June 2012 - Test - lists.nanog.org

Our first inbound email via IPv6 (was spam!)
by Livingood, Jason 13 Jul '12

13 Jul '12

In preparation for the World IPv6 Launch, inbound (SMTP) email to the comcast.net domain was IPv6-enabled today, June 5, 2012, at 9:34 UTC. Roughly one minute later, at 9:35:30 UTC we received our first inbound email over IPv6 from 2001:4ba0:fff4:1c::2. That first bit of mail was spam, and was caught by our Cloudmark messaging anti-abuse platform (the sender attempted a range of standard spam tactics in subsequent connections). In the past several hours we have of course seen other messages from a range of hosts, many of which were legitimate email so it wasn't just spam! ;-) Since the Internet is of course more than just the web, we encourage others to start making non-HTTP services available via IPv6 as well. Jason Livingood Comcast

10 15

strat-1 gps
by Randy Bush 11 Jul '12

11 Jul '12

my old TymServe 2100-GPS seems to have died. would appreciate reccos for a replacement. it is in a stand-alone environment so i can avoid roof access issues. antenna already in place. thanks. randy

8 9

Hotmail/live
by matt kelly 10 Jul '12

10 Jul '12

Can a hotmail/live.com postmaster contact me offlist please? Thanks

2 1

FYI Netflix is down
by Joe Blanchard 04 Jul '12

04 Jul '12

Seems that they are unreachable at the moment. Called and theres a recorded message stating they are aware of an issue, no details. -Joe

42 84

DNS poisoning at Google?
by Matthew Black 03 Jul '12

03 Jul '12

Google Safe Browsing and Firefox have marked our website as containing malware. They claim our home page returns no results, but redirects users to another compromised website couchtarts.com. We have thoroughly examined our root .htaccess and httpd.conf files and are not redirecting to the problem target site. No recent changes either. We ran some NSLOOKUPs against various public DNS servers and intermittently get results that are NOT our servers. We believe the DNS servers used by Google's crawler have been poisoned. Can anyone shed some light on this? matthew black information technology services california state university, long beach www.csulb.edu<http://www.csulb.edu>

15 23

RE: [c-nsp] NTP Servers
by Keith Medcalf 01 Jul '12

01 Jul '12

> Or you can ask the it guys to use a windows server... Eg: > > http://support.microsoft.com/kb/816042 That is a joke Jared? You left off the smiley. Windows doesn't do NTP out-of-the-box (Microsoft assertions to the contrary notwithstanding). You can build a reasonably working standard daemon, however don't expect time to be very accurate. Windows out-of-the-box can keep time +/- 10 minutes or so using the Microsoft lets-pretend-NTP. You can build the current standard NTPD distribution on Windows. You can also spend lots of time to make it "work as well as possible" (once you manage to get it to compile, that is). Even so, when you have configured it to the optimality of accuracy, this is what you can expect: remote refid st t when poll reach delay offset jitter ============================================================================== +tic.nrc.ca .PPS. 1 u 13 64 377 55.544 5.913 0.870 -tac.nrc.ca .ATOM. 1 u 48 64 377 56.188 4.768 3.041 -toc.nrc.ca .ATOM. 1 u 1 64 377 55.485 4.758 0.981 +tick.usask.ca .GPS. 1 u 34 64 377 19.566 6.942 5.699 *tock.usask.ca .GPS. 1 u 29 64 377 19.665 5.955 1.937 -clock.isc.org .GPS. 1 u 37 64 377 53.091 8.311 0.649 +clock.sjc.he.ne .CDMA. 1 u 48 64 377 43.591 6.066 2.501 offset: 0.005955 s frequency: 23.346 ppm poll adjust: -30 watchdog timer: 47 s is about the best you will get. Statistics are pretty awful: Date # O.Avg O.Median O.Range O.CI O.Skew O.Kurt F.Avg F.Median F.Range F.CI F.Kurt 2012-01 899 0.765559 0.004198 20.05221 0.000371 -0.56023 0.751151 21.31698 20.9705 2.9685 0.108050 -0.88068 2012-02 9673 0.237434 -7.46502 59.75607 0.000156 -1.43583 8.609085 19.01126 19.3495 5.2995 0.040683 -0.54578 2012-03 1380 -0.02157 -14.8416 44.00043 0.000124 -1.08589 4.559049 18.08941 16.822 7.536 0.045387 0.268831 2012-04 1322 0.196654 21.16261 106.1250 0.000141 -0.48643 26.05868 17.56811 16.812 6.111 0.040561 -0.38021 2012-05 8849 0.118125 27.44213 72.01526 0.000161 0.296114 8.939429 17.88685 15.2595 9.3195 0.080186 1.121740 2012-06 1457 0.409662 -20.2809 63.32684 0.000114 -1.44144 11.98237 20.50724 19.5425 6.7425 0.042372 -0.08891 6102 0.201651 21.16261 106.1250 6.065429 -0.84354 13.78161 18.71838 16.1125 10.1725 0.023443 1.215941 This is from a custom ntpd build using the highest precision that it can manage to coerce from Windoze. Of course, this may be accurate enough for most uses -- at least it does not have to time-step. Doesn't compare to ntpd on linux on an 80286 with 640K ram booting from a floppy, which can maintain time sync within less than 1 ms easily. --- () ascii ribbon campaign against html e-mail /\ www.asciiribbon.org

