August 2013 - Test - lists.nanog.org

BGP related question
by Shah, Parthiv 01 Aug '13

01 Aug '13

My apology if I am asking for a repeat question on the list. On 7/29/13 I read an incident about accidental BGP broadcast see article here https://isc.sans.edu/diary/BGP+multiple+banking+addresses+hijacked/16249 or older 2008 incident http://www.renesys.com/2008/02/pakistan-hijacks-youtube-1/ My questions: 1) I would like to understand how can we detect and potentially prevent activities like this? I understand native BGP was not design to authenticate IP owners to the BGP broadcaster. Therefore, issues like this due to a human error would happen. How can activities like this be detected as this is clearly a threat if someone decides to broadcast IP networks of an organization and knock the real org. off the Net. 2) In reference to prevention, I recall there were discussions about secure BGP (S-BGP), Pretty Good BGP, or Secure Original BGP but I don't remember if any one of them was finalized (from practicality viewpoint) and if any one of them is implementable/enforceable by ISPs (do anyone have any insight)? 3) If I was to ask for an opinion, from your viewpoint which one is better and why and which one is not doable and why not? Thank you in advance, Parthiv This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and notify us immediately.

4 3

[NANOG-announce] NANOG on The Road
by Betty Burke <betty＠nanog.org> 01 Aug '13

01 Aug '13

NANOGers, You are invited to attend NANOG's first one-day meeting, "NANOG on the Road"joint with ARIN on September 10, 2013 in Portland, OR. ARIN + NANOG on the Road Portland will provide an opportunity to network with colleagues, access to a day's worth of professional education and current Internet operations. Content will be provided by speakers from both ARIN and NANOG. ** ** Complete Event details are available on the NANOG website: ARIN + NANOG on the Road in Portland, Oregon<http://www.nanog.org/meetings/road1/home> **** will be held at the Courtyard by Marriott Portland Downtown/Convention Center. **** * * Registration is free but required, so make sure to register now<https://www.arin.net/participate/meetings/on-the-road/portland.html> ! Spend the morning getting up to speed on the history of the Regional Registry System, Internet Governance, and ARIN technical services. Find out the latest about Internet number resource management – including IPv4 transfers and IPv6 adoption, and current ARIN policy developments. Then spend some time networking with fellow attendees over lunch. **** ** ** Kick off the afternoon with tutorials from ARIN on RPKI, NANOG on DNSSEC, and additional NANOG educational content. NANOG will host a session on its role in the network operator community and ways to engage with and take part in its lively professional community of Internet engineers and architects. The day will conclude with an Open Microphone / Q&A session, followed by a networking Happy Hour where conversation can continue in a more relaxed setting. **** ** ** Attendees who complete a short survey about the event will be eligible to win one of two $100 Amazon gift cards. *Register today*<https://www.arin.net/participate/meetings/on-the-road/portland.html> !**** ** ** Please feel free to forward this invitation to friends and colleagues who may be interested in attending this ARIN + NANOG on the Road event. Contact us at nanog-support(a)nanog.org if you have any questions. **** ** ** Regards, **** ** ** ARIN + NANOG on the Road Team**** American Registry for Internet Numbers (ARIN) <https://www.arin.net/>**** North American Network Operators Group (NANOG) <http://www.nanog.org/> -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Feds snooping and FCC 477 and FCC 499 forms and 214 licenses
by sam＠wwcandt.com 01 Aug '13

01 Aug '13

Good Morning Nanog List, I'm not normally the tinfoil hat type howerver I do want to know other operators opinions on the FCC 477, 499 and the 214 license requirements in light of the recent revealations. Do you think the info is actually for the stated purposes? I'm trying hard not to become a member of the tin foil club but it's getting hard each day. Thanks. Sam * Moderators please delete the copy of this I sent from sam(a)circlenet.us.

1 0

FCC 477 and FCC499 forms
by Sam Moats 01 Aug '13

01 Aug '13

Good Morning Nanog List, I'm not normally the tinfoil hat type howerver I do want to know other operators opinions on the FCC 477, 499 and the 214 license requirements in light of the recent revealations. Do you think the info is actually for the stated purposes? I'm trying hard not to become a member of the tin foil club but it's getting hard each day. Thanks. Sam

1 1

Re: ARIN WHOIS for leads
by Joel M Snyder 01 Aug '13

01 Aug '13

>What about the 2am phone calls from the guy, who did a >nslookup on a website, and then whois on the ip, >who is calling to say his porn site >is partially not working and he's pissed. No amount of changing contacts is going to solve this type of problem. We routinely get support calls, sometimes even in the emergency support line, from people who are pissed off at an ISP 2,000 miles away called "Opus" something-or-another-but-not-Opus-One. Apparently their dialup service is not so hot anymore and when it doesn't work, the one-step-down-from-AOL customer base they attract types "opus" into their browser and then calls whatever phone number comes to the top of whatever search engine their browser vendor chose for them. Changing the nature of WHOIS isn't going to keep the stupid from doing stupid things. However, it might make life harder for the not-stupid trying to solve real problems. Honestly, this seems to me like a non-problem. I liken it to the hypersensitivity of some people to spam, where if they get 1 message through their filters it's somehow a major crisis. Maybe our ACD, which requires the clue-challenged to be able to spell the first or last name of the person their calling, or perhaps read the extension number from a directory listing, screens the worst of the worst out from us... I also don't see the problem of cold calling when it's obviously for a service or product that I am interested in, just as I don't see the problem of cold snail-mailing for the same services. I'm in business, and I expect other businesses to try and market to me. I don't want to hear from window, insurance, and other crap sellers, but if a Cisco reseller or bandwidth seller wants to make contact and say "how can I help you?" that doesn't seem out of line to me. Only in the world of email do we (justifiably) get all weirded out by the prospect of unsolicited sales pitches. It seems to me that if you don't want people to call you, don't give out your phone number (or give out a phone number that makes it hard for anyone but a real person who really wants to talk to you to get to you). How did our little capitalist industry suddenly become a "you must have permission to contact me by any means no matter what" industry? jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

4 3