February 2009 - Test - lists.nanog.org

Comprehensive community Guideline and Policies for an AS
by Joe Maimon 22 Feb '09

22 Feb '09

I am looking to put together a comprehensive BGP communities guideline and policies for an AS starting from a blank slate. When I say comprehensive, I mean covers *everything* that is known to be best practice such as: Route Type Prepends Learned from Peers Learned from Peers Peers Learned from Transits Learned from Customers Learned from Customers Customers Advertise to Peers Advertise to Peers Peers Advertise to Transits Advertise to Customers Advertise to Customers Customers Local Preferences No exports No advertise Leaking to Peers/Transits/Customers Null-Route Region/POP And anything else I may have overlooked. Naturally, the resulting policy needs to be easily implementable on current IOS. My own experience and the publicly available information doesnt even come close to a consensus on the objectives that should be handled, let alone the number patterns preferred to be used. What I am looking for is a best practice guide on community policy setup. Barring that, I plan to continue examining every publicly published guideline to try to produce one, but likely as not it will suffer from the all to common human failing of shortsightedness. Thanks, Joe

3 4

Fwd: Security Assessment of the Transmission Control Protocol (TCP)
by Marshall Eubanks 22 Feb '09

22 Feb '09

Completing various circles... Marshall Begin forwarded message: > From: Fernando Gont <fernando(a)gont.com.ar> > Date: February 21, 2009 6:47:16 PM EST > To: ietf(a)ietf.org > Subject: Security Assessment of the Transmission Control Protocol > (TCP) > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Hello, folks, > > I have just seen that there has been a thread about this document in > this list, so here's a related "announcement": > > Last week the UK CPNI (United Kingdom's Centre for the Protection of > National Infrastructure) released the document "Security Assessment of > the Transmission Control Protocol (TCP)". The document analyzes the > relevant specifications from a security point of view, and also > analyzes > the implications of some implementation strategies taken by popular > TCP implementations. This document is available at: > http://www.cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf > > As part of the same project, we have produced an IETF I-D version of > the > UK CPNI document, in the hope that the IETF works on this stuff and > hopefully publishes some version of the aforementioned document. The > resulting IETF I-D is entitled "Security Assessment of the > Transmission > Control Protocol (TCP)" (draft-gont-tcp-security-00.txt) and is > available at: http://tools.ietf.org/id/draft-gont-tcp-security-00.txt > > Any comments will be more than welcome. > > Thanks! > > Kind regards, > - -- > Fernando Gont > e-mail: fernando(a)gont.com.ar || fgont(a)acm.org > PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 > > > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > > iQEcBAEBCAAGBQJJoJJ8AAoJEJbuqe/Qdv/xQ1gH/RYY8imAcxLInFgMoVAR0OLR > UuTtYXxclpieRWNjEkJTpyiAA/q8czubkuP4kupp11CiL6nQxYZwV2mexG2/lQ91 > Y1TWh9H1ofroWyU9ZMrYcz1PPOSeAY929Sn3U2yHKrm4QSVhH1NSBAVodTu2zKV6 > jvhzny+IDtCrTIeRDZBZYKrFgkxA74vvzasXgj/A8JiPjbhN4zGABWxpsWV+d9Ti > ceZBz8Ny+Mld/AQpag51OqFAVg4Xtzb9omDbxyc43B/YFzT+bTKMSLr3u68tH2xR > xBFYJ50AZxuiayHxDZVHCAf4XrTFyCiD+iXpzlVWiSGcXBcLd6pziYBWdHVEbUo= > =ftHE > -----END PGP SIGNATURE----- > _______________________________________________ > Ietf mailing list > Ietf(a)ietf.org > https://www.ietf.org/mailman/listinfo/ietf

