May 2012 - Test - lists.nanog.org

Re: [liberationtech] Syria blackout?
by Eugen Leitl 31 May '12

31 May '12

----- Forwarded message from Andrew Lewis <andrew(a)pdqvpn.com> ----- From: Andrew Lewis <andrew(a)pdqvpn.com> Date: Thu, 31 May 2012 14:29:05 -0400 To: Eugen Leitl <eugen(a)leitl.org>, liberationtech(a)lists.stanford.edu Subject: Re: [liberationtech] Syria blackout? User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Not as far as I can tell. Everything seemed to be the same, and my contacts in Syria haven't reported anything amiss. On 5/31/12 2:26 PM, Eugen Leitl wrote: > ----- Forwarded message from Rafael Cresci <rafael(a)cresci.org> > ----- > > From: Rafael Cresci <rafael(a)cresci.org> Date: Thu, 31 May 2012 > 14:41:09 -0300 To: nanog(a)nanog.org Subject: Syria blackout? > X-Mailer: Apple Mail (2.1278) > > Customers (from UAE) who have servers with us in Atlanta - one of > the companies I work for, remaining anonymus for the moment - are > reporting that their sub-customers and viewers from Syria can't > access FTP or download any kind of Flash/video/multimedia content > from inside that country. Completely blocked. > > Anyone confirms? > > Another government blockage to avoid social captiruing of massacre > videos and photos? > > > ----- End forwarded message ----- -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPx7hxAAoJEJW/J8aB8dYIMEgIAIGuNaBKjCpZDpD7VFx+sig+ rAnmeQzxARQBZixb858qAncpEKP71gDJhdS8tcKRTuTZk8k59/781aFjmnVvCC2j QRNMmHl6AOggt/5T0VHY+E3ixm7mAOTM3TtumlwPNKKecI6GzzP1CDkAyvnSUKU7 FpDzv4JrsRCJZrtv0Sg5A5ijvWf3JT020sCjTchC05/FTaqjukmOvAGm9vrh2eFy bDUprMD83tqVDpKeCtRWhh+v4L9nXgoRBYoJ0JOnP1A+/wcFCk3AVNL9VcS1zZHQ TlI/1WbbL9MNtZg+GIv5ZgDtiIpgy/hqk9tBWh/ZSM79YTX/dAw17vK3TpZ4Rww= =58O+ -----END PGP SIGNATURE----- ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Syria blackout?
by Rafael Cresci 31 May '12

31 May '12

Customers (from UAE) who have servers with us in Atlanta - one of the companies I work for, remaining anonymus for the moment - are reporting that their sub-customers and viewers from Syria can't access FTP or download any kind of Flash/video/multimedia content from inside that country. Completely blocked. Anyone confirms? Another government blockage to avoid social captiruing of massacre videos and photos?

1 0

Need (to acquire or sell) IPv4? Come to SpaceMarket.
by The SpaceMarket 31 May '12

