March 2011 - Test - lists.nanog.org

Internet to Libya ?
by Marshall Eubanks 04 Mar '11

04 Mar '11

Does anyone have evidence that the Internet is up to Libya today ? The Google "transparency report" is showing flatlines after about mid-day yesterday. http://www.google.com/transparencyreport/traffic/?r=LY&l=WEBSEARCH&csd=1298… Regards Marshall

2 2

Spam from "baosteel"
by imNet Administrator 04 Mar '11

04 Mar '11

Is anyone else getting spam similar to this: I started getting this (albeit in English) a month or two ago, and it went away about the same time I turned on the CBL/XBL filters on postfix. It appears it's back again. Note, I have absolutely zero connection with "baosteel.com" before these started showing up. Example: -------------------------------------------------------------------------------- > From - Fri Mar 04 10:17:59 2011 > X-Account-Key: account3 > X-UIDL: 0000144b4b5bb8b1 > X-Mozilla-Status: 0001 > X-Mozilla-Status2: 00000000 > X-Mozilla-Keys: > Return-Path: <yanxd(a)baosteel.com> > X-Original-To: immute##THISWASADDED##(a)msk4.com > Delivered-To: immute##THISWASADDED##(a)msk4.com > Received: from smtps-2.sercomtel.com.br (smtps-2.sercomtel.com.br [200.155.34.156]) > by li01.msk4.com (Postfix) with ESMTP id E4ED34157 > for <immute##THISWASADDED##(a)msk4.com>; Fri, 4 Mar 2011 01:20:13 -0600 (CST) > Received: from User (unknown [95.59.199.4]) > by smtps-2.sercomtel.com.br (Postfix) with ESMTP id 6E1D32F00C2; > Fri, 4 Mar 2011 04:17:55 -0300 (BRT) > Reply-To: <mail.a3(a)gmx.us> > From: "Mail Administrator"<yanxd(a)baosteel.com> > Subject: Email Quota Exceeded > Date: Fri, 4 Mar 2011 08:19:40 +0100 > MIME-Version: 1.0 > Content-Type: text/plain; > charset="Windows-1251" > Content-Transfer-Encoding: 7bit > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2800.1081 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081 > Message-Id: <20110304071756.6E1D32F00C2(a)smtps-2.sercomtel.com.br> > To: undisclosed-recipients:; > > This is to inform you that you have exceeded your E-mail Quota Limit and > you need to increase your E-mail Quota Limit because in less than 96 hours > your E- mail Account will be disabled.Increase your E-mail Quota Limit and > continue to use your Webmail Account. > > To increase your E-mail Quota Limit to 2.7GB, Fill in your Details as > below and send to the E-mail Quota Webmaster by CLICKING REPLY: > > EMAIL ADDRESS: > USERNAME: > PASSWORD: > CONFIRM PASSWORD: > DATE OF BIRTH: > > Thank you for your understanding and corperation in helping us give you > the Best of E-mail Service. --------------------------------------------------------------------------------

2 2

Mac OS X 10.7, still no DHCPv6
by Ray Soucy 04 Mar '11

04 Mar '11

With copies out to developers we now have confirmation that Apple still hasn't included DHCPv6 in the next release of OS X. -- Ray Soucy Epic Communications Specialist Phone: +1 (207) 561-3526 Networkmaine, a Unit of the University of Maine System http://www.networkmaine.net/