1 0

Re: Great outage of 1997 - Does anyone recall?
by Chaim Rieger 22 Feb '09

22 Feb '09

Back on list I doubt you will get skewered, I promise to read it Sent via BlackBerry from T-Mobile -----Original Message----- From: neal rauhauser <nrauhauser(a)gmail.com> Date: Sun, 22 Feb 2009 01:24:08 To: <chaim.rieger(a)gmail.com> Subject: Re: Great outage of 1997 - Does anyone recall? Oh, you guys will skewer me for it :-) Shall I post the text here so it gets vetted first? On Sun, Feb 22, 2009 at 1:21 AM, <chaim.rieger(a)gmail.com> wrote: > Do post a link when its up. > > > Sent via BlackBerry from T-Mobile > > -----Original Message----- > From: neal rauhauser <nrauhauser(a)gmail.com> > > Date: Sun, 22 Feb 2009 01:11:16 > To: Patrick W. Gilmore<patrick(a)ianai.net> > Cc: NANOG list<nanog(a)nanog.org> > Subject: Re: Great outage of 1997 - Does anyone recall? > > > Well, I hope I'm not butchering the story up too badly - got an 800 word > piece going up Monday on The Cutting Edge News and I'm doing something more > lengthly and bloggy tonight for DailyKos, whilst hanging around abusing one > of our spare 7507s with various new IOS versions. > > > > > On Sun, Feb 22, 2009 at 12:55 AM, Patrick W. Gilmore <patrick(a)ianai.net > >wrote: > > > On Feb 22, 2009, at 1:47 AM, Randy Bush wrote: > > > > Does anyone have the full story on this? > >>>> > >>> <http://www.merit.edu/mail.archives/nanog/1997-04/msg00444.html> > >>> > >> > >> bottom line: > >> o do not redistribute bgp into igp > >> o do not redistribute dynamic igp into bgp > >> o filter your peers and customers > >> > > > > And don't put all your most important infrastructure stuff (e.g. name > > server, mail server, shell host, etc.) in the first /24 of your > /<shorter> > > allocation. > > > > The biggest problem with 7007 was not that it announced a bunch of > > prefixes. It is that 7007 announced _classful_ prefix (it had been > filtered > > through RIP, remember?) with AS_PATH of ^7007$. This means if you had a > > 194.1.0.0/16, you saw 194.1.0.0/24 from 7007, which is more specific. > Why > > this is bad is left as an exercise to the reader. > > > > And, of course, the problem persisted after the router in question was > > actually unplugged - not powered up or attached to any fibers/cables. > Thank > > you Sprint for running beta code. :) > > > > -- > > TTFN, > > patrick > > > > > > > > > -- > mailto:Neal@layer3arts.com // > GoogleTalk: nrauhauser(a)gmail.com > IM: nealrauhauser > -- mailto:Neal@layer3arts.com // GoogleTalk: nrauhauser(a)gmail.com IM: nealrauhauser

2 1

SLAs for colo sites?
by Hank Nussbacher 22 Feb '09

22 Feb '09

A neutral colo site has to just provide two things really: A/C and power. What happens when a colo site loses power even though they have all the necessary bells and whistles - generators, UPSs, multiple electrical carrier feeds, etc. Can anyone point me at actual online SLAs for colo sites that not only state 100% uptime but also state what happens if they fail that promise? Thanks, Hank

1 0

T.38 IP carriers?
by Brian Feeny 21 Feb '09

21 Feb '09

Is anyone aware of a large (preferably tier 1 or tier 2) carrier that has a solid network that supports T.38 fax on-ramp and off-ramp services? I have a client that needs to originate and terminate several DS3's worth of T.38 fax traffic and is trying to find a carrier that supports this. I have a seen a list on the voip wiki, but its less than impressive and a referral from this list would mean so much more. Obviously said carrier would need to have a fairly robust IP backbone, ideally that only dumps to T.30/PSTN on the local terminating CO, or as close to it as possible. Brian

1 0

Re: Craptastic Service! (was: Re: comcast price check)
by Sharma, Kapeel 21 Feb '09

