October 2011 - Test - lists.nanog.org

HE.Net 6TO4 relay
by Meftah Tayeb 24 Oct '11

24 Oct '11

hello HE.NET did you drop the 6to4 delegated prefix 192.88.99.0/24 ? if yes please would you drop it from your BGP routing table anounced ? thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information from ESET NOD32 Antivirus, version of virus signature database 6573 (20111025) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

2 2

Juniper DOS/Blackhole question
by Jack Bates 23 Oct '11

23 Oct '11

Considered j-nsp, but this just feels more nanog appropriate. I'm told by one of my NSPs that I'm connected to a juniper. We were dealing with a DOS, and for some reason remote triggered DOS prevention via BGP wasn't working. The NOC said they had to enable multihop to my peering to make it work, otherwise it wouldn't accept the route. This seems strange to me. Any idea why a route would be rejected unless multihop was enabled? Also, any idea why a Juniper couldn't handle a simple 750mbit/s, 1.5Mpps DOS? Don't get me wrong, it could have been more than that. I was just receiving that much of the DOS and my lower end m120 didn't seem to think it an issue, so I'm curious why I was dropping packets on the link to begin with. Interestingly, I have an OC-12 to another NSP who was also dropping after around 1.2Mpps (last time I asked, they said the oc-12 hit a cisco 7600). Jack

4 5

Comcast security please contact me off list
by N Rauhauser 23 Oct '11

23 Oct '11

I do some protective service work, one client is the head of a Washington D.C. NGO that faced a credible death threat last month. Tonight I received information that the source of this threat traced one of the NGO's volunteers to her home address via Comcast IP, and the location is a relatively short drive away from a man who was arrested last month for criminal harassment almost five hundred miles from his home. I have some genuine concerns for the physical safety of this Comcast customer, and I'd like to talk to someone immediately. We've got an annoyed FBI agent who will confirm the back story on this Monday, but the subjects know they're under some sort of investigation and I'm afraid of what might happen if further info leaks over the weekend. This is a junk box for me - nrauhauser at gmail is the address I check regularly.

2 1

Can this bgp work?
by Deric Kwok 22 Oct '11

22 Oct '11

Hello We would like to split our network advertising with same AS no. in different our bgp routers to same or different upstream provider eg: 66.70.0.0/20 in bgpRouterA 67.170.0.0/20 in bgpRouterB 174.70.0.0/20 in bgpRouterC ls it working? Thank you

4 3

Re: Outsourcing DDOS
by Dennis 22 Oct '11

22 Oct '11

Good points Steven. I'd suggest a deep dive on the technologies implemented by the vendor today as times and attack methods have evolved. Many attacks today are not Volumetric or easily detected or mitigated by traditional methods. Stefan Fouant <sfouant(a)shortestpathfirst.net> wrote: >Although a bit dated, I did a pretty exhaustive comparison of offerings >from AT&T, Verizon, Prolexic, and a few others a while back. > >Don't forget there is also the go-it-yourself approach which is always a >fun option, guaranteed to keep you up at night and give you a few >additional gray hairs... > >Let me know if you're interested in the slides... > >Stefan Fouant >JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI >Technical Trainer, Juniper Networks > >Follow us on Twitter @JuniperEducate > >On 10/20/2011 4:43 PM, Hank Nussbacher wrote: >> At 09:13 19/10/2011 -0400, samuel.cunningham(a)wellsfargo.com wrote: >>> We are considering using Prolexic to 'defend' our Internet-facing >>> network from DDOS attacks. Anyone have any known issues or word of >>> warnings before we proceed? >> >> Things to check: >> >> - DDOS service caps >> - outage remedy credits >> - service trial period >> - monitoring - you will want some external mutually agreeable monitoring >> service like gomez/compuware. Who pays for it? >> >> Regards, >> Hank >> >> >> >>> Chris Cunningham >>> Network Engineering >>> Secure Connectivity >>> 704-427-3557 (Desk) >>> 704-701-6924 (Cell) >>> Samuel.Cunningham(a)Wellsfargo.com<mailto:Samuel.cunningham@wellsfargo.com> >>> [X] >>> >>> This e-mail, including any attached files, may contain confidential >>> and privileged information for the sole use of the intended recipient. >>> Any review, use, distribution, or disclosure by others is strictly >>> prohibited. If you are not the intended recipient (or authorized to >>> receive information for the intended recipient), please contact the >>> sender by reply e-mail and delete all copies of this message. >> >> > >

