April 2011 - Test - lists.nanog.org

Re: Level 3 Agrees to Purchase Global Crossing
by Mark Kent 11 Apr '11

11 Apr '11

Well, this will be the third time that Level3 has purchased my primary upstream provider. Maybe this will be different than with Genuity and Wiltel, but Level3 needs to either stop using the word "legacy" or educate their employees so they know that "legacy" is good and not bad. -mark

1 0

Barracuda Networks is at it again: Any Suggestions as to an Alternative
by Joel M Snyder 11 Apr '11

11 Apr '11

> You get their filtering power for free and don't have to deal with the > hardware, if you don't particularly like it. > > http://www.barracudacentral.org/ That's not completely true; the Barracuda appliance uses both block-lists and content-based filtering. The block-list is free for anyone who wants it, but the content-based filtering is not. However, the block-list *is* now one of the best ones out there. They had a rocky start, but in the last year they have consistently outperformed most of the other no-charge block-lists both in terms of catch rate and false positive rate. Spamhaus has long been one of my favorites for its performance, but I am now seeing Barracuda beat them each month in catch rate, sometimes by a nice margin. (FP rate for both lists is about the same; VERY close to zero.) If you like Spamhaus, you should try Barracuda block-list and see if it helps in your mail stream. (Every stream is different, so my results may not match your results.) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

GMail contact needed
by George Bonser 11 Apr '11

11 Apr '11

I am having an ongoing operational issue with imap.gmail.com that began at 1250 PDT It appears that connectivity has been blocked from certain of our operational IPs and IMAPs returns "Service Forbidden" for all connection attempts and we have some other issues on other protocols (pop3s, imaps) that started at exactly that time . Offlist response appreciated.

2 2

[NANOG-announce] NANOG 52 CFP Reminder: Slides due 4/11
by Tom Daly 10 Apr '11

10 Apr '11

NANOG'ers, On Thursday, 4/14, the NANOG Program Committee will meet to review submissions for NANOG 52. In an effort to get a topic list our the community as early as requested (tentative for 4/15), we do need to have all abstracts and slide submissions in as soon as possible. A quick review of the PC tool indicates that we don't have enough content for the meeting yet, so please submit your work ASAP! You can submit your abstract, or upload your slides at https://pc.nanog.org. Have a good weekend, Tom Daly, for the NANOG PC _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?
by Joel M Snyder 10 Apr '11

10 Apr '11

> It's quite easy to build your own [out of open-source components] that > easily outperforms any appliance on the market. (Which isn't saying > much: none of them are very good, and all of them are way overpriced. > The bar is thus set quite low.) It will not have all the superfluous > bells and whistles that marketing departments are so fond of hyping, > but it will work, it will be cheap, it will be scalable, and it will be > far more secure. Is there any aspect of this screed that you can support with data, preferably data published this decade? Of course, I understand that "overpriced" and "superfluous bells and whistles" and "far more secure" are fairly subjective criteria, but numbers such as efficacy and specificity are easy to compare. I'd also be interested in hearing about any cases where someone compromised a production Barracuda, Ironport, or similar appliance--or does your definition of "far more secure" include other substantive components that matter more? > I've discussed this at some length on mailop and am in the process of > reducing it to near-cookbook form. If you're interested, contact me > offlist and I'll outline it for you. I'd be interested in seeing you put your money where your mouth is regarding catch rate and false positive rate. Contact me off-list with a place where I can FTP a VM of one of your appliances. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?
by Fred Richards 10 Apr '11

10 Apr '11

Because I don't need any of the cute and fluffy features like a quarantine spambox, I just use the barracuda rbl along with a few others. You get their filtering power for free and don't have to deal with the hardware, if you don't particularly like it. http://www.barracudacentral.org/ -- Fred

1 0

Introducing draft-hartmann-6man-addresspartnaming (was: draft-denog-v6ops-addresspartnaming)
by Richard Hartmann 09 Apr '11

