January 2010 - Test - lists.nanog.org

DNS question, null MX records
by Eric J Esslinger 04 Jan '10

04 Jan '10

I have a domain that exists solely to cname A records to another domain's websites. There is no MX server for that domain, there is no valid mail sent as from that domain. However when I hooked it up I immediately started getting bounces and spam traffic attemtping to connect to the cnamed A record, which has no inbound mail server (It's actually hitting the firewall in front of it). (The domain name is actually several years old and has been sitting without dns for a while) I found a reference to a null MX proposal, constructed so: example.com IN MX 0 . Question: Is this a valid dns construct or did the proposal die? I don't want to cause people problems but at the same time, I don't want any of this crap to even attempt to deliver on this domain to any of my servers. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 ________________________________ This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

17 31

[NANOG-announce] REMINDER: CFP for NANOG 48
by Tom Daly 04 Jan '10

04 Jan '10

Hello Fellow NANOG'ers, As you all should know by now, NANOG 48 is coming up in February. The NANOG Program Committee has been busily recruiting, collecting, and reviewing submissions for the program, however, we still need more content. We have lined up many interesting Tracks and Panels, but need more General Session submissions - to learn more about what you're up to in your networks and what is important to you! The NANOG 48 Call for Presentations is still available at http://www.nanog.org/meetings/nanog48/index.php. The PC will be having a call next Tuesday to review submissions, and would like to have more material to review. So what that means: - YOU: Go think of something you think is important to the NANOG Community - YOU: Write up some slides (PDF format prefered) - YOU: Submit them to the PC tool (https://pc.nanog.org) - WE, THE PC: Tell you how awesome your presentation looks - YOU: Present at NANOG 48 and take all the credit for your awesome talk! Yes, it really is that simple. Do it now! Shamelessly, for the NANOG PC, Tom Daly -- Tom Daly CTO, Dynamic Network Services, Inc. http://dyn.com/ _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

geolocation comparison
by Bradley Huffaker 04 Jan '10

04 Jan '10

CAIDA plans to conduct a comparison of geolcocation tools for determining the location of Internet Protocal (IP) address (and other identifiers) in the summer of 2010. At this time we wish to receive feedback from interested parties on input to the comparison survey, whether they wish to participate and in what capacity. * What is your primary interest in geolocation services? Legal, academic, content localization, disaster preparedness, regulation, ... * Can you provide ground truth geolocation information for your organization? * Do you have suggested metrics, questions, or tests to include in the comparisons? * If you provide a geolocation service, under what conditions would you be willing to participate? * If you use a Geolocation service(s), which do you use and in what way? * Which companies do you consider to be the primary providers of geolocation services at this time? Please send any comments to: geocompare-info(a)caida.org Details can be found: http://www.caida.org/projects/cybersecurity/geolocation/ -- "Be always at war with your vices, at peace with your neighbors, and let each new year find you a better man." - Benjamin Franklin

1 0

More ASN collissions
by Jared Mauch 04 Jan '10

04 Jan '10

As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml - Jared

6 7

Re: Consumer-grade dual-homed connectivity options?
by Scott Weeks 04 Jan '10

04 Jan '10

--- paul.w.bennett(a)gmail.com wrote: From: "Paul Bennett" <paul.w.bennett(a)gmail.com> At home, I currently run two DSL lines. Right now, we just have two separate LANs, one connected to each line, with my wife's devices attached to one, and my devices attached to the other. For a while now, I've been thinking about setting up a load-balancing routing solution to give both of us access to both lines. --------------------------------------------------- Maybe www.xincom.com/products.php will work? scott