1 0

Re: Outsourcing DDOS
by Hank Nussbacher 22 Oct '11

22 Oct '11

At 09:13 19/10/2011 -0400, samuel.cunningham(a)wellsfargo.com wrote: >We are considering using Prolexic to 'defend' our Internet-facing network >from DDOS attacks. Anyone have any known issues or word of warnings >before we proceed? Things to check: - DDOS service caps - outage remedy credits - service trial period - monitoring - you will want some external mutually agreeable monitoring service like gomez/compuware. Who pays for it? Regards, Hank >Chris Cunningham >Network Engineering >Secure Connectivity >704-427-3557 (Desk) >704-701-6924 (Cell) >Samuel.Cunningham(a)Wellsfargo.com<mailto:Samuel.cunningham@wellsfargo.com> >[X] > >This e-mail, including any attached files, may contain confidential and >privileged information for the sole use of the intended recipient. Any >review, use, distribution, or disclosure by others is strictly prohibited. >If you are not the intended recipient (or authorized to receive >information for the intended recipient), please contact the sender by >reply e-mail and delete all copies of this message.

2 1

OT: ISPs in Brazil and Chile
by Jeff Cartier 22 Oct '11

22 Oct '11

Hi Group, A little off topic, but I was looking for a recommendation on an ISP in both Brazil and Chile. Thanks!! __________________________________________________________________ DISCLAIMER: This e-mail contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely on this e-mail. This message has been scanned for the presence of computer viruses, Spam, and Explicit Content.

3 2

Frontier IPv6 website unavailable
by Chris Curwick 22 Oct '11

22 Oct '11

When visiting www.frontier.com using an ipv6 tunnel from HE I am getting the following result: Service Unavailable A quick poll of my peers without ipv6 shows the site rendering. It looks like this is limited just to the IPv6 side.

2 1

Did Internap lose all clue?
by bas 22 Oct '11

22 Oct '11

Recently I was contacted by an Internap sales person. The third line of the email read: "As you know well, BGP makes all routing decisions simply based on HOP COUNT" I blinked my eyes a couple of times.. Yes it really said hop count. Then I replied to the guy that if he tries to sell a technical product to technical people he should get his info straight. But he replied BGP actually makes decisions based on hop count. He even sent an URL from the internap website that states this http://www.internap.com/it-iq/route-optimization-miro/ On that page there is also this gem: "BGP relies on the premise that hops are responsible for packet loss and congestion, and therefore a route with fewer hops is inherently better. " I can imagine blatant misinformation like this from a shady startup trying to trick some sales with smoke and mirrors, but from Internap? -- Bas