09 Apr '11

Dear all, you might still remember draft-denog-v6ops-addresspartnaming [1] being announced on this list [2]. After an extensive period of gathering feedback and both a change in name and IETF Working Group, I am pleased to announce the new draft-hartmann-6man-addresspartnaming [3]. Taking the broad consensus into account, we are reasonably expecting hextet to come out as the only option. The only remaining questions are: 1) MAY 'quibble' be allowed as an optional name? I think not, but we were not 100% in agreement and thus decided to pop the question to the IETF and operator communities at large. 2) MUST or SHOULD 'hextet" be used in all written documentation? 3) Is this a Proposed Standard or already a Best Current Practice, given that a lot of people swtiched, already? I am looking forward to any and all feedback, either on this or the 6man list [4]. Thanks, Richard [1] http://tools.ietf.org/html/draft-denog-v6ops-addresspartnaming [2] http://mailman.nanog.org/pipermail/nanog/2010-November/027920.html [3] http://tools.ietf.org/html/draft-hartmann-6man-addresspartnaming [4] http://www.ietf.org/mail-archive/web/ipv6/current/msg13805.html

1 0

Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?
by proth＠cnsny.net 09 Apr '11

09 Apr '11

Andrew, We use and offer Postini - a front end service. Postini is a anti virus and spam filter, and can spool mail if your circuits are down. Postini is a Google company and works like a charm. If you need more information please contact me offline proth(a)cnsny.net Paul Sent from my Verizon Wireless Phone ----- Reply message ----- From: "Andrew Kirch" <trelane(a)trelane.net> Date: Sat, Apr 9, 2011 10:39 am Subject: Barracuda Networks is at it again: Any Suggestions as to an Alternative? To: "John Palmer (NANOG Acct)" <nanog2(a)adns.net>, <nanog(a)nanog.org> John, My suggestion isn't _QUITE_ an appliance, but it works very well and I've been exceptionally happy with it. It's a distribution of linux controlled via a web interface that does far more than just mail filtering (at which it is both flexible and adept). Take a look at http://www.clearfoundation.com/Software/overview.html. The hardware requirements shouldn't be too insane, and the rules updates/subscriptions for the various services are all month to month, and not a bucket of insane. Andrew On 4/8/2011 11:51 PM, John Palmer (NANOG Acct) wrote: > OK, its been a year since my Barracuda subscription expired. The unit > still stops some spam. I figured that I would go and see what they > would do if I tried to renew my subscription EXACTLY one year after it > expired. Would their renewal website say "Oh, you are at your > anniversary date", and renew me for a year? > > No such luck: They want me to PAY FOR AN ENTIRE YEAR for which I did > NOT receive service and then for the current (upcoming year). Sorry - > I don't allow myself to be ripped off like that. Sorry Barracuda - you > get no money from me and I'll tell everyone I know about this policy > of yours. > > I posted an article about this unscrupulous practice on my blog last > year at http://www.john-palmer.net/wordpress/?p=46 > > My question is - does anyone have any suggestions for another e-mail > appliance like the Barracuda Spam Firewall that doesn't try to charge > their customers for time not used. I should be able to shut off the > unit for a year or whatever and simply renew from the point that I > re-activate the unit instead of having to pay for back-years that I > didn't use. > > Thanks > > > > >

1 0

MTS contact
by Hector Herrera 09 Apr '11

09 Apr '11

Could somebody with MTS please contact me off-list? I am not getting anywhere with their level 1 support and they won't escalate. Thanks, -- Hector Herrera Network Engineering PlayFullScreen Internet Broadcasting

