October 2011 - Test - lists.nanog.org

Colocation providers and ACL requests
by Christopher Pilkington 02 Nov '11

02 Nov '11

Is it common in the industry for a colocation provider, when requested to put an egress ACL facing us such as: deny udp any a.b.c.d/24 eq 80 …to refuse and tell us we must subscribe to their managed DDOS product? -cjp

14 19

using IPv6 address block across multiple locations
by Dmitry Cherkasov 02 Nov '11

02 Nov '11

Hello, Please advice what is the best practice to use IPv6 address block across distributed locations. Recently we obtained our PI /48 from RIPE. The idea was to assign partial slices from this block to different locations (we have currently 3 offices in Europe and 2 in USA). All locations are interconnected with static VPNs. Each location is supposed to establish BGP session with local ISP. Partial prefix /56 + aggregate /48 (with long AS PATH) are to be announced by each office. The problem we ran across is that ISP in US does not wish to accept prefixes longer then /48 from us. Need your advice: is this normal to distribute /48 by /56 parts across locations or should we obtain separate /48 for each of them? Or maybe we need /32 that can be split into multiple /48? Anyway we are not ISP so /48 looks quite reasonable and sufficient for all our needs. Thank you. Dmitry Cherkasov

12 17

Outgoing SMTP Servers
by Dennis Burgess 01 Nov '11

01 Nov '11

I am curious about what network operators are doing with outbound SMTP traffic. In the past few weeks we have ran into over 10 providers, mostly local providers, which block outbound SMTP and require the users to go THOUGH their mail servers even though those servers are not responsible for the domains in question! I know other mail servers are blocking non-reversible mail, however, is this common? And more importantly, is this an acceptable practice? Most of our smaller ISPs that we support; we allow any outbound SMTP connection, however we do watch residential users for 5+ outbound SMTP connections at the same time. But if the ISP has their own mail servers, and users wish to relay though them, we basically tell them to use their mail server that they contract with. What is the best practice? ----------------------------------------------------------- Dennis Burgess, Mikrotik Certified Trainer Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 <tel:314-735-0270> Website: http://www.linktechs.net <http://www.linktechs.net/> LIVE On-Line Mikrotik Training <http://www.onlinemikrotiktraining.com/> - Author of "Learn RouterOS" <http://routerosbook.com/>

42 95

Google+ now available for Google Apps domains
by steve pirk [egrep] 31 Oct '11

31 Oct '11

Y'all ragged on me because Google+ was only available to gmail users... Well, now you can enable it for your users from the control panel on your Google Apps domains... Google Apps administrators can manually turn on Google+<http://www.google.com/support/a/bin/answer.py?answer=1631744> for > their organization. Once Google+ is turned on, users will need to sign up > at google.com/+ <http://www.google.com/+> to get started. For customers > who use Google Apps for Business or the free version of Google Apps and who > have chosen to automatically enable new services<http://www.google.com/support/a/bin/answer.py?answer=82691>, > Google+ will automatically become available to all of your users over the > next several days. > > *Editions included:* > Google Apps, Google Apps for Business, Government and Education* http://googleappsupdates.blogspot.com/2011/10/google-now-available-for-goog… Now, do I toss the last 1.5 years of posts and use my apps domain, or stay as my gmail user account. Decisions, decisions... Methjinks history is the better part of valor, so I will stay using my gmail account. It would be cool if you could link them. -- steve pirk yensid "father... the sleeper has awakened..." paul atreides - dune kexp.org member august '09 - Google+ pirk.com

4 4

Hands and Eyes for London and Amsterdam
by Mike Rae 31 Oct '11

31 Oct '11

Hi : Looking for some recommendation on "Hands and Eyes" to aid in setting up gear in datacenters located in Amsterdam and London. Exceptional quality of workmanship a must. Thanks Mike