31 May '12

IPv4 is not going away as quickly as many would like. Most realistic observations show IPv4 will still be the numbering scheme most widely deployed and utilized for the next decade. This due mainly to peers and providers whom have not deployed IPv6 and ISP end-users, which continue to use, antiquated operating systems. SpaceMarket provides a platform for entities to acquire additional resources that find themselves deficient, and a platform for those with excess/unused resources to monetize their valuable resources. Our platform is safe, secure and confidential. Buyers and sellers can rest assured that their trades will be executed without a hitch (no hijacked network ranges or scammers) as each network allocation available has been thoroughly investigated and tested (we’re either announcing or have announced the networks available for an extended period of time), and upon request by either the buyer or seller, SpaceMarket will serve as an escrow agent for the transaction. Currently (as of this writing), there we have just over 150,000 addresses available for immediate use. This may seem like a low number, but allocations are listed and acquired daily using our automated system—we don’t have to be involved in your transaction. In order to provide our services without hassle and confidentially, we provide access to our trading platform via Tor (as a Tor Hidden Service). This allows our members to connect freely and without worry as to who may be monitoring your online activities or visitors to our site. Additionally, access to the site is restricted to active members of our trading community. For more information on our service, site URL or membership please e-mail us at spacemarket(a)tormail.org. We look forward to assisting you with your IPv4 needs! Please use our public key (below) when corresponding via E-mail. Don’t forget to send us yours! -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.10 (GNU/Linux) mQINBE/FaAgBEADT4VpYwIRnUj8R7tFAAWdcHBHR9SEpebBskq400kG50UA8o3Cq Ox5tBfY0It9AOaRE6yhOu7TcPbLrJyjjkl2UqqpMF/pIRasqXTbwHKT1vkpt22Oc CtHFmXSY4KgE51lfHq7ijRt+m9B3j78Jr6uklpca8IW41eXNyje4272DLv4L1wHR X00VXPr6pULn3bgm/KfnwmmY0ucpDlLJIZ1xsRFTstNKrA5d0K96RhhqDWcaZGyf 21nskMRwRahO+VcRVE4515AZ09L1CfSoUbNOVtSHIiANYSPbq9QQHNeBas5MJkuA 2aZ/TyCEJ501AtTKL735w1ile+3DMK/sRQhEOzTp/Y4AmIDJSKRDYnhJnE9T2x/C bud54hvoT+sx7xq3Fbo18xCAeBWDO/3k2G44z2ecyAzGCP8YUGAVp5sa+X7nHvZR Z2W+DQn/XuPXPSzsbPqh6wxnhrr5/0IdU06jjLK398n+r2eM8nDJnm8BFYICrBE4 UcG4Jd2KHejL+PeIB1IO4KHmmCJD3W1Ya1zi2wUjPX5PB3gf3p492+2iowu/k9kt FyTx+FoVZQDfqUGdBm7C8JvwNCXB2c92P58mV8ds0vmGPoMk7zioWMspInVFDXUB vbShwtK4eowfoT3u1PwtgRJdsKzDZ3TTIKqmGFF24OkP2c2s5DBi2W/PYwARAQAB tCVTcGFjZU1hcmtldCA8c3BhY2VtYXJrZXRAdG9ybWFpbC5vcmc+iQI3BBMBCAAh BQJPxWgIAhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEOaJI/0SIsh9MpgP /R3uEtdnJWbTlI1uaJQ/50Xh7XtarY+qKSlK/YC059v4mJYgRx+la15pmryGyKDF 1qyPu+EI1r437EREr8uGy+LFqI2lD4oKXxvJRDJSqaiwYpAVM2t/prE9bYju5puS VZbeNEsUse9MthhoesOg+fGfsI6P5W1aAWQswKWDM/tegjW+NPXbv8yWnC7Vfe6b HUghDlUETihleohWxtoqGla6I7s8qxYMFa684mF84Xyrnj/5DIey8Z5ROwwqQv4y M2jVOPpa02S1tyLd4aNI2pP7IVsBMK9uvsN+VBKUtGlhap1RSAMQaFWoKR0L1M3o V3LkmezSKaMjlk2XhSzokJP9snV99KRMxMjlCQwEnS7dct6JLokU1cYNyHSSjDOC WN57FeBt4pnG1HA31Z2B81jz3oKzYN2lOqAvY5L657sIUWWoPfhGjkEIiFtlRGCl WvEg4xyXRUf2dsXFHsYqDsMzR3p67L2CwTNErqF5ZhwxchuNp6E1gIdYoZghcYuT myxbGF0uFTH7ymg3yzJxuE/78iqhbMGAnkwdCa2GaczmymQiWkNqVQjpZizUdN7w hTrm5vQ9OucrpHCFoLOZ3Kk29o7m586I3welE0Kz4cmDdcoqM798k3/BxKUTAHFv FNhjHfzllDy1QiLXbm9z+Uu/oIr/h/X8DNRHzFXNwqcUuQINBE/FaAgBEADBqS9r 49m5RmRUH/YTy6V2iAwdf6fTzr+hOT9FDhdKYfF9TEgT4ZZEIg1BLhCUlwfSO3Ex xCFt8Wdtnbs/z6pd5iFb+Gm11q/CPUMBq7lgiLrO9FNLg8geTlyHGgDQNm8w5At4 gvi5Y7r17UlVrmd71H9ZpmB1iN8uM2pjirD5WRYAyX3KdYhzEJmorA6HKn5OSM/8 XAugeEXkgMEwn4NioZJjSbunTYNXDK6CqvGNI8X2w34V5qs/+jcIJ9f08ijkB/OK 3rtaYKEVmcoHV8UFNQREbJqV44doOxtUfajyOyCB5+/B4KKOx8MrwTGB9R2ia9hY sobdNv3fPOASrlSlUpVdy6iXipwSUTaoi4EscMKnL7fh4xAphqWVbCrKVqBOR7m3 Oxy9Q+9/eFWs3qQoDbq+E2HtEtvfvtckwZ8HqtxnLnBPMgj7kbN5mv5yMLGmLreb ruLlf6Ran/xwTQPtyvDoojWAf8o1PWkA0prK3iZiHUJ5KJLm5soh6nf+FPh8RxRJ cBMr0TGYieL21hU63T7iGvHYOLYANG/vUacrA3jvm3a3NbLDkwXl5JLLBOgf5iXm uZRWbgK121Kss1BTPeh//QaBeZnVj48JohPZQ7WuspWiJm6z33CrIORkqFU+VTzy cf/klE1tBH+ETpvaVMIxOd1AUzmLmZa/g5vnXQARAQABiQIfBBgBCAAJBQJPxWgI AhsMAAoJEOaJI/0SIsh9TtYP/2Jq4+KbowRhnw9gJsOr26i643T7LRsFw2+XvbHP gICwTZYdRa3F8zvTb1R/45Fqt3atZd2pszRFosGx6hCjVZGSTgCbiNscpAntPiSl INFUIXj7L5XlUptFflWNP+uHdYXyAYXl7nuIDOhdfs1gFBXdeuhtmO93kDY52UIv MnFYGrFiZZFBttiffseX/XpJ1W8mnWMF9nqihWFBxvbuauOlVzYofvzYjAQQJb/3 2rNpx2z4mm68Wyn1go9zx75aOEIafEjYlZuusGcpFzchu1xwT4OEGAXXTQ4Sh6aM q4FgQcPxKo5NvU1XJyoCuye5R93tT0uxQNqCeiP+a44PYXex3ijRyS2JhRDhE3uI 605N7+BTVMbcJgo7krptDGfwUOfBRq92jMxINzWsCynJIvh+iYl1R0AecClYgjHV NNzouXMKzS4isXvB/k0LQOYOxWpIwm2xFVODGItDTzErLnPrsFgdxLyJf980HyVO yz/NXL7Xz4kzWAPLO2qboMp/caGlgZviEomffggJKqpnvRYSOl91lf0fVbRYQ4yy 4N2mUpT3iPq87lmhqJWmNhxa9XcfbW5JVHzaiGteuDinWyLQBEuOCpGdFQs8TXuG mQxm5LQ9c8+N4HAXN1jCmP7Oo2shT5TfQXTPs7hlujXz9xs0Gf4n6YEa6yofGiHM OkSi =HUbF -----END PGP PUBLIC KEY BLOCK-----

