August 2013 - Test - lists.nanog.org

Strange entries from AS1 in global table
by Anurag Bhatia 08 Aug '13

08 Aug '13

Hello everyone I was looking at global IPv4 table and saw some strange entries from AS1. As per ARIN whois AS1 seems to be with Level3 but I noticed few prefixes of Brazil based ISP - Netvip http://bgp.he.net/AS1#_prefixes Looking at any prefix in detail, it seems like there are multiple ASNs announcing same prefix. E.g 177.185.96.0/24 - is being announced by AS1 as well as AS52931 (Netvip's allocated ASN). Same is true with 177.185.98.0/24, 177.185.98.0/24and so on. http://bgp.he.net/net/177.185.96.0/24 So seems like AS1 acting like a mirror for all announcements of AS52931. To see who exactly gave "transit" to AS1 by Netvip in Brazil, I checked Oregon and noticed these routes: 3356 3549 16735 52931 1 i Seems like AS52931 itself is acting as transit for AS1 (and AS16735 which seems like a backbone ISP in Brazil) is not filtering these routes further passing to Level3 (AS3549+AS3356). I am curious to know what could be possible reason for an ASN like AS1 acting in exact mirror of AS52931? Could it be a case of internal use of AS1 (assuming it to be private ASN)? May be it's a case of leaked internal routes? Appreciate your time & answer. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

5 4

2013 NANOG Board - Call for Nominations
by Michael Smith 08 Aug '13

08 Aug '13

Dear NANOGers, Hope you are enjoying this great Summer. Following our July 15, 2013 posting ‘‘Announcing the October 2013 NANOG Elections’ which provided a preview into our election process, on behalf of the Board and 2013 Elections Committee, we are pleased to open the Call for Board Member Nominations for the three vacant positions on the Board of Directors. The nomination period starts August 9 and closes September 20, 2013 at 23:59 Pacific Standard Time. If you are nominating another person, please send that person's name and email address to elections(a)nanog.org and we will contact them to acknowledge their willingness to stand and will ask them to submit their Declaration of Candidacy Form, found under the2013 Elections Main Menu. If you are nominating yourself, please submit your Declaration of Candidacy Form and email it to elections(a)nanog.org. Below is the summary of the Board Member role and a detailed description is viewable on our NANOG website. ************************************ Position: Board Member Time commitment: Five hours per week (meetings, preparation, consultation) for Members or Eight hours per week (meetings, preparation, consultation) for Officers (Chair, Vice Chair, Secretary, Treasurer). Term: Two years. Maximum of two consecutive terms. Accountability The Board of Directors are collectively accountable to the community, sponsors and other stakeholders. They are accountable for NANOG’s performance in relation to its mission and strategic objectives and for the effective stewardship of financial and human resources. Authority Individual board members have no authority to approve actions by NANOG, to direct staff, or to speak on behalf for NANOG, unless given such authority by the board. Responsibility Board members are responsible for acting in the best long-term interests of the organization and its community and will bring to the task of informed decision-making, a broad knowledge and an inclusive perspective. General Duties Every member of the Board of Directors is expected to do the following: · Be a NANOG member in good standing · Prepare for and attend board meetings every fortnight · Work as a team member and support board decisions · Participate in the review of NANOG’s mission and objectives and the development of a strategic plan · Monitor the performance of the organization in relation to objectives and core values · Approve the budget and monitor financial performance in relation to it · Abide by the by-laws, code of conduct and other policies that apply to the board · Establish, review and monitor policies that guide core operational practices (eg. financial management, human resource management) · Participate in hiring and releasing the Executive Director · Participate in the evaluation of the Executive Director · Participate in the recruitment of new board members · Participate in the evaluation of the board itself · Participate in committee work (liaison) · Appoint Standing committees members · Appoint Ad-Hoc committees members. · Attend two out of every three NANOG conferences · Keep informed about community issues relevant to the mission and objectives of NANOG Qualifications The following are considered key job qualifications: · Knowledge of the community · Experience in or willingness to participate in the governance of a non-profit organization · Demonstrated aptitudes for financial management · Leadership, outreach and communication skills · Commitment to organization’s mission and strategic directions · A commitment of time · Consensus organizing and openness to learning Removal of a Board Member A Board of Directors member who misses three or more meetings in a row and who does not attend any Board of Directors meetings for three months may be removed. ************************************ The Board of Directors is an active and engaged component of NANOG. As NANOG continues to evolve, our Board and our Committees will continue to play an increasingly important role in our success. We thank you in advance for becoming NANOG members and taking an active part in our governance. Should you have any questions, please feel free to send the elections(a)nanog.org. Best regards Michael K. Smith Vice Chair, NANOG Board of Directors

