April 2010 - Test - lists.nanog.org

DNSSEC Deployment in ARPA Children
by Joe Abley 29 Apr '10

29 Apr '10

Colleagues, ICANN plans to begin a test deployment of DNSSEC in various zones starting on 2010-04-29: IN-ADDR-SERVERS.ARPA IP6.ARPA IP6-SERVERS.ARPA IRIS.ARPA URI.ARPA URN.ARPA These zones will be signed using RSASHA256 and NSEC with 2048-bit KSKs and 1024-bit ZSKs. Given DNSSEC deployment experience to date, ICANN does not expect the signing of these zones to cause any operational problems. However, should you have any concerns please feel free to contact us at ticket(a)dns.icann.org or phone +1 310 301 5810 (e-mail/ticket preferred). At the end of the test period, given no observed or reported harmful effects, ICANN will arrange for trust anchors for these zones to be included in ARPA as DS RRSets and will invite the five RIRs to submit DS RRSet add/delete requests in IP6.ARPA when they are ready. We anticipate the testing period to last at least two weeks. Regards, Joe Abley Director DNS Operations, ICANN

2 1

Time Warner Cable / Roadrunner contact - routing issue
by gwbnanog 29 Apr '10

29 Apr '10

If there is a Time Warner Cable / Roadrunner routing engineer monitoring this list can you please contact me off list regarding a routing issue from your IP block: 76.168.0.0/13 Thank you.

1 0

SMW4 Routing Implications
by shake righa 29 Apr '10

29 Apr '10

What have been the routing implications in regards to internet traffic with SMW4 cable beign down? Regards, Shake Righa

3 2

[Re: http://tools.ietf.org/search/draft-hain-ipv6-ulac-01]
by bmanning＠vacation.karoshi.com 29 Apr '10

29 Apr '10

and a very pleasant evening. a few questions. IPv6 on your radar? Looking at options for addressing your future v6 needs? Have you looked at the IETF/ID in the subject line? if you think something like this is a good idea, worth persuing, I'd like to hear from you. --bill

28 84

Re: Starting up a WiMAX ISP
by Charles Bronson 29 Apr '10

29 Apr '10

I have received a few responses along this line and figured I would pick one and answer all of them. To determine if it is financial sustainable, I will take the information on design and implementation to create a configuration. This will let me establish the fixed and recurring costs required to set up the core and then incremental costs (fixed hardware and recurring leases) per broadcast area. Then I can calculate how many customers I will need per broadcast area to bring up a broadcast site. This will give me general startup costs and let me build a customer count / biling rate table. Once I have those numbers I can beat the pavement and find out what people will pay for my service and then I will know based on my table if there is a snowball's chance in hell of this working. Charles Bronson ________________________________ From: Brandon Kim <brandon.kim(a)brandontek.com> To: packetgeek(a)yahoo.com Sent: Tue, April 27, 2010 11:10:08 AM Subject: RE: Starting up a WiMAX ISP Interesting mission you have here. I'm in hudson valley region of NY. Have you done some research on the economics of this venture? Do you know if people would be willing to pay for higher speed internet access? Do you know if there are any gov't programs that can give you a grant to do this? > Date: Tue, 27 Apr 2010 07:00:38 -0700 > From: packetgeek(a)yahoo.com > Subject: Starting up a WiMAX ISP > To: nanog(a)nanog.org > > Looking for advice... > > I live in central / western New York state (think villages and farms). There are a good number of hills but no mountains. I have solid LAN experience and experience facing a smaller network to > the Internet. I was network admin for a medium size enterprise network (I.e. design and implementation including LAN, Internet connectivity, VPN, routers, DNS, mail, webservers, physical servers, etc). I would like to build a local ISP that can serve high speed internet access to the more rural areas whose only option is dial up access, well away from the CO. It would also be nice to compete with the cable company and DSL for customers in the villages. > > I have been researching information for design / implementation of WiMAX, equipment suppliers, contractors to help with installation of tower equipment and acquiring tower space, but have been coming up empty handed. > > What resources are available to help me bridge the gap from where I am to what I need to know to get started and what specific technologies would you recommend I bone up on? I know beyond the WiMAX specific information, I will probably need to cozy up to BGP, maybe MPLS for traffic between the core and towers? Also do you have any suggestions on where I can find suppliers and service vendors in this field? Networks are my passion and am willing to dig in, but I need some direction. > > Thanks for you help an insight. > > Charles Bronson > > > >

