December 2009 - Test - lists.nanog.org

Network topology
by Colin Alston 15 Nov '13

15 Nov '13

Hi all I'm considering trying to come up with some means to automatically detect a networks topology and draw pretty pictures. This is somewhat boring though if a network isn't well arranged with VLANs and q-tag trunk routers and so on (It will just look like a big cloud of junk connected off an assumed switch). Is there any kind of cunning trick to detect standard layer2 switches along a path without stuff like STP?

9 12

Inventory and workflow management systems
by vijay gill 26 May '13

26 May '13

What software solution do people use for inventory management for things like riser/conduit drawdown, fiber inventory, physical topology store, CLR/DLR, x-connect, contracts, port inventory, etc. Any experiences in integrating workflow into those packages for work orders, modeling, drawdown levels, etc. /vijay

10 13

ISP port blocking practice
by Zhiyun Qian 13 Sep '10

13 Sep '10

Hi all, What is the common practice for enforcing port blocking policy (or what is the common practice for you and your ISP)? More specifically, when ISPs try to block certain outgoing port (port 25 for instance), they could do two rules: 1). For any outgoing traffic, if the destination port is 25, then drop the packets. 2). For any incoming traffic, if the source port is 25, then drop the packets. Note that either of the rule would be able to block outgoing port 25 traffic since each rule essentially represent one direction in a TCP flow. Of course, they could apply both rules. However, based on our measurement study, it looks like most of the ISPs are only using rule 1). Is there any particular reason why rule 1) instead of rule 2)? Or maybe both? Also, is it common that the rules are based on tcp flags (e.g. SYN, SYN-ACK)? One would think block SYN packet is good enough. Regards. -Zhiyun

52 121

Upstream BGP community support
by Andy B. 04 Jun '10

04 Jun '10

Hi, Quick question: Would you buy transit from someone who does not support BGP communities? Here is the story: My company is pushing several GBit/s through various upstream providers. We have reached the point where we rely on BGP communitiy support, especially communities that can be sent to the upstream to change the way he announces our prefixes to his peers/transits. While most decent upstream providers support this kind of traffic engineering, one of them refuses to send and accept BGP communities. I tried to contact my upstream several times through different channels to get some background as to why they would not be able to provide us this service, but all we get is tickets that get closed without an answer. Management itself does not seem to bother either. Is this normal or is it too much to ask for BGP communities from an upstream who has points of presence in the US, Europe and Asia? Andy

27 58

Wireless bridge
by Peter Boone 05 Apr '10

05 Apr '10

Hi NANOG, I'm looking for some equipment recommendations for a wireless bridge between two locations approximately 500-800 meters apart. The current setup for this company has been extremely unstable and slow. I don't have a lot of experience in this area so I was hoping someone could give me a few pointers. Currently, both locations are using Linksys WRT54GL's flashed with DD-WRT firmware (Yes, 802.11g. All extra bells and whistles are disabled in the firmware. They were set up for WDS so other wireless clients could connect to the same access point, with varying degrees of success. Not very important). They are connected to SmartAnt 2300-2500 MHz 14 dBi directional antenna mounted on the roof (extended pretty high for perfect line of sight). I'm not sure when they got these antenna exactly but I'm told it was when WiFi was very new. The network is very small so both locations share the same subnet (192.168.1.0/24). They have gone through numerous Linksys access points over the years. The wireless settings are tweaked as best as possible, and we have found the connection to be most stable when the TX is limited to 6-9 Mbps. We have explored other options as well. An internet connection at each location + VPN is out due to very slow upstream speeds (the buildings are in an industrial area, ADSL is the only option.) The max they offer on regular business accounts is 800 kbps up. T1 lines are even slower and even more expensive. They won't offer us any other solutions such as fibre. We have considered running fibre/coax but there is too much construction activity and other property in the way. I'm looking into RouterBOARD right now, considering a RB433AH and R52H wireless card, but I'm not sure this will actually solve the problem. It's difficult to determine if the issue is with the antennas or access points (for example, after a good thunderstorm, the wireless link will be down for at least 12 hours, but will fix itself eventually. Resetting either access point will keep the link down for at least 30 minutes. Using an airgun on the access points tends to make them more reliable, even if they are clean and dust free. From the admin interface, each access point will report seeing a very good and strong signal from the other, yet they refuse to communicate until they feel like it a few hours later.) Any suggestions welcome. I'm sure you can tell cost is a bit of a factor here but it will be easy for me to justify a higher price if I'm confident it will be effective. While I'm at it, I've been reading along on the list for over a year now; thanks everyone for sharing your real world experiences :) Peter

