December 2009 - Test - lists.nanog.org

AT&T SMTP Admin contact?
by Brad Laue 03 Dec '09

03 Dec '09

Hi all, Would I be able to get an AT&T mail administrator to contact me off-list? We've recently moved our mailservers to a new IP address range, and the standard CGI forms haven't produced any progress for us in over a week now. Unfortunately this affects dozens of hosted clients... The CGI form at http://wn.att.net/cgi-bin/block_admin.cgi has also got a dead link at the bottom, which shakes my confidence in its level of maintenance a little. Thanks in advance, -- Regards, Brad Laue Systems Administrator, Inftek Hosting 1-888-44-SYNCD http://www.getsyncd.com (888) 44-SYNCD (888-447-9623) x702

13 19

New European IXP customer tool
by Serge Radovcic 03 Dec '09

03 Dec '09

Just wanted to announce that we published a handy little tool for those either already, or interested in, peering at an European IXP(s). The Euro-IX ASN filter allows one to make use of our IXP database that contains more than 4.800 ASNs that peer at IXPs around Europe. You can see which ASNs peer where and what the overlap is between multiple IXPs and, well more....just try it out and see. https://www.euro-ix.net/member/m/asnfilter All feedback is welcome Serge Euro-ix

1 0

Re: Leaving public peering?
by Serge Radovcic 03 Dec '09

03 Dec '09

On Thu, 3 Dec 2009 10:53:46 -0500 Ken Chase <math(a)sizone.org> wrote: >> Check out this report on the success of peering : >> https://www.euro-ix.net/member/m/document/showDocument/id/158 > This seems to be a protected document behind login-only section of the > site. Can anyone comment on wether the document should be publically > accessible? Would love to spread it around. This report is available to the public at: http://www.euro-ix.net/resources/reports/ Serge

1 0

Re: AT&T SMTP Admin contact?
by Andre Engel 03 Dec '09

03 Dec '09

> -----Ursprüngliche Nachricht----- > Von: Chris Owen [mailto:owenc@hubris.net] > Gesendet: Donnerstag, 3. Dezember 2009 07:25 > An: NANOG list > Betreff: Re: AT&T SMTP Admin contact? > > On Dec 2, 2009, at 9:52 PM, Valdis.Kletnieks(a)vt.edu wrote: > > > It only stops forgery if the SPF record has a -all in it (as > hubris.net does). > > However, a lot of domains (mine included) have a ~all instead. > > I guess I've never really seen the point of publishing a SPF record if > it ends in ~all. What are people supposed to do with that info? For instance some ISPs or Freemail providers give their customers the possibility to use SPF as a value added service to decide if "senders domain" should be dropped in theirs suspicious-folders or not . I also learned that SPF is qualified for senders reputation : http://www.ceas.cc/2006/19.pdf > Spamassassin assigns it a score of 0.6 but that is low enough it really > doesn't have much since it doesn't assign any negative points for > SPF_PASS. > > (And before anybody asks, yes ~all is what we want, and no you can't > ask us > > to try -all instead, unless we're allowed to send you all the > helpdesk calls > > about misconfigured migratory laptops".. ;) > I certainly understand that you may not be able to lock down your > domain. We don't even try for customers for instance. However, if > you can't, I guess I don't really see what good publishing a SPF record > is if you tell people not to enforce it. MAAWG published a document around : Trust in Email begins with Authentication http://www.maawg.org/about/publishedDocuments/MAAWG_Email_Authentication_Pap er_2008-07.pdf > Chris > > ----------------------------------------------------------------------- > -- > Chris Owen - Garden City (620) 275-1900 - Lottery (noun): > President - Wichita (316) 858-3000 - A stupidity tax > Hubris Communications Inc www.hubris.net > ----------------------------------------------------------------------- > -- > Cheers Andre -- Andre Engel Consulting Program Director, Email and Cyber Intelligence Services "..no ghost just a shell" FHE3 GmbH P: +49 721 869 5907 Scheffelstr. 17a M: +49 160 962 44476 76135 Karlsruhe andre.engel(a)fhe3.com http://www.fhe3.com/ Amtsgericht Mannheim, HRB 702495 Umsatzsteuer-Ident: DE254677931 Geschäftsführer: Peter Eisenhauer, Michael Feger, Dimitrij Hilt This message (including any attachments) is the property of FHE3 and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