42 128

Hetzner using Netdirekt network?
by Vladimir 04 Mar '11

04 Mar '11

Hello, I've heard a rumour that Hetzner datacenter is leasing Netdirekt's bandwidth, could anyone confirm please? By tracerouting hetzner.de, netdirekt.de, and two servers (one placed in Netdirekt and another in Hetzner) I can't find anything similar (except russian gateways): kai@zuze:~> lft -s 12345 -d 80 netdirekt.de Tracing .........************.........T TTL LFT trace to ad150.unix-server.com (217.20.112.80):80/tcp ** [neglected] no reply packets received from TTL 1 2 10.1.141.145 177.1/105.0ms ** [neglected] no reply packets received from TTLs 3 through 4 5 yota-msk-gw.gblnet.ru (109.239.134.1) 101.0/59.8ms 6 msk-spb-te-gw4.gblnet.ru (94.124.183.242) 206.1/109.6ms 7 94.124.182.193 228.6/119.8ms 8 ams-sth-te-gw.gblnet.ru (94.124.182.222) 167.6/174.9ms 9 ams-fra-te-gw1.gblnet.ru (94.124.182.198) 180.0/99.8ms 10 decix.edpnet.net (80.81.192.139) 194.8/310.1ms 11 77.109.91.126.static.edpnet.net (77.109.91.126) 173.5/204.8ms ** [neglected] no reply packets received from TTL 12 13 [target open] ad150.unix-server.com (217.20.112.80):80 150.3/203.6ms kai@zuze:~> lft -s 12345 -d 80 hetzner.de Tracing ........*.***.********.........T TTL LFT trace to www.hetzner.de (213.133.107.227):80/tcp ** [neglected] no reply packets received from TTL 1 2 10.1.141.145 91.7/173.8ms ** [neglected] no reply packets received from TTLs 3 through 5 6 yota-msk-gw.gblnet.ru (109.239.134.1) 94.6/125.2ms 7 msk-spb-te-gw4.gblnet.ru (94.124.183.242) 185.8ms 8 94.124.182.193 134.3/164.1ms 9 ams-sth-te-gw.gblnet.ru (94.124.182.222) 164.4/164.8ms 10 ams-fra-te-gw1.gblnet.ru (94.124.182.198) 138.8/169.9ms 11 decix2-gw.hetzner.de (80.81.193.164) 181.1/176.5ms 12 hos-bb1.juniper1.fs.hetzner.de (213.239.240.242) 253.9/168.4ms 13 hos-tr2.ms-ex3k1.rz11.hetzner.de (213.239.236.83) 187.8/179.9ms 14 [target open] www.hetzner.de (213.133.107.227):80 130.7/151.3ms kai@zuze:~> lft -s 12345 -d 80 ns Tracing ......************.....T TTL LFT trace to ns (188.72.255.99):80/tcp ** [neglected] no reply packets received from TTL 1 2 10.1.141.145 95.1/76.3ms ** [neglected] no reply packets received from TTLs 3 through 4 5 213.33.166.241.sovintel.ru (213.33.166.241) 104.3/181.5ms 6 mx01.Frankfurt.gldn.net (194.186.157.138) 136.3/205.0ms 7 decix.edpnet.net (80.81.192.139) 179.0/180.6ms 8 77.109.91.126.static.edpnet.net (77.109.91.126) 148.0/139.8ms ** [neglected] no reply packets received from TTL 9 10 [target open] ns (188.72.255.99):80 144.2ms kai@zuze:~> lft -s 12345 -d 80 rh Tracing ........*.***********.........T TTL LFT trace to rh (178.63.47.150):80/tcp ** [neglected] no reply packets received from TTL 1 2 10.1.141.145 74.4/78.6ms ** [neglected] no reply packets received from TTLs 3 through 5 6 yota-msk-gw.gblnet.ru (109.239.134.1) 90.0/92.5ms 7 msk-spb-te-gw5.gblnet.ru (94.124.183.238) 136.7/185.0ms 8 spb-ams-te-gw5.gblnet.ru (94.124.182.209) 184.9/165.0ms 9 ams-fra-te-gw1.gblnet.ru (94.124.182.198) 176.0/185.2ms 10 decix2-gw.hetzner.de (80.81.193.164) 144.4/186.0ms 11 hos-bb1.juniper1.fs.hetzner.de (213.239.240.242) 165.0/174.1ms 12 hos-tr2.ex3k6.rz12.hetzner.de (213.239.228.167) 209.8/174.6ms 13 [target open] rh (178.63.47.150):80 163.4/234.9ms So is it true or just a rumour? Thanks in advance. Cheers, Vladimir