6 5

Anyone from UUNET.CA around.
by Mark Andrews 29 Apr '10

29 Apr '10

------- Forwarded Message Return-Path: MAILER-DAEMON Delivery-Date: Thu Apr 29 10:51:31 2010 Return-Path: <> Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id o3T0pUQJ060935 for <marka@localhost>; Thu, 29 Apr 2010 10:51:30 +1000 (EST) X-Original-To: marka(a)isc.org Delivered-To: marka(a)farside.isc.org Received: from farside.isc.org [2001:4f8:3:bb::5] by drugs.dv.isc.org with IMAP (fetchmail-6.3.14) for <marka@localhost> (single-drop); Thu, 29 Apr 2010 10:51:30 +1000 (EST) Received: by farside.isc.org (Postfix) id 8AE29E9E84; Thu, 29 Apr 2010 00:51:19 +0000 (UTC) Date: Thu, 29 Apr 2010 00:51:19 +0000 (UTC) From: MAILER-DAEMON(a)isc.org (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: marka(a)isc.org MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="08BABE9E6F.1272502279/farside.isc.org" Message-Id: <20100429005119.8AE29E9E84(a)farside.isc.org> This is a MIME-encapsulated message. - --08BABE9E6F.1272502279/farside.isc.org Content-Description: Notification Content-Type: text/plain This is the Postfix program at host farside.isc.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to <postmaster> If you do so, please include this problem report. You can delete your own text from the attached returned message. The Postfix program <noc(a)uunet.ca>: host firewall.verizonbusiness.com[199.249.25.205] said: 530 5.7.1 This system is not an open relay.: noc(a)uunet.ca (in reply to RCPT TO command) - --08BABE9E6F.1272502279/farside.isc.org Content-Description: Delivery report Content-Type: message/delivery-status Reporting-MTA: dns; farside.isc.org X-Postfix-Queue-ID: 08BABE9E6F X-Postfix-Sender: rfc822; marka(a)isc.org Arrival-Date: Thu, 29 Apr 2010 00:50:56 +0000 (UTC) Final-Recipient: rfc822; noc(a)uunet.ca Action: failed Status: 5.0.0 Diagnostic-Code: X-Postfix; host firewall.verizonbusiness.com[199.249.25.205] said: 530 5.7.1 This system is not an open relay.: noc(a)uunet.ca (in reply to RCPT TO command) - --08BABE9E6F.1272502279/farside.isc.org Content-Description: Undelivered Message Content-Type: message/rfc822 Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (not verified)) by farside.isc.org (Postfix) with ESMTP id 08BABE9E6F for <noc(a)uunet.ca>; Thu, 29 Apr 2010 00:50:56 +0000 (UTC) (envelope-from marka(a)isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id o3T0osXA060891 for <noc(a)uunet.ca>; Thu, 29 Apr 2010 10:50:54 +1000 (EST) (envelope-from marka(a)drugs.dv.isc.org) Message-Id: <201004290050.o3T0osXA060891(a)drugs.dv.isc.org> To: noc(a)uunet.ca From: Mark Andrews <marka(a)isc.org> Subject: It shouldn't be this hard .... Date: Thu, 29 Apr 2010 10:50:54 +1000 Sender: marka(a)isc.org Can't get to www.uunet.ca connection times out. Non-working address in SOA contact field. - ------- Forwarded Message Return-Path: MAILER-DAEMON Delivery-Date: Thu Apr 29 10:42:06 2010 Return-Path: <> Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id o3T0g6Gm060782 for <marka@localhost>; Thu, 29 Apr 2010 10:42:06 +1000 (EST) X-Original-To: marka(a)isc.org Delivered-To: marka(a)farside.isc.org Received: from farside.isc.org [2001:4f8:3:bb::5] by drugs.dv.isc.org with IMAP (fetchmail-6.3.14) for <marka@localhost> (single-drop); Thu, 29 Apr 2010 10:42:06 +1000 (EST) Received: by farside.isc.org (Postfix) id 76501E9E81; Thu, 29 Apr 2010 00:38:43 +0000 (UTC) Date: Thu, 29 Apr 2010 00:38:43 +0000 (UTC) From: MAILER-DAEMON(a)isc.org (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: marka(a)isc.org MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="94D16E9E7E.1272501523/farside.isc.org" Message-Id: <20100429003843.76501E9E81(a)farside.isc.org> This is a MIME-encapsulated message. - - --94D16E9E7E.1272501523/farside.isc.org Content-Description: Notification Content-Type: text/plain This is the Postfix program at host farside.isc.