5 5

Anyone from ATT?
by TR Shaw 30 Jun '12

30 Jun '12

Please contact me off list. I have problems with our equipment on these two ATT netblocks communicating between one another. AT&T Services, Inc. ATT (NET-12-0-0-0-1) 12.0.0.0 - 12.255.255.255 CFWN Pool ATTCT-NMPL20 ATTW-042909163717 (NET-12-88-176-0-1) 12.88.176.0 - 12.88.191.255 and NetRange: 108.192.0.0 - 108.255.255.255 CIDR: 108.192.0.0/10 OriginAS: AS7132 NetName: SBCIS-SBIS

1 0

RE: [c-nsp] NTP Servers
by Keith Medcalf 30 Jun '12

30 Jun '12

> those. The beauty of most appliances is that they're easy to manage. If it > fails, download the latest ISO from company, burn it, boot appliance, > restore it and you're back in business in an hour or so. Keep in mind a > linux kernel running just ntpd and some management necessities like ssh and > http is pretty reliable. Hardly any I/O, just a simple function it does. http is a frilly pink bauble, not a management necessity. Very basic linux with no frilly bauble's, ntpd, sshd, and vi. Supports thousands of clients on a $10 80286 with 640KB RAM booting from a floppy. Add $1000 and you can get the same thing as an "appliance". --- () ascii ribbon campaign against html e-mail /\ www.asciiribbon.org