1 0

[BEWARE] David J. Moore
by Leon Kaiser 04 Mar '11

04 Mar '11

This is the man who poisoned DroneBL. He is a bad man. Keep your children safe. http://raged.tittybang.org/ Leon ======================================================== Leon Kaiser - Head of GNAA Public Relations - literalka(a)gnaa.eu || literalka(a)goatse.fr http://gnaa.eu || http://security.goatse.fr 7BEECD8D FCBED526 F7960173 459111CE F01F9923 "The mask of anonymity is not intensely constructive." -- Andrew "weev" Auernheimer ========================================================

6 6

Re: Real World NAT64 deployments
by TJ 04 Mar '11

04 Mar '11

6in4 == deprecated automatic tunneling mechanism ... HE is an example of manually configured Protocol41 encaps. And 6to4 doesn't allow IPv6 to talk to IPv4, contrary to what the name seems to imply :). Some poorly chosen names for our tunneling, yes? Thanks, TJ's Droid2 On Mar 3, 2011 6:27 PM, "William Herrin" <bill(a)herrin.us> wrote:

4 4

Ranges announced by Level3 without permitions.
by Alfa Telecom 04 Mar '11

04 Mar '11

Hello All! Maybe somebody could help me with some issue: Ranges below are announced by Level3 79.110.224.0/20 *[BGP/170] 08:23:34, MED 0, localpref 150, from 213.248.64.245 AS path: 3356 79.110.64.0/20 *[BGP/170] 08:25:07, MED 0, localpref 150, from 213.248.64.245 AS path: 3356 Both ranges are from RIPE region and couldn't be announced from ARIN ASN at all. We're sponsored LIR for both companies, I sent several emails to Level3 noc, made several calls but they still announce these ranges. ------------------ Andrew

7 8

Fasthosts postmaster
by Alexander Harrowell 04 Mar '11

04 Mar '11

Can someone who's a mail admin at Fasthosts Ltd. in the UK/AS15148 contact this customer off list? Messagelabs is rejecting random e-mail from one of your SMTP boxes (error 553: Spam, exchange-out-45.livemail.co.uk/213.171.216.45). Your phone number goes to people who don't know what a postmaster is, and your whois tech contact goes to the sales desk. Meanwhile, our ticket has been assigned to someone who wants to know "your e-mail address and password". Hint: 1) of those is in the to: field, and 2) is perfectly useless - how exactly do you login to the mail server's admin interface with a user's address and SMTP pwd? Further, not so sure about sending passwords about in cleartext e-mail to some outsourced thing or other. I've verified that neither us, nor that host, is in any of the major *BLs. (PS, if anyone from Messagelabs is around and can fix the problem without going through Fasthosts, that would be optimal:-)) Sorry for the noise, list. This may be e-mail related, but it is operational. -- The only thing worse than e-mail disclaimers...is people who send e-mail to lists complaining about them

1 0

Postfix spam
by Peter Rudasingwa 04 Mar '11

04 Mar '11

Hello, I am being attacked by a lot of spams on my postfix box. What is the best way to block them and fix this for good? It is so bad some of my IPs have been black listed. Thanks for your help. -- Best Regards, Peter R. *** *

5 6

OT: Where are the VoIP clue bats?
by Eric Brunner-Williams 03 Mar '11

03 Mar '11

First, thanks for all the responses to "What vexes VoIP users?" I'm looking for pointers to sites, like Geoff Huston's potaroo.net, that are VoIP clue dense, or mailing lists(*) where the VoIP-full lurk. Thanks in advance, Eric (*) I'm already on the ecrit list, though my real interest in the ongoing IETF "emergency services" meme has been a "I'm alive" app, not circuit and bandwidth capture by government. I was pleased to see a "I'm alive" app fielded by Google last week at Christchurch, NZ.

2 1