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to <postmaster> If you do so, please include this problem report. You can delete your own text from the attached returned message. The Postfix program <support(a)ca.mci.com>: host firewall.verizonbusiness.com[199.249.25.205] said: 550 5.1.1 Address Not Valid: support(a)ca.mci.com (in reply to RCPT TO command) - - --94D16E9E7E.1272501523/farside.isc.org Content-Description: Delivery report Content-Type: message/delivery-status Reporting-MTA: dns; farside.isc.org X-Postfix-Queue-ID: 94D16E9E7E X-Postfix-Sender: rfc822; marka(a)isc.org Arrival-Date: Thu, 29 Apr 2010 00:38:40 +0000 (UTC) Final-Recipient: rfc822; support(a)ca.mci.com Action: failed Status: 5.0.0 Diagnostic-Code: X-Postfix; host firewall.verizonbusiness.com[199.249.25.205] said: 550 5.1.1 Address Not Valid: support(a)ca.mci.com (in reply to RCPT TO command) - - --94D16E9E7E.1272501523/farside.isc.org Content-Description: Undelivered Message Content-Type: message/rfc822 Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (not verified)) by farside.isc.org (Postfix) with ESMTP id 94D16E9E7E for <support(a)ca.mci.com>; Thu, 29 Apr 2010 00:38:40 +0000 (UTC) (envelope-from marka(a)isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.3/8.14.3) with ESMTP id o3T0cZ78060588 for <support(a)ca.mci.com>; Thu, 29 Apr 2010 10:38:38 +1000 (EST) (envelope-from marka(a)drugs.dv.isc.org) Message-Id: <201004290038.o3T0cZ78060588(a)drugs.dv.isc.org> Date: Thu, 29 Apr 2010 10:38:35 +1000 From: Mark Andrews <marka(a)isc.org> Subject: Re: Query - No Response To: undisclosed-recipients:; - - ------- Blind-Carbon-Copy To: "ic.nssip" <ic.nssip(a)northwestel.net> Cc: bind-users(a)lists.isc.org From: Mark Andrews <marka(a)isc.org> References: <7097328FE40440F2BF8419D9B6967693(a)internal.corp.ds> Subject: Re: Query - No Response In-reply-to: Your message of "Wed, 28 Apr 2010 16:59:21 CST." <7097328FE40440F2BF8419D9B6967693(a)internal.corp.ds> Date: Thu, 29 Apr 2010 10:38:35 +1000 Sender: marka(a)drugs.dv.isc.org In message <7097328FE40440F2BF8419D9B6967693(a)internal.corp.ds>, "ic.nssip" writ es: > Hello everyone, > > I have a strange issue on a DNS server that is not able to resolve = > www.cancer.ca [65.110.160.32]. > If somebody has an idea about what is going wrong there, I will really = > appreciate any suggestions on how to make it work. > > Here is my dig and dig +trace test on that server: > > U:\>dig @ns.domain.net www.cancer.ca > > ; <<>> DiG 9.7.0a1 <<>> @ns.domain.net www.cancer.ca > ; (1 server found) > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 154 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;www.cancer.ca. IN A > > ;; Query time: 171 msec > ;; SERVER: ns.domain.net#53(IP address) > ;; WHEN: Wed Apr 28 15:47:09 2010 > ;; MSG SIZE rcvd: 31 > > > U:\>dig @ns.domain.net www.cancer.ca +trace > > ; <<>> DiG 9.7.0a1 <<>> @ns.domain.net www.cancer.ca +trace > ; (1 server found) > ;; global options: +cmd > . 35864 IN NS l.root-servers.net. > . 35864 IN NS e.root-servers.net. > . 35864 IN NS m.root-servers.net. > . 35864 IN NS j.root-servers.net. > . 35864 IN NS c.root-servers.net. > . 35864 IN NS a.root-servers.net. > . 35864 IN NS k.root-servers.net. > . 35864 IN NS i.root-servers.net. > . 35864 IN NS b.root-servers.net. > . 35864 IN NS f.root-servers.net. > . 35864 IN NS d.root-servers.net. > . 35864 IN NS g.root-servers.net. > . 35864 IN NS h.root-servers.net. > ;; Received 272 bytes from ns.domain.net#53(IP address) in 15 ms > > ca. 172800 IN NS sns-pb.isc.org. > ca. 172800 IN NS l.ca-servers.ca. > ca. 172800 IN NS k.ca-servers.ca. > ca. 172800 IN NS j.ca-servers.ca. > ca. 172800 IN NS b.ca-servers.ca. > ca. 172800 IN NS m.ca-servers.ca. > ca. 172800 IN NS c.ca-servers.ca. > ca. 172800 IN NS f.ca-servers.ca. > ca. 172800 IN NS a.ca-servers.ca. > ca. 172800 IN NS e.ca-servers.ca. > ca. 172800 IN NS d.ca-servers.ca. > ;; Received 462 bytes from 128.8.10.90#53(d.root-servers.net) in 109 ms > > cancer.ca. 86400 IN NS ns2.uunet.ca. > cancer.ca. 86400 IN NS ns.uunet.ca. > ;; Received 104 bytes from 192.228.25.45#53(b.ca-servers.ca) in 281 ms > > www.cancer.ca. 86400 IN A 65.110.160.32 > ;; Received 47 bytes from 142.77.1.1#53(ns.uunet.ca) in 156 ms > > Thank you, > Julian The servers are not authoritative for the zone. Named rejects non-authoritative answers. ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4055 ;; flags: qr; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.cancer.ca. IN A ;; ANSWER SECTION: www.cancer.ca. 86400 IN A 65.110.160.32 ;; Query time: 792 msec ;; SERVER: 142.77.1.1#53(ns.uunet.ca) ;; WHEN: Thu Apr 29 10:34:28 2010 ;; MSG SIZE rcvd: 47 Mark - - - -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org - - ------- End of Blind-Carbon-Copy - - --94D16E9E7E.1272501523/farside.isc.org-- - ------- End of Forwarded Message - --08BABE9E6F.1272502279/farside.isc.org-- ------- End of Forwarded Message

