February 2011 - Test - lists.nanog.org

Using IPv6 with prefixes shorter than a /64 on a LAN
by Carlos Martinez-Cagnazzo 09 Feb '11

09 Feb '11

The subject says it all... anyone with experience with a setup like this ? I am particularly wondering about possible NDP breakage. cheers! Carlos -- -- ========================= Carlos M. Martinez-Cagnazzo http://www.labs.lacnic.net =========================

51 145

Sales - Global Crossing or Colt?
by Ryan Finnesey 09 Feb '11

09 Feb '11

Would anyone have a carrier sales contact at Global Crossing or Colt? It is very important I get someone that is within the carrier/wholesale group sales

1 0

Last of ipv4 /8's allocated
by Rodrick Brown 09 Feb '11

09 Feb '11

http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml Sent from my iPhone 4.

15 24

Re: Post-Exhaustion-phase "punishment" for early adopters
by Brandon Butterworth 09 Feb '11

09 Feb '11

> Before arin etc it was possible to request ip space and on the > form specify you would not be connecting to the Internet. So those off net users can't complain if ARIN allocated the same ranges on net. Not that it's worth doing so now. V6, drive fast. brandon

3 2

WebServer and Firewall Help
by Joshua William Klubi 09 Feb '11

09 Feb '11

Hi, I run a web-server based on ubuntu server and the LAMP stack. I used Ubuntu's UFW firewall model and have enabled only Web and SSH ports. Namely port 80 and port 22 only. Unfortunately once a while some guys get to inject some content onto our web pages. Now managements are looking at getting a well proven infrastructure to counter that. But I also think i can fall on this community to help me get the right stuff done. Where i can protect the server from such attack. I want to know what measure i can do on the server to get it protected which mysql protection I should implement. since i can see that it might be a php or mysql injection that is been used. Currently I run these security measures on it. Ubuntu UFW Fail2ban PHP model security Apache security Joshua

5 4

Root Zone DNSSEC KSK Ceremony 4 Completed
by Joe Abley 08 Feb '11

08 Feb '11

KSK CEREMONY 4 The fourth KSK ceremony for the root zone took place in El Segundo, CA, USA on Monday 2011-02-07. The Ceremony Administrator was Mehmet Akcin. The ceremony was completed successfully. Video from Ceremony 4 was recorded for audit purposes. Video and associated audit materials will be published in 1 to 2 weeks, and will be available as usual by following the "KSK Ceremony Materials" link at <https://www.iana.org/dnssec/>. Ceremony 4 included processing of a Key Signing Request (KSR) generated by VeriSign, and the resulting Signed Key Response (SKR) contained signatures for Q2 2011, for use in the root zone between 2011-04-01 and 2011-07-05. CONTACT INFORMATION We'd like to hear from you. If you have feedback for us, please send it to rootsign(a)icann.org.

1 0

Random Port Blocking at Hotels (was: Re: quietly....)
by Joel M Snyder 08 Feb '11

08 Feb '11

> If they don't document partial internet access blockage in the > contract and the contract says they are providing internet access, > then, they are in breach and you are free to depart without a > termination fee and in most cases, demand a refund for service to > date. > (Yes, I have successfully argued this on multiple occasions). > In fact, I get free internet in most of the more expensive hotel > environments as a result. It's more likely you get free internet service in expensive hotels because the guy/girl behind the front desk has been empowered to cancel out a ridiculously high charge for Internet when a guest starts jabbering at them about how the Internet didn't work for them for any reason, to keep the line moving and to make the guest happy, rather than any higher authority hunkering down with the CEO, legal staff, and CTO and saying "by God, this Owen character is right, we're in breach of contract and his definition of the purity of Internet ports has so stunned us with its symmetry and loveliness that we shall bow down and sin no more! Thank you Mr. DeLong from making the blind see again!" I mean, it's gratifying to think you've won the argument (hence: this is why they do it), but you could also have argued that they were giving out non-contiguous subnet masks or Class E addresses and it would have had the same effect. Try that next time and let us know how it works. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

12 17

Upcoming DNS-OARC Workshop
by Matthew Pounsett 08 Feb '11

08 Feb '11

Morning all, From all reports the recent DNS BoF at the Miami NANOG was well received. As a follow up, I'd like to the a moment to let everybody know about the upcoming DNS-OARC Workshop March 13th and 14th in San Francisco durning the ICANN 40 meeting. Both days are open to the public but attendees will have to register for the ICANN Meeting (free). This will be a joint workshop with the ccTLD Tech Day, a workshop put on by members of the ccNSO. The workshop brings together a wide range of DNS operators and experts for two days of presentations and discussion. Details on the meeting, venue and travel details can be found at <https://www.dns-oarc.net/oarc/workshop-201103>. We are looking for speakers and there is a option on the Registration form to indicate your interest should you have a topic that you wish to present. Thanks in advance to the folks at ICANN for hosting us and to the ccNSO Tech Day team (Dr. Eberhard W Lisse, Jay Daley) for supporting the joint meeting. For those unfamiliar with DNS-OARC, we are a non-profit organization that was created to provide a trusted platform for members of the DNS community to share information. Our members include the DNS Root Operators, TLD and ccTLD operators, commercial ISPs and research organizations. More details on DNS-OARC can be found at <https://www.dns-oarc.net>. For more information, feel free to contact Wayne MacLaurin, Executive Director of DNS-OARC at wayne(a)dns-oarc.net.

1 0

RE: Membership model
by Scott Weeks 08 Feb '11

08 Feb '11

--------------------------------------- > On Mon, Feb 07, 2011 at 12:40:41PM -0800, Owen DeLong wrote: > > > I'll happily join Newnog/NANOG and pay my dues when I can reach the > > web site ot do so on IPv6 rather than legacy IPv4. Yes it does. 2001:4970:EEEE:7777::2 I'm bugging the powers-that-be about getting forward records working. [root@wa-geeks ~]# host 2001:4970:eeee:7777::2 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.7.7.7.e.e.e.e.0.7.9.4.1.0.0.2.ip6.arpa domain name pointer www.newnog.org. -------------------------------------------------- Now your only question is check or pay pal... :-) scott

5 5

Time Warner Transit
by Christopher Wolff 08 Feb '11

08 Feb '11

Hey guys, What are you thinking about Time Warner transit lately? They claim to be fully ready to support IPv6. Thanks in advance, you can hit me offlist if you're not able to share your TWTC opinion publicly. Christopher

2 1