1 0

http/ssl to dropbox.com dying
by Greg Ihnen 29 Jun '12

29 Jun '12

From other geographic locations I can connect to the dropbox service and get to their https web page, but from my home connection I can't, unless I vpn around the issue. downforeveryoneorjustme says it's just me, but they're located someplace else geographically, and I don't know if they check the https site. http://www.dropbox.com immediately redirects to https://www.dropbox.com It seems like a transport issue. Is there any tools for checking where an https connection is failing, like a traceroute for https? I'm not sure if the traceroute results are indicative but here it is Macintosh-2:~ gregihnen$ traceroute dropbox.com traceroute: Warning: dropbox.com has multiple addresses; using 199.47.216.179 traceroute to dropbox.com (199.47.216.179), 64 hops max, 52 byte packets 1 router (192.168.7.1) 1786.458 ms 1.670 ms 2.072 ms 2 modem (100.42.12.241) 1644.717 ms 2031.032 ms 2113.805 ms 3 75.7.64.12 (75.7.64.12) 2594.284 ms 1650.347 ms 822.159 ms 4 75.7.64.2 (75.7.64.2) 1528.550 ms 2168.641 ms 1922.285 ms 5 12.91.131.205 (12.91.131.205) 2323.903 ms 3137.965 ms 2138.427 ms 6 cr83.cgcil.ip.att.net (12.122.133.202) 1629.569 ms 1946.842 ms 1621.351 ms 7 cr1.cgcil.ip.att.net (12.123.7.110) 2256.595 ms 1515.060 ms 2418.845 ms 8 gar8.cgcil.ip.att.net (12.122.133.161) 2349.706 ms 2339.392 ms 583.224 ms 9 192.205.37.150 (192.205.37.150) 1396.288 ms 1732.779 ms 2664.270 ms 10 4.69.158.138 (4.69.158.138) 2690.646 ms 4.69.158.130 (4.69.158.130) 2313.195 ms 4.69.158.138 (4.69.158.138) 1261.560 ms 11 ae-3-3.ebr2.denver1.level3.net (4.69.132.61) 1476.892 ms 1819.138 ms 2188.664 ms 12 ae-1-100.ebr1.denver1.level3.net (4.69.151.181) 1490.142 ms 2916.895 ms 2569.848 ms 13 ae-3-3.ebr2.sanjose1.level3.net (4.69.132.57) 4328.125 ms 3226.550 ms 2648.859 ms 14 ae-72-72.csw2.sanjose1.level3.net (4.69.153.22) 2171.863 ms ae-82-82.csw3.sanjose1.level3.net (4.69.153.26) 2675.059 ms ae-92-92.csw4.sanjose1.level3.net (4.69.153.30) 4404.724 ms 15 ae-1-60.edge2.sanjose3.level3.net (4.69.152.17) 3331.595 ms ae-2-70.edge2.sanjose3.level3.net (4.69.152.81) 3112.938 ms 2492.688 ms 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * 31 * * * 32 * * * 33 * * * 34 * * * 35 * * * 36 * * * Greg

