August 2012 - Test - lists.nanog.org

Att funkyness
by jeff jones 16 Aug '12

16 Aug '12

Anyone seeing issues with AT&T and DNS resolution? Still troubleshooting, but wanted other input. Thanks ~Jeff

8 8

Re: yahoo admin mail contact (or answer)
by Matthew Petach 16 Aug '12

16 Aug '12

It would really help to know what the source IPs or source prefix these connections are coming from. It's entirely possible there's an old bogon filter entry lurking around or some such that's causing headaches. Thanks! Matt On Thu, Aug 16, 2012 at 10:18 AM, Georgios Vlachos <g.vlachos(a)kestrel-is.gr> wrote: > First thing we checked and fixed (in less than 24h) was the PTR record, I forgot to mention it.... > > > -----Original Message----- > From: Jim Ray [mailto:jim@neuse.net] > Sent: Thursday, August 16, 2012 8:06 PM > To: Georgios Vlachos > Cc: nanog(a)nanog.org > Subject: Re: yahoo admin mail contact (or answer) > > Check reverse DNS. We had same problem with AOL. > > Sent from my iPhone > > On Aug 16, 2012, at 12:51 PM, "Georgios Vlachos" <g.vlachos(a)kestrel-is.gr> wrote: > >> Hello all, >> >> >> >> We put into production a new mailserver 2 weeks ago, and we can send email >> to everybody (no complaints and testing) except yahoo! >> >> >> >> All their mailservers reset the TCP connections, before SMTP even starts. >> This happens randomly on all their mta (look below). As a sequence almost >> half the email we send to yahoo stay in the queue for a day in our >> mailserver and then get discarded (with a connection died message). >> >> >> >> We get the SYN, SYN-ACK, ACK normal handshake and then a TCP reset from >> their mailserver. >> >> >> >> Any idea or off-list contact is very welcome. >> >> >> >> From their website I could not find a way to email them. >> >> >> >> C:\Windows\system32>dig yahoo.com MX >> >> >> >> ; <<>> DiG 9.3.2 <<>> yahoo.com MX >> >> ;; global options: printcmd >> >> ;; Got answer: >> >> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 970 >> >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 24 >> >> >> >> ;; QUESTION SECTION: >> >> ;yahoo.com. IN MX >> >> >> >> ;; ANSWER SECTION: >> >> yahoo.com. 72 IN MX 1 mta6.am0.yahoodns.net. >> >> yahoo.com. 72 IN MX 1 mta7.am0.yahoodns.net. >> >> yahoo.com. 72 IN MX 1 mta5.am0.yahoodns.net. >> >> >> >> ;; ADDITIONAL SECTION: >> >> mta6.am0.yahoodns.net. 141 IN A 66.196.118.34 >> >> mta6.am0.yahoodns.net. 141 IN A 66.196.118.36 >> >> mta6.am0.yahoodns.net. 141 IN A 67.195.168.230 >> >> mta6.am0.yahoodns.net. 141 IN A 98.136.217.202 >> >> mta6.am0.yahoodns.net. 141 IN A 98.139.54.60 >> >> mta6.am0.yahoodns.net. 141 IN A 66.94.237.64 >> >> mta6.am0.yahoodns.net. 141 IN A 66.94.237.139 >> >> mta6.am0.yahoodns.net. 141 IN A 66.94.238.147 >> >> mta7.am0.yahoodns.net. 289 IN A 98.139.54.60 >> >> mta7.am0.yahoodns.net. 289 IN A 66.94.236.34 >> >> mta7.am0.yahoodns.net. 289 IN A 66.94.237.64 >> >> mta7.am0.yahoodns.net. 289 IN A 66.196.118.33 >> >> mta7.am0.yahoodns.net. 289 IN A 66.196.118.35 >> >> mta7.am0.yahoodns.net. 289 IN A 67.195.168.230 >> >> mta7.am0.yahoodns.net. 289 IN A 98.136.216.26 >> >> mta7.am0.yahoodns.net. 289 IN A 98.136.217.202 >> >> mta5.am0.yahoodns.net. 185 IN A 66.196.118.35 >> >> mta5.am0.yahoodns.net. 185 IN A 66.196.118.36 >> >> mta5.am0.yahoodns.net. 185 IN A 98.136.216.25 >> >> mta5.am0.yahoodns.net. 185 IN A 98.136.216.26 >> >> mta5.am0.yahoodns.net. 185 IN A 98.136.217.202 >> >> mta5.am0.yahoodns.net. 185 IN A 66.94.236.34 >> >> mta5.am0.yahoodns.net. 185 IN A 66.94.238.147 >> >> mta5.am0.yahoodns.net. 185 IN A 66.196.118.34 >> >> >> >> Thank you, >> >> >> >> Georgios Vlachos >> >> ___________________________ >> >> Kestrel Information Systems s.a. >> >> 340, Kifissias Ave., >> >> 154 51, Neo Psychico, Athens >> >> Τ.: +30.210.6747740, ext. 105 >> >> F.: +30.210.6771585 >> >> M.: +30.6936 807513 >> >> >> >> <http://www.kestrel-is.gr/> logo kestrel.jpg >> >> >>