2 1

Re: Outgoing SMTP Servers
by William Herrin 30 Oct '11

30 Oct '11

On Sun, Oct 30, 2011 at 3:17 PM, Dave CROCKER <dcrocker(a)bbiw.net> wrote: > Your misunderstanding of physical pollution pollutes your understanding of > spam. But it turns out that you seem to misunderstand spam quite a bit, > independently. Okay wise guy. Let's take another look at your version of email spam as pollution. Put some gangbangers in a truck and drive them down the street. These are our allegorical spammers. As the truck rolls they fire thousands of rounds, clip after clip, from Uzis aimed at every glass window that they see. Clearly I am mistaken to describe these gangbangers as mass murdering criminals. When I say that they and the folks who aided and abetted their spree should be locked away, I display my ignorance as to the nature of gangs. No, this is all really a matter of lead pollution: People taking too much advantage of the fact that it's generally OK to drive on the road, or throw objects through the air, a real tragedy of those commons. It's not like we can jail everybody who decides to shoot up a house. So, instead of hiring sheriffs whose our ire will land on folks who willfully or negligently shielded the gangbangers from detection and pursuit, we should forgive the complicit and restrict our efforts to bulletproof glass and generally reducing the rain of bullets to a more survivable level. Regards, Bill Herrin -- William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004

1 0

XSServer / Taking down a spam friendly provider
by Chris 30 Oct '11

30 Oct '11

Hello I run a few Wordpress sites here and there, but I'm amazed at the amount of spam that comes from xsserver.eu's clients. Their abuse department is non-responsive: they do not even have auto responders to emails and the offending IP addresses keep spamming weeks after my email. I have CC'd my abuse complaints to Hurricane Electric, with no luck either, so I'm stuck Before somebody screams the path of least resistance of "just install Akismet or (insert spam plugin here)", that type of thinking just makes spam even worse because we just keep large, possibly stale, databases of IP addresses that may or may not be active spammers and does not address the issue. Does anyone have any recommendations of where to go next because I'm just limited to doing a whois on the IP address, emailing the abuse contact and tracerouting. Examples of the offending IPs are: 109.230.216.225 109.230.220.34 109.230.217.166 109.230.220.95 A prime offender is hellomotow.net, who provides "SEO" services with automated spamming tools. hellomotow.net has spammed me in the past from IP addresses like this so I believe XSServer is becoming the new McColo / AlphaRed / ThePlanet (back in the day, their abuse dept is very responsive now) I'm not asking for you to do the footwork for me, unless you want, but just needed some advice from folks more knowledgeable than myself. -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton

7 9

Today is Dennis Ritchie Day
by Jay Ashworth 30 Oct '11

30 Oct '11

So saith Tim O'Reilly, and I think he's entitled... http://radar.oreilly.com/2011/10/dennis-ritchie-day.html Happy landings, Dennis. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

Re: XSServer / Taking down a spam friendly provider
by Chris 30 Oct '11

30 Oct '11

See, since I emailed this - RIPE wants feedback and sent me an email offlist! I'll gladly give them an earful about how RIPE address ranges are starting to be notorious for abuse due to lack of valid WHOIS information and lack of response from so-called abuse departments. I would like to thank Mr. Herrin for his input because he is completely right now. With the Protect IP Act lurking in Congress, would you rather have the Dept of Justice mandate URL blocking of DNS or would you continue to enjoy the freedom we have right now between companies, professionals and everybody else without the government's blind mandate on everything. I would rather have all of us call the shots and work in cooperation than a lobbyist or special interest buying the vote of a politician to have some Chinese / totalitarian control of the Internet. Mr. Pittcock, I was point out that I've had providers in the past automatically respond to abuse complaint but do nothing and in this instance, an abuse complaint just goes 100% unnoticed. It was not meant to be taken literally. Thanks, -C

1 0

Need photographs of IT/Telecom gear/rooms
by Mike 30 Oct '11

30 Oct '11

Greetings, I have been given the opportunity to teach the mechanics of the Internet to a group of 6 - 12'th grade students, and as an engineer and owner of an ISP I have it in mind to really get into this and show these kids how, really, all this stuff works and to make it fun and exciting. I can't take them on a tour of an ATT central office to show off one of my DSLAMs for example, nor can I really show them what a colocation or IX looks like since they are too far away to drive. I was hoping any of you would be kind enough to provide pictures of these types of environments, especially rack mounted switch/router hardware, fiber optic cabling short and long haul, international undersea cable anchor points, or anything else that would make for a good slide presentation in this context. These kids are in a very rural community where marijuana is the main source of income (followed by meth), and have little access to adults doing this type of stuff in the real world. My focus will also include introducing these kids to the concept of having something better such as a career in information technology and talking about ways they themselves might get involved and on track that way, so these photographs would be extremely helpful to light their young minds and get them thinking about their futures. Thank you all. Mike-

8 7