1 0

questions regarding prefix hijacking
by Martin T 08 Aug '13

08 Aug '13

Hi, as probably many of you know, it's possible to create a "route" object to RIPE database for an address space which is allocated outside the RIPE region using the RIPE-NCC-RPSL-MNT maintainer object. For example an address space is from APNIC or ARIN region and AS is from RIPE region. For example a LIR in RIPE region creates a "route" object to RIPE database for 157.166.266.0/24(used by Turner Broadcasting System) prefix without having written permission from Turner Broadcasting System and as this LIR uses up-link providers who create prefix filters automatically according to RADb database entries, this ISP is soon able to announce this 157.166.266.0/24 prefix to Internet. This should disturb the availability of the real 157.166.266.0/24 network on Internet? Has there been such situations in history? Isn't there a method against such hijacking? Or have I misunderstood something and this isn't possible? regards, Martin

13 19

Re: questions regarding prefix hijacking
by Larry Sheldon 07 Aug '13

07 Aug '13

On 8/7/2013 2:58 PM, Valdis.Kletnieks(a)vt.edu wrote: > On Wed, 07 Aug 2013 03:07:04 -0700, Paul Ferguson said: > >> Having said that, there are quite a few documented cases of it being >> done intentionally, and for nefarious purposes. > > Do I need ECC on my brain to stop the bitrot, or was there a kerfluffle a > long ways back when somebody announced 127/8, and a surprising number of > systems actually bit? Seems like that might have been the first time I was annoying the Big Net Operators about why they route unroutable traffic. And a new annoying question: does it seem odd that the Big Net Operator's Private Mailing List is answering such gut basic and old news questions about how do I best destroy the Internet, should I wan t to do that? -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Comcast contact
by Andy Ringsmuth 07 Aug '13

07 Aug '13

Any chance someone on this list is affiliated with Comcast who could contact me off-list? I have an employee in Virginia who works from home using, in part, a VOIP desk telephone tied into our office phone system back in Nebraska. She's had nothing but problems maintaining a stable connection and I'm at my wit's end to diagnose and fix whatever is causing her problems. I've got this exact setup with several employees around the country, but this one person is the only one who, 1 - has problems and 2 - has Comcast. Much appreciated! ---- Andy Ringsmuth andy(a)newslink.com News Link – Manager Technology & Facilities 2201 Winthrop Rd., Lincoln, NE 68502-4158 (402) 475-6397 (402) 304-0083 cellular

8 8

Re: Comcast contact
by Chad Reid 07 Aug '13

07 Aug '13

Andy, I posted in this list earlier in the week regarding Comcast and an issue my company was experiencing. I also posted at www.reddit.com/r/networking. I had numerous support staff from Comcast contact me over on Reddit. I would recommend posting there too. Message: 4 Date: Tue, 6 Aug 2013 11:10:30 -0500 From: Brandon Galbraith <brandon.galbraith(a)gmail.com> To: Andy Ringsmuth <andy(a)newslink.com> Cc: NANOG list <nanog(a)nanog.org> Subject: Re: Comcast contact Message-ID: <CADE4tYV2f4okFnY2GRPBckFa9gVuwJYGGAq18DFbjBOyLjmmTQ(a)mail.gmail.com> Content-Type: text/plain; charset=UTF-8 Have you monitored your user's home Comcast connection with regards to packet loss or latency, preferably from network-near the SIP termination point? On Tue, Aug 6, 2013 at 10:56 AM, Andy Ringsmuth <andy(a)newslink.com> wrote: > Any chance someone on this list is affiliated with Comcast who could contact me off-list? I have an employee in Virginia who works from home using, in part, a VOIP desk telephone tied into our office phone system back in Nebraska. She's had nothing but problems maintaining a stable connection and I'm at my wit's end to diagnose and fix whatever is causing her problems. > > I've got this exact setup with several employees around the country, but this one person is the only one who, 1 - has problems and 2 - has Comcast. > > Much appreciated! > > ---- > Andy Ringsmuth > andy(a)newslink.com > News Link ? Manager Technology & Facilities > 2201 Winthrop Rd., Lincoln, NE 68502-4158 > (402) 475-6397 (402) 304-0083 cellular This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.