15 16

BGP Update Report
by cidr-report＠potaroo.net 21 Oct '11

21 Oct '11

BGP Update Report Interval: 13-Oct-11 -to- 20-Oct-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9829 44731 3.0% 65.6 -- BSNL-NIB National Internet Backbone 2 - AS812 37117 2.5% 6.6 -- ROGERS-CABLE - Rogers Cable Communications Inc. 3 - AS17974 36021 2.4% 20.8 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 4 - AS38040 35785 2.4% 7157.0 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 5 - AS7552 28191 1.9% 31.6 -- VIETEL-AS-AP Vietel Corporation 6 - AS32528 24571 1.6% 4914.2 -- ABBOTT Abbot Labs 7 - AS16010 19354 1.3% 217.5 -- RUSTAVI2ONLINEAS Caucasus Online LLC 8 - AS24560 18517 1.2% 16.4 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 9 - AS9498 17268 1.1% 20.9 -- BBIL-AP BHARTI Airtel Ltd. 10 - AS47331 16709 1.1% 5.1 -- TTNET TTNet A.S. 11 - AS5800 13361 0.9% 64.9 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 12 - AS6316 12711 0.8% 149.5 -- AS-PAETEC-NET - PaeTec Communications, Inc. 13 - AS16916 12375 0.8% 12375.0 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC 14 - AS8866 12067 0.8% 26.1 -- BTC-AS Bulgarian Telecommunication Company Plc. 15 - AS9649 11042 0.7% 208.3 -- MOPH-TH-AP Information Technology Office 16 - AS22950 10925 0.7% 341.4 -- USASK - University of Saskatchewan 17 - AS8402 10685 0.7% 13.7 -- CORBINA-AS OJSC "Vimpelcom" 18 - AS27738 10263 0.7% 30.2 -- Ecuadortelecom S.A. 19 - AS9562 9516 0.6% 1359.4 -- MSU-TH-AP Mahasarakham University 20 - AS8151 8698 0.6% 8.6 -- Uninet S.A. de C.V. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS16916 12375 0.8% 12375.0 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC 2 - AS38040 35785 2.4% 7157.0 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 3 - AS32528 24571 1.6% 4914.2 -- ABBOTT Abbot Labs 4 - AS10099 3462 0.2% 3462.0 -- HKUNICOM1-AP China Unicom (Hong Kong) Operations Limited 5 - AS50733 2437 0.2% 2437.0 -- BINA-AS Ertebat Gostaran Bina 6 - AS9562 9516 0.6% 1359.4 -- MSU-TH-AP Mahasarakham University 7 - AS17425 6306 0.4% 1261.2 -- EPA-AS-TH Provincial Electricity Authority of Thailand. 8 - AS55696 1258 0.1% 1258.0 -- SCOM-AS-ID Starcom Solusindo PT. 9 - AS22375 6129 0.4% 1225.8 -- CREDCO - First Advantage Membership Services INC. 10 - AS56204 860 0.1% 860.0 -- NETMAX-NP Net Max Technologies Pvt. Ltd. 11 - AS11943 837 0.1% 837.0 -- GLOBE - Globe Wireless 12 - AS51966 753 0.1% 753.0 -- RESTENA-ANYCAST-AS Fondation RESTENA 13 - AS53295 745 0.1% 745.0 -- ROVI - Rovi Corporation 14 - AS5311 547 0.0% 547.0 -- DNIC-ASBLK-05120-05376 - DoD Network Information Center 15 - AS47528 537 0.0% 537.0 -- INTELECOM-AS Intelecom Group ASA 16 - AS55915 907 0.1% 453.5 -- CLASSIC-NP Classic Tech Pvt. Ltd. 17 - AS10445 1606 0.1% 401.5 -- HTG - Huntleigh Telcom 18 - AS56615 397 0.0% 397.0 -- BTT-AS Business Travel Turism SRL 19 - AS4613 4346 0.3% 395.1 -- MOS-NP Mercantile Office Systems 20 - AS46066 379 0.0% 379.0 -- DOCOMOINTERTOUCH-IN DOCOMO interTouch - India Operation TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 202.92.235.0/24 13427 0.8% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 2 - 206.80.93.0/24 12375 0.8% AS16916 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC 3 - 130.36.34.0/24 12286 0.8% AS32528 -- ABBOTT Abbot Labs 4 - 130.36.35.0/24 12267 0.8% AS32528 -- ABBOTT Abbot Labs 5 - 213.16.48.0/24 10130 0.6% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 6 - 66.248.120.0/21 8592 0.5% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 7 - 180.180.255.0/24 7346 0.5% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 8 - 180.180.249.0/24 7293 0.5% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 9 - 180.180.248.0/24 7050 0.4% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 10 - 180.180.253.0/24 7048 0.4% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 11 - 180.180.250.0/24 7048 0.4% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited 12 - 202.171.192.0/20 4542 0.3% AS4788 -- TMNET-AS-AP TM Net, Internet Service Provider 13 - 66.248.104.0/21 3814 0.2% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 14 - 203.160.94.0/24 3462 0.2% AS10099 -- HKUNICOM1-AP China Unicom (Hong Kong) Operations Limited 15 - 202.153.174.0/24 3178 0.2% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 16 - 202.41.70.0/24 2957 0.2% AS2697 -- ERX-ERNET-AS Education and Research Network 17 - 208.54.82.0/24 2839 0.2% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 18 - 212.80.20.0/23 2437 0.1% AS50733 -- BINA-AS Ertebat Gostaran Bina 19 - 202.151.7.0/24 2423 0.1% AS17425 -- EPA-AS-TH Provincial Electricity Authority of Thailand. 20 - 202.151.6.0/24 2413 0.1% AS17425 -- EPA-AS-TH Provincial Electricity Authority of Thailand. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0