1 0

Flash Media Servers as Open Proxies
by Marshall Eubanks 03 Dec '09

03 Dec '09

I recently found out that the Adobe Flash Media Server (FMS) can operate "out of the box" as an open proxy, enabling other people to steal server resources and bandwidth. Furthermore, I also found that there is an ecosystem of pirates taking advantage of this "feature" to illegally stream sports events (and maybe other stuff as well). Each event uses multiple (stolen) servers and can amount to thousands of streams and Gbps of consumed bandwidth. I believe but am not 100% sure that there are similar problems with Window Media Servers. I would like to hear (off-list) from people who have experience fighting this so that we could maybe pool techniques. I will try to write this up further later. Regards Marshall Eubanks

3 3

What DNS Is Not
by Alex Balashov 03 Dec '09

03 Dec '09

Thought-provoking article by Paul Vixie: http://queue.acm.org/detail.cfm?id=1647302 -- Alex Balashov - Principal Evariste Systems Web : http://www.evaristesys.com/ Tel : (+1) (678) 954-0670 Direct : (+1) (678) 954-0671

33 61

Comcast outage in central NJ
by Jeffrey Negro 03 Dec '09

03 Dec '09

There appears to be a Comcast outage in central NJ, more specifically in the South Brunswick area. Comcast appears to be aware of the outage as per the message I got when I called them. Anyone hear any details on the issue, or an ETA for repair yet? Jeffrey

2 2

Re: Consumer Grade - IPV6 Enabled Router Firewalls.
by Cesar Olvera 03 Dec '09

03 Dec '09

A list of CPEs, routers, firewalls and other hardware and software are at http://www.ipv6-to-standard.org/ César Olvera -----Original Message----- From: Wade Peacock [mailto:wade.peacock@sunwave.net] Sent: Wednesday, December 02, 2009 5:16 PM To: nanog(a)nanog.org Subject: Consumer Grade - IPV6 Enabled Router Firewalls. We had a discussion today about IPv6 today. During our open thinking the topic of client equipment came up. We all commented that we have not seen any consumer grade IPv6 enable internet gateways (routers/firewalls), a kin to the ever popular Linksys 54G series, DLinks , SMCs or Netgears. Does anyone have any leads to information about such products (In production or planned production)? We are thinking that most vendors are going to wait until Ma and Pa home user are screaming for them. Thoughts? -- Wade Peacock Sun Country Cablevision Ltd ********************************************** The IPv6 Portal: http://www.ipv6tf.org Bye 6Bone. Hi, IPv6 ! http://www.ipv6day.org This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

FTTH Active vs Passive
by Luke Marrott 03 Dec '09

03 Dec '09

I'm wondering what everyones thoughts are in regards to FTTH using Active Ethernet or Passive. I work for a FTTH Provider that has done Active Ethernet on a few networks so I'm always biased in discussions, but I don't know anyone with experience in PON. I've read before that almost all PON technology is proprietary, locking you into a specific hardware vendor. However I think this is changing or has already changed, opening PON up for interoperability. Can anyone confirm this? Thanks in advance. :Luke Marrott

28 40

Re: DNS query analyzer
by Stefan Fouant 02 Dec '09

02 Dec '09

DNStop is a real good tool for what it does. It's an exceptionally useful tool and probably at the top of my list for deciphering DoS attacks targetting or amplifying against DNS resolvers. But for RTT and timeouts, errr not so good. Sorry for the top post. Stupid Blackberry... Regards, Stefan Fouant www.shortestpathfirst.com ------Original Message------ From: jul To: Joseph Jackson To: nanog(a)nanog.org Subject: Re: DNS query analyzer Sent: Dec 2, 2009 12:47 AM Joseph Jackson wrote on 01/12/09 01:06: > Anyone know of a tool that can take a pcap file from wireshark that was used to collect dns queries and then spit out statistics about the queries such as RTT and timeouts? You also have DNSTop http://dns.measurement-factory.com/tools/dnstop/ Best regards, Julien Sent from my Verizon Wireless BlackBerry

1 0