January 2010 - Test - lists.nanog.org

New netblock Geolocate wrong (Google)
by Rosenberry, Eric 19 Jan '10

19 Jan '10

I just lit up a new IP netblock (assigned directly from ARIN) and the companies that provide Geolocate databases do not have the correct location information available yet. Specifically Maxmind (http://www.maxmind.com/) thinks we are in Canada and IP2LOCATION (http://www.ip2location.com/) has no data. For the most part this is benign or at worst slightly impacting since I often get redirected to global load balance nodes up in Canada instead of locally in the North West, however, the more major issue I am running into is that Google chooses to redirect all my users to www.google.ca<http://www.google.ca>. So my questions to others are: 1. How do I get my data updated in all of the geolocate providers databases as quickly as possible? 2. What geolocate database does Google use (is it homegrown?) and how do I get them to update my data? Thanks. -Eric _______________________________________________________________ Eric Rosenberry Sr. Network Engineer | Chief Bit Plumber iovation 111 SW Fifth Avenue Suite 3200 Portland, OR 97204 www.iovation.com<http://www.iovation.com/> The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited. If you think that you have received this email message in error, please notify the sender by reply email and delete the message and any attachments.

13 16

At&t and Sprint Contact USA Wholesales
by Jerome SCHEVINGT 19 Jan '10

19 Jan '10

Hi i am search a contact into AT&T and Sprint for T1/DSL/DS3 Wholesales services. if you know a name/email, please contact me Thanks for your Help Jerome -- Jerome Schevingt Ingénieur Systèmes et Réseaux PHIBEE Tel: +33(0)426847860 Mobile: +33(0)607759222 Fax: +33(0)426847861 Mail: jerome(a)phibee.net

1 0

DIMACS/CCICADA Workshop on Secure Routing
by Steven Bellovin 18 Jan '10

18 Jan '10

Note: we really want ops clue! ********************************************************************* DIMACS/CCICADA Workshop on Secure Routing February 22 - 24, 2010 DIMACS Center, CoRE Building, Rutgers University Organizers: Steve Bellovin, Columbia University, smb at cs.columbia.edu Nick Feamster, Georgia Institute of Technology, feamster at cc.gatech.edu Aaron D. Jaggard, Rutgers University, adj at dimacs.rutgers.edu Vijay Ramachandran, Colgate University, vramachandran at colgate.edu Presented under the auspices of the DIMACS Special Focus on Algorithmic Foundations of the Internet and the Command, Control, and Interoperability Center for Advanced Data Analysis (CCICADA). ************************************************ This workshop will bring together experts in networking, algorithms, mechanism design, and other areas to discuss recent progress and future directions in securing network routing, including robustness in the face of misconfiguration or rational behavior and defense against active attacks. ******************************************************************** Participation: We are soliciting short abstract submissions to be considered for a presentation at the workshop. Abstracts should be on recent progress and future directions in secure network routing; this includes (but is not limited to) theory, analysis, design, and experimental work related to robustness in the face of misconfiguration or rational behavior, defense against active attacks, and other problems relevant to secure routing. Because there will be no published proceedings we welcome submissions covering material that was previously presented elsewhere (and referenced as such). Instructions for authors: Submissions should include talk title, speaker name, affiliation, contact information, and a short abstract. Please mail abstracts to Aaron Jaggard (adj at dimacs.rutgers.edu) by Friday, January 22, 2010. ******************************************************************** Registration: (Pre-registration deadline: February 15, 2010) Please see website for complete registration details. ********************************************************************* Information on participation, registration, accomodations, and travel can be found at: http://dimacs.rutgers.edu/Workshops/SecureRouting/ **PLEASE BE SURE TO PRE-REGISTER EARLY** ********************************************************************

2 2

Network Provider Recommendation in Edmonton AB
by Lyndon Nerenberg (VE6BBM/VE7TFX) 18 Jan '10