1 0

RPKI and Trust Anchor question
by Marcel Plug 06 Aug '13

06 Aug '13

Hi Nanog, Does anyone have any inside information what may be happening in the effort to have a single trust anchor for RPKI? Is ICANN still working on this? If so is there any timeline or published info of any kind? Most of the information i can find is about 2 years old. Any links or info of any kind would be much appreciated. Thanks, Marcel Plug

8 10

Re: Returned mail: see transcript for details
by Jimmy Hess 06 Aug '13

06 Aug '13

This was just received a flood of bounces reporting delivery failuers on messages I sent to nanog@ a few days ago... Actually, I have just received a flood of about 15 messages just like this one around 9:00pm; from various nanog posts I had sent 2 to 5 days in the past...... Is that strange or what? I thought the mailing list software rewrote the return path to suppress bounces? On 8/4/13, MAILER-DAEMON(a)mx1.kdc.fujixerox.co.jp <MAILER-DAEMON(a)mx1.kdc.fujixerox.co.jp> wrote: > The original message was received at Mon, 5 Aug 2013 10:37:12 +0900 (JST) > from ms2.dc.fxis.co.jp [143.94.15.17] > > ----- The following addresses had permanent fatal errors ----- > <toshiya(a)de-anza.rdh.fujixerox.co.jp> > (reason: 550 5.1.1 <toshiya(a)de-anza.rdh.fujixerox.co.jp>: Recipient > address rejected: User unknown in local recipient table) > > ----- Transcript of session follows ----- > ... while talking to de-anza.rdh.fujixerox.co.jp.: >>>> DATA > <<< 550 5.1.1 <toshiya(a)de-anza.rdh.fujixerox.co.jp>: Recipient address > rejected: User unknown in local recipient table > 550 5.1.1 <toshiya(a)de-anza.rdh.fujixerox.co.jp>... User unknown > <<< 554 5.5.1 Error: no valid recipients > -- -JH

6 6

which firewall product?
by William Herrin 05 Aug '13

05 Aug '13

Hi folks, I'm trying to identify a firewall appliance for one of my customers. The wrinkle is: it has to be able to inspect packets inside an IPIP tunnel and accept/reject based on IP address, TCP port number and standard things like that. On the packet carried *inside* the IPIP tunnel packet. >From what I can tell, the Cisco ASA can't do this. Linux iptables can (with the u32 match module) but the customer wants an appliance, not a server. What appliances do you know of that can do this? Is there a different Cisco box? A Juniper firewall? Anything else? Thanks in advance, Bill Herrin -- William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004

12 16

204.17.16.0/20 Unreachable via Comcast ASN 7992; Looking for Help or Contacts
by Chad Reid 05 Aug '13

05 Aug '13

Hello NANOG, A few hundred of our users that use Comcast in the South East United States (other regions aren't affected) are unable to access our websites in the IP block 204.17.16.0/20. Based upon testing with the users, they're getting a destination unreachable from a Comcast backbone router in ASN 7922: be-16-pe03.56marietta.ga.ibone.comcast.net [68.86.83.134] reports: Destination net unreachable. We're not a customer of Comcast, nor are any of our ISPs. Because of this, we can't find anyone at Comcast to look at this issue nor do we have good contact info to even reach someone. Our users in the South East can open tickets with Comcast technical support, but you can imagine how successful they are trying to explain this to frontline support and getting frontline support to understand. Is anyone from Comcast on the list that can assist or know of a contact? Chad M. Reid, Network Administrator II Work Hours: Sun. - Tue. 6AM-6PM and Wed. 6AM-3PM (MST -7) Apollo Group | IT Services │ IT Operations Center (ITOC) 4025 S. Riverpoint Parkway │ MS: AA-M002 │ Phoenix, AZ 85040 phone: 602.557.6746 │ fax: 602.557.6606 │ email: chad.reid(a)apollogrp.edu This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.

2 1