17 20

isc - a good business
by paul vixie 31 May '12

31 May '12

greetings. i didn't notice this before, and i want to complete the record. i'm paying more attention to the quoting this time, too. > On Wed, May 23, 2012 at 04:33:28PM -0400, Christopher Morrow wrote: > > On Wed, May 23, 2012 at 1:40 AM, <bmanning at vacation.karoshi.com> wrote: > > > Paul will be there to turn things off when > > > they no longer make money for his company. > > > > is the dns changer thingy making money for isc? no. yes. depends on what you mean. we're under contract to the department of justice to run the servers. the amount is intended to be cost-recovery level. (doing stuff like this for nothing does not scale, unless the business is successful enough elsewhere, and even then there'll be limits.) > From: bmanning at vacation.karoshi.com (bmanning at vacation.karoshi.com) > Date: Wed, 23 May 2012 21:00:27 +0000 > Message-ID: <20120523210027.GA26231(a)vacation.karoshi.com.> > > pretty sure. a contract w/ the Feds, outsouring contracts w/ affected ISPs > when the Fed deal runs out, development funding to code these kinds of fixes > into future versions of software, any number of second and third order fallout. i don't know of any outsourcing contracts that will come into force when the fed deal runs out. there is no development funding because there are no code fixes for this kind of problem. i am certainly hoping for second and third order fallout; we pay the people who write BIND using money collected from other people who buy support for BIND, or consulting, or training, or custom feature development. that's how we keep BIND free, and that's how we use a BSD-like license rather than a GPL-like license -- noone who derives their appliance or product from BIND has any obligation to anybody. (noting, nlnetlabs for unbound and nsd also use a BSD-like license, so ISC is not alone here.) > No telling how effective constent self-promotion is. One thing is clear, Paul > is able to tell a great story. thanks for your kind words. i've been trying to uplevel my storytelling capability since i've long since lost my coding skills. > but its all speculation from here. ISC is well positioned to extract value > from both ends of the spectrum. They have a great business model. The optics > look pretty odd from here, at lesat to me however - I am very glad for: )open > source & )other vendors of DNS SW. the women and men of ISC work their asses off to keep the world safer and saner. as you puzzle over our business model please keep in mind that there is no "exit" possibility here -- no IPO, no buyout. salaries at ISC are fair and reasonable, but nobody's getting rich doing this work. so while i am likewise glad for open source and for other vendors of open source DNS software, i'm struggling to grasp the intended suggestion. should ISC stop giving away software? should we stop adding the features to our software that make it relevant and desireable? should we stop selling the support and training and consulting that make it possible to give away this software? if you have a specific accusation of evil-doing, or a specific suggestion for how ISC can become more morally pure, then please say exactly what you mean, and we can discuss that. for more information, see: <http://www.isc.org/community/blog/201001/why-isc-not-profit>. the short version is: ISC is a good business, we do good things, mostly for free, but also for our customers. and we're totally unapologetic about what we do and who we are. paul

