January 2014 - Test - lists.nanog.org

Tata communications issues
by Ryan Delgrosso 29 Jan '14

29 Jan '14

I am looking for a clueful networking contact at Tata communications as the IP noc is not being terribly helpful. When i turn up advertisements to you I suddenly become unreachable to large swaths of the Internet. Please contact me off-list Thanks in advance -Ryan

1 0

Re: BGP multihoming with two address spaces
by Jakob Heitz 29 Jan '14

29 Jan '14

It is likely that level3 is aggregating your route, but tw can't. Longest match wins. -- Jakob Heitz. > Date: Wed, 29 Jan 2014 03:32:17 -0800 > From: Joseph Jenkins <joe(a)breathe-underwater.com> > > I am seeking some feedback/help with my BGP configuration. I am peering with two providers level3 and tw. Unfortunately all of my address spaces are preferring the route over tw rather than level3. I have tried Prepending my AS and the carriers AS to the path on the tw side and I see those update being accepted by internet routers, but everyone is still preferring to install the tw routes rather than level3. I was trying to advertise each provider's address space out their connections and then use the other for backup. Now however everything is coming in through tw and no one seems to like level3. > > > Thanks in advance for any guidance or assistance. > > Joe

1 0

Opensource tools for inventory and troubleticketing
by Octavio Alfageme 29 Jan '14

29 Jan '14

Hello everyone, I work for a small service provider starting to offer MPLS services between Europe and several african countries. At present time we own a small Cisco network, but we are starting to need a better inventory of services and network resources and better troubleticketing procedures. We can not afford acquiring complicated and expensive tools at present time.I would be grateful if you could recommend me opensource tools to cover these needs. Thanks in advance Kind regards Octavio

12 12

Re: BCP38.info
by Nick Olsen 29 Jan '14

29 Jan '14

While I see what you're saying. It's still not "Spoofed". The device in question receives the request. And then generates a response with the src address of the egress interface of the device dst to the IP and port that requested it... In this case. The GRE tunnel. Unless I'm missing something here about replying to a request only on the interface which it ingressed the device. And the fact that it's UDP. not TCP. So it's fire-and-forget. Thus, Nothing was ever spoofed. It just simply was returned from a different interface of the same device. From our point of view. We saw the packet of DNS-SRC>OurCustomer. And the other ISP, Which transported the reply. only saw Customer-SRC>DNS-DST. Obviously, This only works because it's UDP. And TCP would be broken. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Jared Mauch" <jared(a)puck.nether.net> Sent: Tuesday, January 28, 2014 3:04 PM To: nick(a)flhsi.com Cc: "David Miller" <dmiller(a)tiggee.com>, Valdis.Kletnieks(a)vt.edu, "NANOG" <nanog(a)nanog.org> Subject: Re: BCP38.info On Jan 28, 2014, at 2:57 PM, Nick Olsen <nick(a)flhsi.com> wrote: > Agreed. > > Our's listed for AS36295 are two customers, Which I know for a fact have their default route set out of a GRE tunnel interface. So while we hand them the request to their interface IP we've assigned them. The response is actually sent, And transported via the customers GRE Tunnel, And HQ's Dedicated internet access where their tunneling to. Making it appear that the reply has been spoofed. When in reality. it was just silent transported to another area before being sent to the src. Sure, but this means that network is allowing the spoofing :) What I did last night was automated comparing the source ASN to the dest ASN mapped to and reported both the IP + ASN on a single line for those that were interested. I'm seeing a lot of other email related to BCP-38 right now on another list, but I wanted to share some data (again) in public regarding the state of network spoofing out there. I'd rather share some data and how others can observe this to determine how we can approach a fix. Someone spoofing your IP address out some other carrier is something you may be interested to know about, even if you have a non-spoofing network. - jared

5 4

Fwd: [afnog] Introducing Southern Africa Network Operators Group - SAFNOG
by Mark Tinka 29 Jan '14

29 Jan '14

FYI. Cheers, Mark.

1 0

ntp defence preso at apricot
by Randy Bush 29 Jan '14

29 Jan '14

i am on the apricot 2014 pc. we do not have a submission on ntp defense. can someone please do one? randy

2 1

BCP38.info
by Jay Ashworth 28 Jan '14

28 Jan '14

Well, coming up with a Mediawiki registration protocol that's hard to spam is apparently more difficult than I'd thought. For the moment, anyone who wants to contribute to the wiki, and to the expanded deployment of BCP38, is invited to toss a note to moderator [at] bcp38.info with a username, and we'll tell it to set you up an account and mail you a password manually. Sorry for the speedbump. I just want to tell you good luck. We're all counting on you. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

8 11

From Outages - AT&T outage in Maryland area
by Jay Ashworth 28 Jan '14

28 Jan '14

Tracking a really world-class AT&T fiber outage in MD: > > Our AT&T service delivery manager just updated the list for us: > > > > · 7 OC192s > > · 7 OC48 > > · 22 Core T3/DS3s > > · 8 additional T3/DS3s [ Apologies for the lack of attribution; they fell apart while I was trying to clip the quote. ] Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 0

Fwd: [afnog] Introducing Southern Africa Network Operators Group - SAFNOG
by Mark Tinka 28 Jan '14

28 Jan '14

Hello all. Kindly see below/attached, per subject. Please distribute within your local/regional communities. Thanks. Cheers, Mark.

1 0

Neighborhood mesh statistical multiplexing
by Jay Ashworth 27 Jan '14

27 Jan '14

I wonder if they'll break BCP 38... or vice-versa... http://arstechnica.com/business/2014/01/bewifi-lets-you-steal-your-neighbor… -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

2 5