18 Jan '10

I have a client in Edmonton who's looking for a network drop to their office, something in the 2-10 MB/s range. The location is at 46 Ave. and 99 St. The core requirement is for a bare unfiltered *symmetric* pipe (no ADSL). Traffic volume will be low: 2-4 laptop VPNs plus some light web server and email traffic. 2 Mb/s as a lower bound should be fine, with a /28 IPv4 address block (either bridged or routed). I've been away from Edmonton long enough now that I no longer know who's active there, so any and all feedback is welcome. (Vendors, too, provided you include some real content.) Please respect the Reply-To header. Cheers, --lyndon

2 1

Are IPv6-only Internet services viable today?
by Cameron Byrne 17 Jan '10

17 Jan '10

Folks, My question to the community is: assuming a network based IPv6 to IP4 translator is in place (like NAT64 / DNS64), are IPv6-only Internet services viable as a product today? In particular, would it be appropriate for a 3G /smartphone or wireless broadband focused on at casual (web and email) Internet users? Keep in mind, these users have NAT44 today. There has been a lot of discussion about CGN / LSN / and other technologies around the corner. In the mobile network operator space, the lack of IPv4 addresses, both public and RFC 1918, has been very real for a long time. In North America, mobile network operators have numbered subscribers with BOGON space (obvious risk) and relaunched multiple instances of RFC1918 space multiple times within their AS (breaking end-to-end even within their own AS, which is a problem with technologies increasingly moving towards any-to-any SIP and IMS). In any event, we can clearly state the addressing issue has compromised both engineering and business decisions in today's major mobile networks. Both scenarios above require tremendous NAT44 infrastructure. And, future CGN technologies don't give me much comfort that things will get better for the operator or the consumer. So, i have been looking more at offering IPv6-only service with NAT64 translation to access the IPv4 Internet. For the network operator, the NAT44 and NAT64 aggregate network state / number of translation is the same to start, and as more native IPv6 content come on the NAT64 gracefully. In fact, given that Google is IPv6 now, and Google is content leader, moving to NAT64 would actually be a reduction in NET NAT translations. IMHO, any dual-stack solution is not an adequate interim solution since both private and public IPv4 addresses are simply not available or will be soon completely exhausted. Dual-stack will have a role in the future, just like public IPv4 addresses have a role today. Dual-stack will be a required service for users with special requirements (legacy IPv4 VPNs ....) , not average web and email users that account for greater than ~80% of a mobile operator's customer base. I also want to stress that this solution best fits new subscribers and devices, it will not be a solution for Window 98 ... or Windows XP in fact. This draft is helpful in understanding the issues as well as the IETF's work on NAT64 draft-penno-behave-64-analysis-02 Some folks in a lab decided to see what type of user experience can be expected using NAT64 and DNS64 and IPv6-only on the end system -- using commonly available hardware and software that's available today, but different from the kit used for the NANOG IPv6 hour. In this case, there is a NAT-PT box in place of NAT64, they used an open source DNS64 implementation, and a standard WIndows 7 Starter edition netbook. I think the conclusion is that casual Internet use, as a product, is possible today. It is not everything IPv4 offers today, but as IPv6 content and applications come on-line the IPv6 capabilities will exceed what IPv4 could do (no NAT for native flows). Screenshot video below, best viewed in HQ mode. This is just a data point with regard to functionality that is akin to NAT64 / DNS64 that is available today. http://www.youtube.com/theipv6guy

9 18

Yahoo Postmaster Contact
by Jon Kibler 17 Jan '10

17 Jan '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Will a Yahoo Postmaster please contact me off list? No one is responding to my web based complaints about Yahoo dropping email we are sending to our own staff's Yahoo email accounts. TIA! Jon Kibler - -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o/c/s: 843-849-8214 / 843-813-2924 / 843-564-4224 e: Jon.Kibler(a)aset.com or Jon.R.Kibler(a)gmail.com s: JonRKibler http://www.linkedin.com/in/jonrkibler My PGP Fingerprint is: BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAktTWv0ACgkQUVxQRc85QlNwjACfQ13IYf08/LLjqZo0Bg9QQ9WE 5J0AnAsRk9uajgbm/hV2j1wOrU7ED78D =MVEN -----END PGP SIGNATURE-----

