June 2011 - Test - lists.nanog.org

Re: Microsoft's participation in World IPv6 day
by Scott Weeks 02 Jun '11

02 Jun '11

--- paul(a)paulgraydon.co.uk wrote: On 06/02/2011 12:45 PM, david raistrick wrote: > On Thu, 2 Jun 2011, Bill Woodcock wrote: > >> http://support.microsoft.com/kb/2533454/ >> >> Uh... > > snicker. snicker. lol. rofl. "we'll fix our ipv6 support by, well, > not using it!" It's not Microsoft's IPv6 support they're fixing, which works fine from my experience with it, they're making sure you can access sites if your ISP or Router's IPv6 handling is screwed up. --------------------------------------------------- No, they're just going to force Micr0$loth machines prefer IPv4 on World IPv6 day, rather than the normal prefer IPv6: "The following Fix it solution will resolve the issue by configuring your computer to prefer IPv4, instead of IPv6. By default, Windows prefers IPv6 over IPv4." Kinda makes IPv6 day semi-moot doesn't it... scott

1 0

7206 NPE-G2 with 4 full table feeds
by Eric Morin 01 Jun '11

01 Jun '11

Hi I have an application where I have a 7206 with NPE-G2 (1G RAM) that currently has a full table from an eBGP peer and a full table from a co-located IBGP peer. I want to mesh this guy to two other IBGP peers that will also send their full tables. There is roughly 400Mbps (adding both direction) with an OSPF process (<30 routes) and an ISIS process (<20 routes). I haven't been very successful at finding real life BGP scaling for this platform and was hoping that someone out there may be doing something similar (4 x full table feeds with ~400Mbps) and can provide feedback on performance and/or stability. I have soft reconfig inbound enabled on the current two feeds, I assume that this will make a difference in this application with regards to available memory for all 4 feeds? Thanks in advance Eric

2 1

Someone from Telefonica Wholesale on the list ?
by Carlos Martinez-Cagnazzo 01 Jun '11

01 Jun '11

Specifically someone with admin rights over the router at 2001:1498:1:200::100:5d (got Telefonica from WHOIS as there is no DNS reverse). Can you pls contact me off-list ? Thanks! Carlos -- -- ========================= Carlos M. Martinez-Cagnazzo http://www.labs.lacnic.net =========================

1 0

Yahoo and IPv6
by Franck Martin 01 Jun '11

01 Jun '11

http://help.yahoo.com/l/us/yahoo/ipv6/general/ipv6-05.html "Will IPv6 become a permanent change on June 8, 2011? No. World IPv6 day is a 24-hour trial period in which we will publish our content on both the IPv4 and IPv6 servers. Yahoo! is participating in order to help prepare our services (as well as your hardware) to help ensure a smooth transition for when the IPv4 addresses run out. " Huh… I thought IPv4 addresses had run out already…. At IANA level and now for anyone in the AP region at least.

45 107

Ra-Guard evasion (new Internet-Drafts)
by Fernando Gont 01 Jun '11

01 Jun '11

Folks, I've just published two new IETF Internet-Drafts, that document the problem of RA-Guard evasion, and propose mitigations. They are two Internet-Drafts: * "IPv6 Router Advertisement Guard (RA-Guard) Evasion", available at: http://tools.ietf.org/id/draft-gont-v6ops-ra-guard-evasion-00.txt * "Security Implications of the Use of IPv6 Extension Headers with IPv6 Neighbor Discovery", available at: http://tools.ietf.org/id/draft-gont-6man-nd-extension-headers-00.txt Any comments on these documents will be more than welcome. Thanks! Best regards, -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)acm.org PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

1 0

Philips contact
by J. Oquendo 01 Jun '11

01 Jun '11

Hello all, really hate posting these messages here, but some of you are tops are pinpointing a direct point of contact. I need to get a hold of someone in Philips Corp. as about 12 different managed networks of ours have been probed from one of their netblocks. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

1 0

Verisign Internet Defence Network
by Jim Mercer 01 Jun '11

01 Jun '11

Heyo, So, I asked to look into the viability and usefullness of the "Verisign Internet Defence Network" service. I don't claim to be any kind of expert in DDoS mitigation, but some of the claims made by the product descriptions seem suspect to me. it claims to be "Carrier-agnostic and ISP-neutral", yet "When an event is detected, Verisign will work with the customer to redirect Internet traffic destined for the protected service to a Verisign Internet Defense Network site." anyone here have any comments on how this works, and how effective it will be vs. dealing directly with your upstream providers and getting them to assist in shutting down the attack? -- Jim Mercer jim(a)reptiles.org +1 416 410-5633 You are more likely to be arrested as a terrorist than you are to be blown up by one. -- Dianora

8 10