2 1

DDoS mitigation services from SPs
by William McCall 28 Apr '10

28 Apr '10

All: I did some searching and have not found any concrete replies on the list, but what carriers can offer L3 DDoS mitigation? Specifically, I noticed an old UUnet offering, but it seems like I must be speaking the wrong language to my sales drones. Specifically, we're dealing with AT&T, Qwest and Verizon Business. My thought is that they all offered some type of service like this, but my security folks have been driving this and having limited success. Names of other SPs (we're looking at Verisign) is helpful, but we are stuck with the Dallas area. Note: I am not interested in changing DNS records and prefixes should be able to be advertised through BGP like normal. (Apparently, people like to do funky DNS stuff to make this work and sometimes don't want to do BGP in other scenarios.) Thanks in advance, -- William McCall

6 6

IPAM
by Bryan Fields 28 Apr '10

28 Apr '10

I'm wondering what the service providers are using for IPAM. We are looking at having to manage both v4 and v6 address space and delegate internally to other people. I've looked at infoblox, but we can't justify spending 400k at this point. It's a lovely solution though. Lucent has/had a product too, but having used it before it sucks. It's also about 5x the cost of the info blox solution, and I'd rather not run solaris or windows in production. Is anyone running IPplan? http://iptrack.sourceforge.net/ I looked at it before, and at the time it's support of V6 was lacking. Is anyone running this in a SP environment with v6? Any other OSS tools for this people are using? -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

11 11

IPv6 rDNS - how will it be done?
by Felipe Zanchet Grazziotin 28 Apr '10

28 Apr '10

Hi list, this is my first post, so be nice. :) Wondering about IPv6 deployments to end-users, imagine we deploy a full /48 address to each client. How is the reverse DNS for each possible IPv6 address going to be? Nowadays I'm used to do IPv4 reverse using old Class C, which has (up to) 256 entries. Are we really going to make reverse DNS entries for each of those 2^80 addresses? Or going to deploy rDNS only at the PtP links and relevant servers? Kind regards, Felipe

13 23

comcast enterprise/carrier services
by Carlos Alcantar 28 Apr '10

28 Apr '10

Looking for a sales contact for Comcast enterprise/carrier services for there Ethernet product thanks. Carlos Alcantar Race Telecommunications, Inc. 101 Haskins Way South San Francisco, CA 94080 P: 650.649.3550 x143 F: 650.649.3551 E: carlos (at) race.com

3 2