1 0

Re: yahoo admin mail contact (or answer)
by Jim Ray 16 Aug '12

16 Aug '12

Check reverse DNS. We had same problem with AOL. Sent from my iPhone On Aug 16, 2012, at 12:51 PM, "Georgios Vlachos" <g.vlachos(a)kestrel-is.gr> wrote: > Hello all, > > > > We put into production a new mailserver 2 weeks ago, and we can send email > to everybody (no complaints and testing) except yahoo! > > > > All their mailservers reset the TCP connections, before SMTP even starts. > This happens randomly on all their mta (look below). As a sequence almost > half the email we send to yahoo stay in the queue for a day in our > mailserver and then get discarded (with a connection died message). > > > > We get the SYN, SYN-ACK, ACK normal handshake and then a TCP reset from > their mailserver. > > > > Any idea or off-list contact is very welcome. > > > > From their website I could not find a way to email them. > > > > C:\Windows\system32>dig yahoo.com MX > > > > ; <<>> DiG 9.3.2 <<>> yahoo.com MX > > ;; global options: printcmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 970 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 24 > > > > ;; QUESTION SECTION: > > ;yahoo.com. IN MX > > > > ;; ANSWER SECTION: > > yahoo.com. 72 IN MX 1 mta6.am0.yahoodns.net. > > yahoo.com. 72 IN MX 1 mta7.am0.yahoodns.net. > > yahoo.com. 72 IN MX 1 mta5.am0.yahoodns.net. > > > > ;; ADDITIONAL SECTION: > > mta6.am0.yahoodns.net. 141 IN A 66.196.118.34 > > mta6.am0.yahoodns.net. 141 IN A 66.196.118.36 > > mta6.am0.yahoodns.net. 141 IN A 67.195.168.230 > > mta6.am0.yahoodns.net. 141 IN A 98.136.217.202 > > mta6.am0.yahoodns.net. 141 IN A 98.139.54.60 > > mta6.am0.yahoodns.net. 141 IN A 66.94.237.64 > > mta6.am0.yahoodns.net. 141 IN A 66.94.237.139 > > mta6.am0.yahoodns.net. 141 IN A 66.94.238.147 > > mta7.am0.yahoodns.net. 289 IN A 98.139.54.60 > > mta7.am0.yahoodns.net. 289 IN A 66.94.236.34 > > mta7.am0.yahoodns.net. 289 IN A 66.94.237.64 > > mta7.am0.yahoodns.net. 289 IN A 66.196.118.33 > > mta7.am0.yahoodns.net. 289 IN A 66.196.118.35 > > mta7.am0.yahoodns.net. 289 IN A 67.195.168.230 > > mta7.am0.yahoodns.net. 289 IN A 98.136.216.26 > > mta7.am0.yahoodns.net. 289 IN A 98.136.217.202 > > mta5.am0.yahoodns.net. 185 IN A 66.196.118.35 > > mta5.am0.yahoodns.net. 185 IN A 66.196.118.36 > > mta5.am0.yahoodns.net. 185 IN A 98.136.216.25 > > mta5.am0.yahoodns.net. 185 IN A 98.136.216.26 > > mta5.am0.yahoodns.net. 185 IN A 98.136.217.202 > > mta5.am0.yahoodns.net. 185 IN A 66.94.236.34 > > mta5.am0.yahoodns.net. 185 IN A 66.94.238.147 > > mta5.am0.yahoodns.net. 185 IN A 66.196.118.34 > > > > Thank you, > > > > Georgios Vlachos > > ___________________________ > > Kestrel Information Systems s.a. > > 340, Kifissias Ave., > > 154 51, Neo Psychico, Athens > > Τ.: +30.210.6747740, ext. 105 > > F.: +30.210.6771585 > > M.: +30.6936 807513 > > > > <http://www.kestrel-is.gr/> logo kestrel.jpg > > >

