But we are always on the lookout for additional information (& corrections) to the list - if you have any, please let me know. ------------->snip<-------------- >> >> All for free. Don't you hate those ??biased??, freely-available, >> source-code-supplied-so-you-can-change-it, BSD-licensed open source >> packages? >> -- > >I like free... as long as it's the hammer I need for the nails I have. > >-Chris We don't try to keep track of things in the listing by whether they or free or not but I know a lot of them have typical open source type of licenses. Russ

1 0

on Qwest transport, need service in Denver area
by neal rauhauser 10 Jul '08

10 Jul '08

I'm doing some work for a rural phone company and Denver is the nearest metro area for them. The only transport in their area is Qwest and a response from someone with knowledge of how to coax a mileage free ethernet transport link out of them would be quite welcome. Drop me a note here if you either provide service in the area or if you're a customer of someone who does ... -- mailto:Neal@layer3arts.com // GoogleTalk: nrauhauser(a)gmail.com IM: nealrauhauser

1 0

Re: Multiple DNS implementations vulnerable to cache poisoning
by David Conrad 10 Jul '08

10 Jul '08

On Jul 10, 2008, at 2:59 AM, Joao Damas wrote: > PS: I would also want a copy of, or a secure method to access, the > public part of the keys you use to sign those ccTLDs so I can place > them in ISC's DLV registry IANA's 'interim trust anchor repository' will be publicly accessible (of course). Regards, -drc

1 0

verizon.net abuse/support contacts?
by Bill 10 Jul '08

10 Jul '08

I need to report something about an IP belonging to them: pool-xxxxxxxx.ny325.east.verizon.net I've looked at their website and the whois record...and sent email to abuse(a)verizon.net, abuse(a)GNILINK.NET, abuse(a)verizon.com Are these the right addresses? If someone works for verizon.net please let me know here or offline. Thanks a bunch! Bill

1 0

Cogent problems in Chicago area?
by Brandon Galbraith 10 Jul '08

10 Jul '08

Is anyone seeing Cogent issues in the Chicago area? We have several racks with them, and our connectivity just dropped off. -brandon

3 3

Cogent problems in Chicago area? (updated with info)
by Brandon Galbraith 10 Jul '08

10 Jul '08

Cogent is indeed having a problem in the Chicago area. No ETR. Master ticket # 759401. -brandon

1 0

Linkedin Contacts
by Felix Bako 10 Jul '08

10 Jul '08

Guyz. Anyone from Linkedin here? please contact me offlist. We have not been able to open www.linkedin.com from Our Ip space for close to 2 months now!!. Any Help will be highly apreciated Regards -- Felix Bako *Team Leader - Networks* Africa Online (K) LTD Tel: + 254 (20) 2792246 Fax: + 254 (20) 2710010 Email: _fbako(a)africaonline.co.ke <mailto:fbako@africaonline.co.ke>_ AIM: felixbako *OFFICIAL CO – SPONSOR OF THE 2008 TUSKER SAFARI SEVENS * A MEMBER OF TELKOM SOUTH AFRICA GROUP *Africa Online Disclaimer and Confidentiality Note* This e-mail, its attachments and any rights attaching hereto are, unless the context clearly indicates otherwise, the property of Africa Online Holdings (Kenya) Limited and / or its subsidiaries ("the Group"). It is confidential and intended for the addressee only. Should you not be the addressee and have received this e-mail by mistake, kindly notify the sender, delete this e-mail immediately and do not disclose or use the same in any manner whatsoever. Views and opinions expressed in this e-mail are those of the sender unless clearly stated as those of the Group. The Group accepts no liability whatsoever for any loss or damages, however incurred, resulting from the use of this e-mail or its attachments. The Group does not warrant the integrity of this e-mail, nor that it is free of errors, viruses, interception or interference. For more information about Africa Online, please visit our website at _http://www.africaonline.com <http://www.africaonline.com/>_

3 2

Re: Multiple DNS implementations vulnerable to cache poisoning
by Christopher Morrow 10 Jul '08

10 Jul '08

On Thu, Jul 10, 2008 at 10:22 AM, Wes Hardaker <wjhns61(a)hardakers.net> wrote: >>>>>> On Wed, 9 Jul 2008 22:55:05 -0400, "Christopher Morrow" <morrowc.lists(a)gmail.com> said: > >>>> aside from just getting some cctlds signed, i will be interested in the >>>> tools, usability, work flow, ... i.e. what is it like for a poor >>>> innocent cctld which wants to sign their zone? >>> >>> If there is sufficient interest, we could do a bar bof to describe some of >>> the tools IANA has... >>> > > CM> I think Sandy Murphy or other Sparta folks have presented some of the > CM> work they've done on this... Perhaps finding one/some of them and > CM> having a more operations focused presentation in LAX or ... is a good > CM> idea as well? > > The tools that Sparta developed (and made freely available via an open > source packaged that is BSD licensed) can be found at > http://www.dnssec-tools.org/ . In particular, signing a zone is yup, and that's helpful stuff. > intended to be easy using "zonesigner" (requires bind tools): > > zonesigner -genkeys db.example.com > great... what about a zone that's getting slaved off of a silent master at the customer site? how does that get integrated? (customer does the dns-sec magic, my server validates the updates... config examples help here) > Then next time, just leave off the -genkeys argument. > > (there is also a daemon called "rollerd" that can auto-sign on a regular > basis and help automate key-rollever timing) > nice, extra load induced on server? impact on the number of zones I can serve? tinydns compatible? db-backended NS daemon support? > The full list of tools and tutorials sectioned into different needs can > be found here: > > http://www.dnssec-tools.org/wiki/index.php/Tutorials > great :) > > All for free. Don't you hate those ??biased??, freely-available, > source-code-supplied-so-you-can-change-it, BSD-licensed open source > packages? > -- I like free... as long as it's the hammer I need for the nails I have. -Chris

1 0