23 36

Consumer Grade - IPV6 Enabled Router Firewalls.
by Wade Peacock 28 Feb '10

28 Feb '10

We had a discussion today about IPv6 today. During our open thinking the topic of client equipment came up. We all commented that we have not seen any consumer grade IPv6 enable internet gateways (routers/firewalls), a kin to the ever popular Linksys 54G series, DLinks , SMCs or Netgears. Does anyone have any leads to information about such products (In production or planned production)? We are thinking that most vendors are going to wait until Ma and Pa home user are screaming for them. Thoughts? -- Wade Peacock Sun Country Cablevision Ltd

43 91

Voice Operators' Group: voiceops.org
by Hiers, David 12 Feb '10

12 Feb '10

Hi Everyone, I'm pleased to announce that the Voice Operators' Group has found an excellent home. Our web site, www.voiceops.org has a good home (thanks Scott!), while Jared, Daniel, and all the great folks over at nether.net are hosting our list server. If VoiceOps can do for voice anything close to what NANOG has done for IP, we'll all owe much to the people that are making this happen. email: voiceops-subscribe(a)voiceops.org web: https://puck.nether.net/mailman/listinfo/voiceops Thanks, David Hiers CCIE (R/S, V), CISSP ADP Dealer Services 2525 SW 1st Ave. Suite 300W Portland, OR 97201 o: 503-205-4467 f: 503-402-3277 This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

26 39

Experiences with Comcast Ethernet/Transit service
by Brandon Galbraith 08 Jan '10

08 Jan '10

We're looking at using Comcast's (business) transit and private ethernet services at several client locations and I wanted to see what experiences others have had regarding this. Off-list replies are preferred. Thanks, -brandon -- Brandon Galbraith Mobile: 630.400.6992

8 8

Are the Servers of Spamhaus.rg and blackholes.us down?
by Xaver Aerni 06 Jan '10

06 Jan '10

Hello, Are this Blacklistservers since x-mas down. We receive in the last days many errors from this servers... Exemple enclosed Anonymsed. Greeting Xaver Dec 31 10:12:37 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.cn-kr.blackholes.us/A' (in 'cn-kr.blackholes.us'?): disabling EDNS Dec 31 10:12:37 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.korea.blackholes.us/A' (in 'korea.blackholes.us'?): disabling EDNS Dec 31 10:12:37 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.china.blackholes.us/A' (in 'china.blackholes.us'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.cn-kr.blackholes.us/A' (in 'cn-kr.blackholes.us'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.korea.blackholes.us/A' (in 'korea.blackholes.us'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.china.blackholes.us/A' (in 'china.blackholes.us'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.sbl.spamhaus.org/A' (in 'sbl.spamhaus.org'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.sbl.spamhaus.org/A' (in 'sbl.spamhaus.org'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.sbl.spamhaus.org/A' (in 'sbl.spamhaus.org'?): disabling EDNS Dec 31 10:12:38 linux-1ij2 named[14306]: too many timeouts resolving 'XXX.sbl.spamhaus.org/A' (in 'sbl.spamhaus.org'?): disabling EDNS D ********************************************** Xaver Aerni Zürichstrasse 10a 8340 Hinwil Tel. 001 707 361 68 39

22 28

DNS question, null MX records
by Eric J Esslinger 05 Jan '10

05 Jan '10

I have a domain that exists solely to cname A records to another domain's websites. There is no MX server for that domain, there is no valid mail sent as from that domain. However when I hooked it up I immediately started getting bounces and spam traffic attemtping to connect to the cnamed A record, which has no inbound mail server (It's actually hitting the firewall in front of it). (The domain name is actually several years old and has been sitting without dns for a while) I found a reference to a null MX proposal, constructed so: example.com IN MX 0 . Question: Is this a valid dns construct or did the proposal die? I don't want to cause people problems but at the same time, I don't want any of this crap to even attempt to deliver on this domain to any of my servers. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 ________________________________ This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

17 31