13 23

Help us to help you debug networks
by Nick McKeown 30 May '12

30 May '12

Dear Colleague, I am writing to ask you to help us.... so that we might help you. My group at Stanford University is building open source tools to automatically diagnose network failures such as reachability problems, networks loops, and traffic congestion. Our goal is to create tools that are useful to people who own and operate real production networks. Would you be willing to fill out a quick 5-minute survey to help us with our research? I know we all get asked to fill out a lot of these surveys - our goal here is to learn from you, so we can help you in your job, and help the community more broadly. To test our ideas, and to help us build tools that would be useful to you, we need your input: We want to know what network problems you deal with in your network. We plan to publish the results of our survey in an anonymized, aggregated form that you might find useful, along with our research results. Please feel free to forward this email. You can find the survey at http://svy.mk/NetDebug Many thanks. We really appreciate your time. - Nick -------------------------- Professor of Computer Science Stanford University

1 0

Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability
by Cisco Systems Product Security Incident Response Team 30 May '12

30 May '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 1.0 For Public Release 2012 May 30 16:00 UTC (GMT) +--------------------------------------------------------------------- Summary ======= Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers (ASR) Route Switch Processor (RSP440) and Cisco Carrier Routing System (CRS) Performance Route Processor (PRP). The vulnerability is a result of improper handling of crafted packets and could cause the route processor, which processes the packets, to be unable to transmit packets to the fabric. Cisco has released free software updates that address this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org iF4EAREIAAYFAk/GMvQACgkQQXnnBKKRMNDF2wD6A5yZWmZgCmk5x+RJ2mxIXzcW RXsu7/NENNspgbOJk2wA/RIJ9Fbzy+QZTRuQtg2vX0vCOhterMOVmN3Ue0VCzj52 =lCxE -----END PGP SIGNATURE-----

1 0

Contact Requested : China Telecom and SingTel
by Olivier CALVANO 30 May '12

30 May '12

Hi anyone have the name/email of a contact into China Telecom and SingTel for operator ? thanks olivier

2 1

yahoo uk & ireland contact
by Athanasios Douitsis 30 May '12

30 May '12

Hi, Could someone from engineer from yahoo uk & ireland please contact me off-list? I am the admin of a provider with ~25000 DSL users in Greece. For some months now, yahoo cannot be accessed correctly from our newly acquired IP block 37.32.128.0/17. Reportedly, the problem appears when talking to 217.146.187.123 but doesn't appear when talking to 217.12.8.76. Even the contact mail registered with RIPE (uk-abuse(a)cc.yahoo-inc.com) returns an automated response saying they don't read mail from that address. Regards to all, Athanasios Douitsis

1 0

NANOG 55 Peering Track agenda and announcements
by Steve Ginsberg 30 May '12

30 May '12

Hi All, Here's the current plan for the Peering BOF. Session will take place on Monday, June 4, 2012 from 4:30 PM to 6:00 PM in Salon D-F Please join us for a lively discussion. NANOG Peering BoF 90 minutes Introductions and PeeringDB PSA 5min Peering Personals Part I 5min LinkedIN Presentation/Discussion 20min IX Updates 5 min Peering Personals Part 2 5-10 min Pandora Presentation/Discussion 20min Mobile/Peering Changes Discussion 20 min * If you'd like to be part of new Peering Personals - a chance to announce your intention to peer - we'd love to meet you. Please email me off-list with Name, Organization, and URL in Peeringdb by next Monday. * If you're an IX and want to be part of the IX update, please email me directly for the slide template. I'll send it to you so you can submit 1-3 (no more) PowerPoint slides which can be rolled with out narration, by next Monday. * I'd also like to speak to some more folks who work for the Mobile carriers so please get in touch if you'd like to help. ~Steve http://www.pandora.com/profile/peace https://www.peeringdb.com/private/participant_view.php?id=1407 for peering requests please send to peering(a)pandora.com

1 1

Comcast Service for Non-Cap Bandwidth
by Nabil Sharma 30 May '12

30 May '12

NANOG List, I am developing streaming video service, and seek your feedback... I would like to pay Comcast forward so that accessing our site does not count against user's bandwidth caps, similar to the arrangement made with Microsoft Xbox. Does anyone know the name of this service? Is it something the sales contact at http://as7922.peeringdb.com/ can provide? Thank you for your time. Sincerely, Nabil

6 13