21 Feb '09

This is BS how narrow minded our providers are. -------------------------- Sent using BlackBerry ----- Original Message ----- From: Jeffrey Lyon <jeffrey.lyon(a)blacklotus.net> To: Ryan A. Krenzischek <ryan(a)bbnx.net> Cc: NANOG list <nanog(a)nanog.org> Sent: Fri Feb 20 22:28:30 2009 Subject: Re: Craptastic Service! (was: Re: comcast price check) Ryan, Last I talked to Comcast running BSD meant you're a hacker. Jeff On Sat, Feb 21, 2009 at 1:27 AM, Ryan A. Krenzischek <ryan(a)bbnx.net> wrote: > > Well that explains it all since we are a *BSD shop. > > Ryan > > On Sat, 21 Feb 2009, Jeffrey Lyon wrote: > >> Date: Sat, 21 Feb 2009 01:02:12 -0500 >> From: Jeffrey Lyon <jeffrey.lyon(a)blacklotus.net> >> To: Ryan A. Krenzischek <ryan(a)bbnx.net> >> Cc: NANOG list <nanog(a)nanog.org> >> Subject: Re: Craptastic Service! (was: Re: comcast price check) >> >> Ryan, >> >> It's always your equipment. You should know that none of their >> customers have any clue how to run a network and therefore should >> remove them immediately. Any customer who is not running Windows and >> not connected directly to the router is to blame for any problems. >> >> Jeff >> >> On Sat, Feb 21, 2009 at 12:46 AM, Ryan A. Krenzischek <ryan(a)bbnx.net> >> wrote: >>> >>> Yes, they do. You can find more information here: >>> >>> http://business.comcast.com/ethernet/dedicated-internet.aspx <http://business.comcast.com/ethernet/dedicated-internet.aspx> >>> >>> Although, I'm sufficiently disappointed with Comcast's Business Cable >>> service. I have had them since 6-NOV-2008 and they took 4 months and 1 >>> week >>> to fix a cabling problem at the head-end for my business Internet. >>> Apparently the head-end was wired wrong in regards to how power was >>> supplied >>> to it. I had nothing but dropped packets and latency (400-500 MS, >>> sometimes >>> 1200 MS) problems. I lost so much business. I tried multiple times to >>> speak with a manager but they would only pick up their phone after I sat >>> for >>> 30 minutes with the phone, pressing the redial key and placed 60 calls to >>> them. I had to call their corporate office and file a complaint. I am >>> still having dropped packet issues. >>> >>> Comcast support also had the nerve to say it was my equipment and that I >>> should immediately disconnect everything. Remind me again how is it my >>> problem with *MY* equipment when the modem takes 25 minutes to sync/lock >>> on >>> the upstream channel? >>> >>> I would *highly* recommend a T1 or partial T3. While they are more >>> expensive and highly reliable, AT&T or other major telcos will fix the >>> problem within a reasonable SLA. Comcast does NOT have a SLA. It took 4 >>> months to fix my problems on a business account. >>> >>> A Very Unhappy Comcast Customer, >>> >>> Ryan Krenzischek >>> >>> On Fri, 20 Feb 2009, Steven King wrote: >>> >>>> Date: Fri, 20 Feb 2009 23:45:48 -0500 >>>> From: Steven King <sking(a)kingrst.com> >>>> To: John Martinez <jmartinez(a)zero11.com> >>>> Cc: NANOG list <nanog(a)nanog.org> >>>> Subject: Re: comcast price check >>>> >>>> Comcast has an Ethernet service? >>>> >>>> John Martinez wrote: >>>>> >>>>> Does any one here use comcast's ethernet services? >>>>> If so, what is their price range? >>>>> >>>>> >>>>> Thanks in advance. >>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> >> >> > -- Jeffrey Lyon, Leadership Team jeffrey.lyon(a)blacklotus.net | http://www.blacklotus.net <http://www.blacklotus.net> Black Lotus Communications of The IRC Company, Inc. Look for us at HostingCon 2009 in Washington, DC on August 10th - 12th at Booth #401.

4 4

do I need to maintain with RADB?
by Zaid Ali 21 Feb '09

21 Feb '09

Hi, need some advise here. Do I still need to maintain my objects (and pay) RADB? I use ARIN as source and all my route objects can be verified with a whois. Thanks, Zaid