2 1

yahoo admin mail contact (or answer)
by Georgios Vlachos 16 Aug '12

16 Aug '12

Hello all, We put into production a new mailserver 2 weeks ago, and we can send email to everybody (no complaints and testing) except yahoo! All their mailservers reset the TCP connections, before SMTP even starts. This happens randomly on all their mta (look below). As a sequence almost half the email we send to yahoo stay in the queue for a day in our mailserver and then get discarded (with a connection died message). We get the SYN, SYN-ACK, ACK normal handshake and then a TCP reset from their mailserver. Any idea or off-list contact is very welcome. >From their website I could not find a way to email them. C:\Windows\system32>dig yahoo.com MX ; <<>> DiG 9.3.2 <<>> yahoo.com MX ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 970 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 24 ;; QUESTION SECTION: ;yahoo.com. IN MX ;; ANSWER SECTION: yahoo.com. 72 IN MX 1 mta6.am0.yahoodns.net. yahoo.com. 72 IN MX 1 mta7.am0.yahoodns.net. yahoo.com. 72 IN MX 1 mta5.am0.yahoodns.net. ;; ADDITIONAL SECTION: mta6.am0.yahoodns.net. 141 IN A 66.196.118.34 mta6.am0.yahoodns.net. 141 IN A 66.196.118.36 mta6.am0.yahoodns.net. 141 IN A 67.195.168.230 mta6.am0.yahoodns.net. 141 IN A 98.136.217.202 mta6.am0.yahoodns.net. 141 IN A 98.139.54.60 mta6.am0.yahoodns.net. 141 IN A 66.94.237.64 mta6.am0.yahoodns.net. 141 IN A 66.94.237.139 mta6.am0.yahoodns.net. 141 IN A 66.94.238.147 mta7.am0.yahoodns.net. 289 IN A 98.139.54.60 mta7.am0.yahoodns.net. 289 IN A 66.94.236.34 mta7.am0.yahoodns.net. 289 IN A 66.94.237.64 mta7.am0.yahoodns.net. 289 IN A 66.196.118.33 mta7.am0.yahoodns.net. 289 IN A 66.196.118.35 mta7.am0.yahoodns.net. 289 IN A 67.195.168.230 mta7.am0.yahoodns.net. 289 IN A 98.136.216.26 mta7.am0.yahoodns.net. 289 IN A 98.136.217.202 mta5.am0.yahoodns.net. 185 IN A 66.196.118.35 mta5.am0.yahoodns.net. 185 IN A 66.196.118.36 mta5.am0.yahoodns.net. 185 IN A 98.136.216.25 mta5.am0.yahoodns.net. 185 IN A 98.136.216.26 mta5.am0.yahoodns.net. 185 IN A 98.136.217.202 mta5.am0.yahoodns.net. 185 IN A 66.94.236.34 mta5.am0.yahoodns.net. 185 IN A 66.94.238.147 mta5.am0.yahoodns.net. 185 IN A 66.196.118.34 Thank you, Georgios Vlachos ___________________________ Kestrel Information Systems s.a. 340, Kifissias Ave., 154 51, Neo Psychico, Athens Τ.: +30.210.6747740, ext. 105 F.: +30.210.6771585 M.: +30.6936 807513 <http://www.kestrel-is.gr/> logo kestrel.jpg