1 0

AT&T planned maintenance - country-wide - MPLS?!?
by Stefan 17 Jan '10

17 Jan '10

Our NOC reported at 2:00AM MPLS "blips" on some of our networks because of AT&T stating that "there is currently country-wide planned maintenance that is affecting a large number of circuits, he [AT&T person answering the request for clarification] did not clarify which ones." We have received no communication in this regard. Anybody else knowing anything about this? Thank you, ***Stefan Mititelu http://twitter.com/netfortius http://www.linkedin.com/in/netfortius

1 0

News about the .HT domain
by Stephane Bortzmeyer 16 Jan '10

16 Jan '10

I have no information about the state of the Internet links in Haiti (everything seems down) but, for the .HT top-level domain, here are a few news. .HT has six name servers, four outside of the country. They were not affected so .HT never had a problem resolving. Main DNS lesson: always put name servers in very diverse places. The master was in Port-au-Prince and is unreachable, probably for a long time. A new (stealth) master has been set up in Australia by Cocca and the slaves are now reconfigured to use it. Two already do it and therefore the zone no longer risks expiration (and can even be modified). You may find information at <http://blog.icann.org/2010/01/haiti/>. % check_soa ht There was no response from ns2.nic.ht There was no response from ns1.nic.ht dns.princeton.edu has serial number 2010011198 charles.cdec.polymtl.ca has serial number 2010011198 ht-ns.anycast.pch.net has serial number 2010011615 ns3.nic.fr has serial number 2010011615

2 1

Re: Katrina response, private and public
by Eric Brunner-Williams 16 Jan '10

16 Jan '10

On 1/15/10 11:52 AM, Bill Woodcock wrote: > On Fri, 15 Jan 2010, Eric Brunner-Williams wrote: > > After the Katrina landfall a diverse group of wireless people started > > organizing a relief effort... > > There are quite a lot of us working on it, is there something specific > you're volunteering to do? > > -Bill > > > Thank you Bill, As I'm in Geneva this morning so the only thing I can share that is immediately accessible is the experience of living for four of the past five years off-grid. My best generator was the Honda 2000 watt, 120V, super quiet, 15 hours/gal unit. My second best was the (PRC knock-off) Pony 1000 Watt 120V super quiet. Everything begins at the generator. Gas is useful. For batteries a series of 6V AGM. A single 6V AGM can power a VSAT (HughesNet) for several hours. With three and even a 1000 watt 120V genset a VSAT link can be kept up a large part of 24/7. They are heavy and never pre-positioned (gensets aren't either), but they are the stable, long-term uptime must have. An efficient pure-sine wave inverter completes the electrical basic of a mobile programmer's electrical infrastructure. Non-pure-sine eats voltage and phase delta sensitive gear. Learning about Electrical Cost of Link Characteristics (ECLC, a low energy pun on the PILC WG abbreviation) was the most important thing I learned going off-grid. Some of these points are made within the larger ICT donor framework, at http://www.inveneo.org/download/Inveneo_ICT-Sustainability_Primer0809.pdf , the Inveneo ICT Sustainability Primer, which is worth the read (particularly on why "donated kit" and Windoz are wicked expensive to field), see pages 2 and 3. Things overlooked in the Inveneo paper is the role of portable generators, 6V battery management, and VSAT, which are what I see as the "off-grid" critical toolkit. I had educational and medical requirements in addition to my always-connected-to-my-racks-in-Maine needs. I'm wicked pleased to see the NSRC kit in route, and as I'm in Geneva I'll start on our IRC PoC and our own donor commit. When I get back to Cornell I'll start there too, as I know there is an interest at Cornell Law in the Maison des Infants de Dieu orphanage in Port au Prince. Eric

1 0

Virbl: The First IPv6 enabled dnsbl?
by Mark Schouten 15 Jan '10

15 Jan '10

Hi, FYI: http://virbl.bit.nl/index.php#ipv6 Comments on the listing method are appreciated. Regards, -- Mark Schouten, Unix/NOC-engineer BIT BV | info(a)bit.nl | +31 318 648688 | KvK: 09090351 MS8714-RIPE | B1FD 8E60 A184 F89A 450D A128 049B 1B19 9AD6 17FF

2 1