9 8

ADMIN: List FAQ/Monthly Post.
by NANOG Mail List Committee 20 Feb '09

20 Feb '09

This 100-line document contains 62% of what you need to know to avoid annoying 10,000 people in your email to the NANOG list. It also contains pointers to another 23%. Please take 5 minutes to read it before you post [again]. General Information =================== About NANOG: http://www.nanog.org/about/ NANOG News: http://www.nanog.org/ NANOG lists and AUP: http://www.nanog.org/mailinglist/ NANOG List FAQ: http://www.nanog.org/mailinglist/listfaqs/ To Subscribe or Unsubscribe from the list: http://mailman.nanog.org/mailman/listinfo/nanog To contact the list's admins: admins(a)nanog.org Posting Policy ============== The NANOG list has over 10,000 subscribers so it is very easy for a thread to have scores of posts while being off-topic and only of interest to only a small proportion of subscribers. Please consider before each post if your email will be of interest to the majority of members or might alternatively be emailed directly the people of interest or posted to another forum. Please read the FAQ and AUP policy before posting for more details. Especially the following are discouraged: * Is a certain site down? Other Outages not affecting half the Internet. Please use http://downforeveryoneorjustme.com/ or a similar site. Please post to the Outages mailing list: http://wiki.outages.org * Spam Please use SPAM-L - http://www.claws-and-paws.com/spam-l * Contacting People * http://puck.nether.net/netops/ * Please try other methods of contacting sites before you post to NANOG. Saying something like "I tried calling 213-555-3333 but no answer" shows you _have_ tried alternative methods first. * Political Issues * Topics such as ICANN policy, Government Policy or Law changes that do not have short term Operational impact should be avoided. * Operation topics with more specific lists * DNS - http://lists.oarci.net/mailman/listinfo/dns-operations * Email - http://www.mailop.org/ * NANOG Mailing list policy Please use the nanog-futures list or contact admins(a)nanog.org Please also avoid ================= * Sending posts to the list relevant to only one or two people on this list, such as tests or traceroutes in response to another post for comparison to those originally posted. * Jokes, Puns, amusing observations, spelling corrections. Other NANOG related lists ========================= * NANOG-futures - for discussion of the evolution of NANOG, including organizational structure, policies and procedures, and agendas for NANOG meetings. Such topics aren't appropriate for the main NANOG mailing list. http://mailman.nanog.org/mailman/listinfo/nanog-futures * nanog-attendee - For discussion of venue-specific issues relevant to attendees of the current NANOG physical meeting. http://mailman.nanog.org/mailman/listinfo/nanog-attendee * nanog-announce - For announcements of NANOG meetings an other Important NANOG related announcements. Low traffic and all posts are also sent to main list. http://mailman.nanog.org/mailman/listinfo/nanog-announce Other Mailing Lists =================== Information about related lists: http://www.nanog.org/mailinglist/listfaqs/otherlists.php

1 0

RESOLVED Re: sorta-OT graph snmp values
by Scott Weeks 20 Feb '09

20 Feb '09

Thanks to everyone for the help! :-) Especially to Brian Sherwood who helped me finally figure it out. I didn't "set terminal png" because I didn't have a terminal connected to the Solaris box and wasn't using X. However, this needs to be set anyway. Also, "set output graph.png" needs to go *before* the plot statement. The data I mentioned earlier is in /export/home/router/erx-cpu-util/36w/util.txt Here is the very brief gnuplot program that now works: -bash-3.00$ cat graph-36w-cpu.plt #!/usr/local/bin/gnuplot set terminal gif set ylabel "Percent CPU Utilization" set xlabel "time" set output '/export/home/router/erx-cpu-util/gnuplot/36w-cpu-util.gif' plot '/export/home/router/erx-cpu-util/36w/util.txt' using 1:2 title "card1" smooth csplines, '/export/home/router/erx-cpu-util/36w/util.txt' using 1:3 title "card1" smooth csplines Thanks again, scott

1 0

sorta-OT graph snmp values
by Scott Weeks 20 Feb '09

20 Feb '09

First, please don't respond with "use mrtg, rrdtool, cricket, etc, etc." Silly 'layer 8' reasons are keeping me from being able to utilize these tools at this time. I have a need to graph SNMP values created by using a simple shell script on a Solaris box. I have output like this: 02-20-2009_08:00 39 19 20 18 23 19 18 18 ........ <snip 9 rows of data w/o the date> ........ 26 20 20 17 02-20-2009_09:00 23 20 22 18 I want to find a program that will allow me to graph the dates on the x-axis and the values on the y-axis, but I need it to be programmable such that I can run it from cron and send the graph to a directory as a jpeg, gif or png file. I tried using gnuplot, but I can't seem to make it work on outputting only to a file. Even using "set output graph.png". Can someone push me in the right direction? I'm not sure, but this should probably be discussed off-list... Thanks, scott

3 2