1 0

DNS Changer items
by Eric J Esslinger 16 Aug '12

16 Aug '12

A) The DNS changer working group site http://www.dns-ok.us seems to be down for the clean people anyway. (Down for everyone agrees with me). B) Fox, CNN, and MSNBC have apparantly all run stories in the last couple of hours that essentially ended with 'Call your ISP if you have any questions' (gee thanks). And I'm told the ABC/CBS/NBC are running the same basic thing tonight, with the same basic ending. The more you know... __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

23 40

Bandwidth spikes due to Microsoft release of windows 8 on MSDN
by Blake Pfankuch 15 Aug '12

15 Aug '12

Anyone seeing a significant increase of traffic with this?

4 4

[2.0 Update] Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability
by Cisco Systems Product Security Incident Response Team 15 Aug '12

15 Aug '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 2.0 For Public Release 2012 August 15 16:00 UTC (GMT) +--------------------------------------------------------------------- Summary ======= Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers (ASR) Route Switch Processor (RSP-4G and RSP-8G), Route Switch Processor 440 (RSP440), and Cisco Carrier Routing System (CRS) Performance Route Processor (PRP). The vulnerability is a result of improper handling of crafted packets and could cause the route processor, which processes the packets, to be unable to transmit packets to the fabric. Cisco has released free software updates that address this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org iF4EAREIAAYFAlArqykACgkQUddfH3/BbTp9qQD+JykExH3Qj2xaR74o4PomFAL4 vpajwSl1+1b6CtV5cQoA/0kwCOTFnjS4Te31QjkSx5+uhDpEPs5qjTb8F6EXiapD =Yc2a -----END PGP SIGNATURE-----

1 0

Testing 1gbps bandwidth
by Luqman Kondeth 15 Aug '12

15 Aug '12

Team, Is anyone aware of any public IPerf servers in the middle east or close by?(Europe) or anywhere that can do udp?. I have a 1gbps Internet link which I’ve been asked to show that it has 1gbps download speeds. I know this is going to be difficult but thought I’d ask anyway. Is there any other suggestion for this testing? thanks ----------------------------------------------------------------------------------------------------------------------------- [image: Description: Description: NYUAD Logo] *Luqman Kondeth* Snr Network Consultant +971 26284735 NYU Abu Dhabi Sama Tower, Airport Rd. and Electra St., Next to New NMC Hospital P.O. Box 129188 Abu Dhabi, United Arab Emirates

10 12

Re: Testing 1gbps bandwidth
by Scott Weeks 14 Aug '12

14 Aug '12

--- nanog(a)penfold.owt.com wrote: From: Russ Hughes <nanog(a)penfold.owt.com> Now if you only added "copy running-config startup-config", you wouldn't have to deal with this more then once. -------------------------------------------- That's what "wr mem" does... scott

2 1

Re: Testing 1gbps bandwidth
by Nick Olsen 14 Aug '12

14 Aug '12

Agreed. We actually started hosting our own speedtest.net server in order to get some more consistent results. Still nothing like iperf. But a decent "Quick and dirty" type of test. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Nick Hilliard" <nick(a)foobar.org> Sent: Tuesday, August 14, 2012 11:09 AM To: nanog(a)nanog.org Subject: Re: Testing 1gbps bandwidth On 14/08/2012 15:43, valdis.kletnieks(a)vt.edu wrote: > case trying to use one of the speedtest.net servers - we had a clear 10G path > out through like 3 AS's in a row, the bottleneck was speedtest.net's server. :) you'll have to forgive me for being the cynical type, but I gave up on Speedtest the day they reported 146Mbit/sec download over a link which was hard-wired to 100Mbit/sec full duplex, and later that day they reported 2Mbit from another nearby server to the same box. I figured a stddev of 2 orders of magnitude wasn't going to give me figures accurate enough for my requirements. But hey, this is the Internet: ymmv, ianal, lolwut, bbq. Nick

1 0