4 3

InterNAP FCP (again?)
by Michael J McCafferty 04 Jan '10

04 Jan '10

All, I know this has been discussed to some degree before and I have searched the archives. However is it seems in my previous posts to this list about anything, the truly useful replies are the private replies ones that don't make it to this list. We are considering the InterNAP Flow Control Platform. Currently we have 3 transit providers but are adding one or two more and will also be adding a connection to the Any2 exchange at One Wilshire. The price is manageable, the reporting seems quite useful, but I haven't seen it actually in action on my network. If it works as claimed for managing commit levels, performance, etc. then I expect we'd be very happy. The problem is that InterNAP does not want to do any acceptance testing... all sales are final... and in my research on the web, I see a few companies that have implemented the FCP and have either removed it or switched to Avaya CNA (yes, I know it's going away). Since InterNAP has pulled way from any kind of happiness guarantee, I'd very much like to hear from actual users of the FCP, happy and unhappy, to help me feel better about signing the PO. Does it do what it says it does for performance and managing commit levels? Do you feel it was worth the integration and money? Are you happy with it? What size and shape is the network you used it on? Do you have any additional thoughts to share regarding the FCP? Thanks! Mike -- ************************************************************ Michael J. McCafferty Principal M5 Hosting http://www.m5hosting.com You can have your own custom Dedicated Server up and running today ! RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more ************************************************************

3 2

Does anyone have the Cyber Storm II Exercise Report?
by Eric Brunner-Williams 04 Jan '10

04 Jan '10

I'm sure someone must, but google as I have I only find "fact sheets" (marcom collateral) and reports to Congress. Thanks in advance! Eric

2 1

Article on spammers and their infrastructure
by Phil Regnauld 03 Jan '10

03 Jan '10

http://threatpost.com/en_us/blogs/attackers-buying-own-data-centers-botnets… It this something new ? The article seems to mix various issues together. And this would seem highly inefficient to me compared to traditional botnets (renting your own rack for a botnet doesn't really make sense :) Comments ?

21 38

Re: Consumer-grade dual-homed connectivity options?
by Mathias Seiler 03 Jan '10

03 Jan '10

Hi Paul You can do this on a linux box with a pretty much basic kernel. I currently have a similar setup at home with a DSL and a cable line (from different providers). Here's the script I'm actually using: http://ocaholic.ch/download/multinat.txt Some packets are tagged with iptables (SSH as an example) because I want it to prefer the DSL connection. You can do pretty interesting things with it, even per-packet round-robin distribution … which is a Bad Idea™ though. If you want it to fail-over automatically you need to patch the kernel etc. You'll find all information on http://lartc.org/ (especially on http://lartc.org/howto/lartc.rpdb.multiple-links.html) and here: http://www.ssi.bg/~ja/#routes This setup is running for about a year now and it does this quite well. Regards Begin forwarded message: >> >> --- paul.w.bennett(a)gmail.com wrote: >> From: "Paul Bennett" <paul.w.bennett(a)gmail.com> >> >> At home, I currently run two DSL lines. Right now, we just have two >> separate LANs, one connected to each line, with my wife's devices attached >> to one, and my devices attached to the other. For a while now, I've been >> thinking about setting up a load-balancing routing solution to give both >> of us access to both lines. >> --------------------------------------------------- >> Mathias Seiler MiroNet GmbH, Strassburgerallee 86, CH-4055 Basel T +41 61 201 30 90, F +41 61 201 30 99 mathias.seiler(a)mironet.ch www.mironet.ch

1 0

Regarding SLA violations
by Saqib Ilyas 03 Jan '10

03 Jan '10

Hi NANOGers I request a few moments of your time for your invaluable input on the following questions that I am wondering about: 1. a) How often does a service provider network incur SLA violations? b) Which SLA parameter is the most probably violated (bandwidth, delay, packet loss or others)? c) Apart from link failures, what are other likely causes of this violation? 2. If a service provider provisions a 2 Mbps data pipe between two customer sites, how often does the customer traffic go beyond 2 Mbps? Thanks and best regards -- Muhammad Saqib Ilyas PhD Student, Computer Science and Engineering Lahore University of Management Sciences

1 0