2 1

BGP Update Report
by cidr-report＠potaroo.net 29 Jun '12

29 Jun '12

BGP Update Report Interval: 21-Jun-12 -to- 28-Jun-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 55563 1.9% 28.1 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS9829 41479 1.5% 31.8 -- BSNL-NIB National Internet Backbone 3 - AS13188 38016 1.3% 70.5 -- BANKINFORM-AS TOV "Bank-Inform" 4 - AS5800 35008 1.2% 134.6 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 5 - AS24560 30326 1.1% 29.3 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 6 - AS12479 29579 1.0% 38.0 -- UNI2-AS France Telecom Espana SA 7 - AS8452 25140 0.9% 19.1 -- TE-AS TE-AS 8 - AS28573 25016 0.9% 12.6 -- NET Servicos de Comunicao S.A. 9 - AS17813 21150 0.7% 159.0 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 10 - AS7552 20962 0.7% 19.0 -- VIETEL-AS-AP Vietel Corporation 11 - AS2697 20353 0.7% 100.8 -- ERX-ERNET-AS Education and Research Network 12 - AS13118 19764 0.7% 411.8 -- ASN-YARTELECOM OJSC Rostelecom 13 - AS20115 18732 0.7% 11.3 -- CHARTER-NET-HKY-NC - Charter Communications 14 - AS17621 17293 0.6% 113.8 -- CNCGROUP-SH China Unicom Shanghai network 15 - AS24863 16472 0.6% 18.9 -- LINKdotNET-AS 16 - AS19361 15264 0.5% 448.9 -- Atrium Telecomunicacoes Ltda 17 - AS7029 13362 0.5% 3.9 -- WINDSTREAM - Windstream Communications Inc 18 - AS4323 12157 0.4% 7.7 -- TWTC - tw telecom holdings, inc. 19 - AS26615 11933 0.4% 13.0 -- Tim Celular S.A. 20 - AS34875 10844 0.4% 62.7 -- YANFES OJSC "Uralsviazinform" TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS40848 2543 0.1% 2543.0 -- FMFCU - Franklin Mint FCU 2 - AS3 1893 0.1% 1960.0 -- OOO-HAS-TELEKOM-AS OOO HAS-TELEKOM 3 - AS3 1409 0.1% 2120.0 -- OOO-HAS-TELEKOM-AS OOO HAS-TELEKOM 4 - AS29126 932 0.0% 932.0 -- DATIQ-AS Datiq B.V. 5 - AS55665 835 0.0% 835.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 6 - AS45286 824 0.0% 824.0 -- EDIINDONESIA-AS-ID PT EDI INDONESIA 7 - AS30944 733 0.0% 733.0 -- DKD-AS Bendra Lietuvos, JAV ir Rusijos imone uzdaroji akcine bendrove "DKD" 8 - AS19675 2229 0.1% 557.2 -- VCS-AS - Virtacore Systems Inc 9 - AS38142 8093 0.3% 505.8 -- UNAIR-AS-ID Universitas Airlangga 10 - AS19361 15264 0.5% 448.9 -- Atrium Telecomunicacoes Ltda 11 - AS57105 854 0.0% 427.0 -- SUNIMPROF-AS Sunimprof Import Export SRL 12 - AS13118 19764 0.7% 411.8 -- ASN-YARTELECOM OJSC Rostelecom 13 - AS27771 812 0.0% 406.0 -- Instituto Venezolano de Investigaciones Cientificas 14 - AS19406 4345 0.1% 395.0 -- TWRS-MA - Towerstream I, Inc. 15 - AS16535 1122 0.0% 374.0 -- ECHOS-3 - Echostar Holding Purchasing Corporation 16 - AS57201 367 0.0% 367.0 -- EDF-AS Estonian Defence Forces 17 - AS48068 709 0.0% 354.5 -- VISONIC Visonic Ltd 18 - AS23533 338 0.0% 338.0 -- PIP-ASN - Permian Investment Partners, LP 19 - AS32444 1805 0.1% 300.8 -- SAFELINK-JEROME1ASN - Safelink Internet 20 - AS37429 872 0.0% 290.7 -- Spidernet TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/19 19381 0.7% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 220.196.26.0/24 16991 0.6% AS17621 -- CNCGROUP-SH China Unicom Shanghai network 3 - 159.224.176.0/22 12498 0.4% AS13188 -- BANKINFORM-AS TOV "Bank-Inform" 4 - 159.224.222.0/23 12496 0.4% AS13188 -- BANKINFORM-AS TOV "Bank-Inform" 5 - 41.43.147.0/24 11741 0.4% AS8452 -- TE-AS TE-AS 6 - 182.64.0.0/16 10758 0.4% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 7 - 122.161.0.0/16 8770 0.3% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 8 - 62.36.252.0/22 8135 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 9 - 62.36.249.0/24 6626 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 10 - 202.56.215.0/24 6579 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 11 - 62.36.241.0/24 6245 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 12 - 62.36.210.0/24 6099 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 13 - 59.177.48.0/20 5954 0.2% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 14 - 194.63.9.0/24 5160 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 15 - 69.38.178.0/24 4310 0.1% AS19406 -- TWRS-MA - Towerstream I, Inc. 16 - 147.30.240.0/22 3268 0.1% AS9198 -- KAZTELECOM-AS JSC Kazakhtelecom 17 - 59.177.64.0/18 2992 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 18 - 59.177.144.0/20 2783 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 19 - 146.145.140.0/24 2543 0.1% AS40848 -- FMFCU - Franklin Mint FCU 20 - 115.170.128.0/17 2251 0.1% AS4847 -- CNIX-AP China Networks Inter-Exchange Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0