2 1

BGP Update Report
by cidr-report＠potaroo.net 08 Apr '11

08 Apr '11

BGP Update Report Interval: 31-Mar-11 -to- 07-Apr-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS1785 96412 2.5% 66.9 -- AS-PAETEC-NET - PaeTec Communications, Inc. 2 - AS18566 82205 2.1% 50.0 -- COVAD - Covad Communications Co. 3 - AS47331 67869 1.7% 21.1 -- TTNET TTNet A.S. 4 - AS4323 60574 1.6% 23.6 -- TWTC - tw telecom holdings, inc. 5 - AS20115 40602 1.0% 25.6 -- CHARTER-NET-HKY-NC - Charter Communications 6 - AS11492 37284 0.9% 29.4 -- CABLEONE - CABLE ONE, INC. 7 - AS19743 33849 0.9% 4835.6 -- 8 - AS22773 31337 0.8% 24.3 -- ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 9 - AS7011 30992 0.8% 26.4 -- FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. 10 - AS7029 27490 0.7% 16.7 -- WINDSTREAM - Windstream Communications Inc 11 - AS9498 24165 0.6% 31.2 -- BBIL-AP BHARTI Airtel Ltd. 12 - AS33475 23418 0.6% 108.9 -- RSN-1 - RockSolid Network, Inc. 13 - AS8866 23225 0.6% 45.7 -- BTC-AS Bulgarian Telecommunication Company Plc. 14 - AS852 23174 0.6% 48.3 -- ASN852 - Telus Advanced Communications 15 - AS9829 20534 0.5% 34.6 -- BSNL-NIB National Internet Backbone 16 - AS32528 17100 0.4% 2442.9 -- ABBOTT Abbot Labs 17 - AS17974 16497 0.4% 14.3 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 18 - AS35819 15438 0.4% 39.8 -- MOBILY-AS Etihad Etisalat Company (Mobily) 19 - AS14522 13226 0.3% 30.3 -- Satnet 20 - AS44609 13161 0.3% 4387.0 -- FNA Fars News Agency Cultural Arts Institute TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS51280 5356 0.1% 5356.0 -- AS51280 Parsian Electronic Commerce Company 2 - AS19743 33849 0.9% 4835.6 -- 3 - AS44609 13161 0.3% 4387.0 -- FNA Fars News Agency Cultural Arts Institute 4 - AS32528 17100 0.4% 2442.9 -- ABBOTT Abbot Labs 5 - AS35931 12790 0.3% 2131.7 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 6 - AS27771 3497 0.1% 1748.5 -- Instituto Venezolano de Investigaciones Cientificas 7 - AS34899 1698 0.0% 1698.0 -- COASTMEDIA-NET Coast Media Network, Coast Media GmbH 8 - AS17408 3330 0.1% 1665.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 9 - AS49600 1380 0.0% 1380.0 -- LASEDA La Seda de Barcelona, S.A 10 - AS28519 2982 0.1% 994.0 -- Universidad Autonoma de Guadalajara, A.C. 11 - AS45757 3902 0.1% 975.5 -- PLX-AS-AP ASN for anycast services 12 - AS25220 10645 0.3% 887.1 -- GLOBALNOC-AS Averbo GmbH 13 - AS32050 811 0.0% 811.0 -- CUST_AS_001 Customer AS 14 - AS22206 702 0.0% 702.0 -- GOOD-SAM - Evangelical Lutheran Good Samaritan Society 15 - AS34655 1322 0.0% 661.0 -- DOCLER-AS Docler Networks Autonomus System 16 - AS9476 589 0.0% 589.0 -- INTRAPOWER-AS-AP IntraPower Pty. Ltd. 17 - AS45310 512 0.0% 512.0 -- PISHON-SMARTNET-AS-ID SMARTNET - Broadband Internet Service. 18 - AS39079 483 0.0% 483.0 -- SFR-SI Autonomous System pour SFR SI 19 - AS13168 464 0.0% 464.0 -- SANOSTRA-AS AS de la Caja de ahorros y monte de piedad de las Baleares 20 - AS3 453 0.0% 735.0 -- APPNET-AS ApplicationNet b.v. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 85.197.100.0/22 10094 0.2% AS25220 -- GLOBALNOC-AS Averbo GmbH 2 - 202.92.235.0/24 9621 0.2% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 3 - 130.36.34.0/24 8538 0.2% AS32528 -- ABBOTT Abbot Labs 4 - 130.36.35.0/24 8534 0.2% AS32528 -- ABBOTT Abbot Labs 5 - 63.211.68.0/22 7323 0.2% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 6 - 178.22.79.0/24 6608 0.2% AS44609 -- FNA Fars News Agency Cultural Arts Institute 7 - 65.122.196.0/24 6566 0.2% AS19743 -- 8 - 178.22.72.0/21 6539 0.2% AS44609 -- FNA Fars News Agency Cultural Arts Institute 9 - 221.121.96.0/19 5777 0.1% AS7491 -- PI-PH-AS-AP PI-PHILIPINES 10 - 72.164.144.0/24 5478 0.1% AS19743 -- 11 - 66.238.91.0/24 5450 0.1% AS19743 -- 12 - 65.163.182.0/24 5450 0.1% AS19743 -- 13 - 65.162.204.0/24 5449 0.1% AS19743 -- 14 - 66.89.98.0/24 5449 0.1% AS19743 -- 15 - 212.80.25.0/24 5356 0.1% AS51280 -- AS51280 Parsian Electronic Commerce Company 16 - 198.140.43.0/24 5230 0.1% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 17 - 68.65.152.0/22 3499 0.1% AS11915 -- TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 18 - 202.153.174.0/24 3325 0.1% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 19 - 206.184.16.0/24 3317 0.1% AS174 -- COGENT Cogent/PSI 20 - 65.181.194.0/23 2846 0.1% AS11492 -- CABLEONE - CABLE ONE, INC. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0