November 2014 - Test - lists.nanog.org

Barracuda Central Contact
by Keefe John 28 Nov '14

28 Nov '14

Is there anyone here from Barracuda that could help with a bulk delisting? We got a new IP block and almost all of the IPs are blacklisted by Barracuda. Thanks! Keefe John

2 2

Incident notification
by Thijs Stuurman 28 Nov '14

28 Nov '14

Nanog list members, I was looking at some statistic and noticed we are sending out a massive amount of SMS messages from our monitoring systems. This left me wondering if there isn't a better (and cheaper) alternative to this, something just as reliant but IP based. We all have smartphones these days anyway. Therefore my question, what are you using to notify admins of incidents? Kind regards / Met vriendelijke groet, Thijs Stuurman [IS Logo] ________________________________ IS Group Wielingenstraat 8 T +31 (0)299 476 185 info(a)is.nl<mailto:info@is.nl> 1441 ZR Purmerend F +31 (0)299 476 288 www.is.nl<http://www.is.nl> ________________________________ IS Group is ISO 9001:2008, ISO/IEC 27001:2005, ISO 20.000-1:2005, ISAE 3402 certified. De datacenters zijn PCI DSS en ISO 14001 compliant.

8 8

Call for input: RPKI Browser
by Matthias Waehlisch 28 Nov '14

28 Nov '14

Hi, we started with the development of a browser that provides a graphical user interface to the objects of the distributed RPKI repository. A very preliminary version is available here http://rpki-browser.realmv6.org/. As we think such a tool could be useful for the community, we are asking for input at a very early stage. Please let me know which features you would like to see in such kind of tool. Some more details are described here https://labs.ripe.net/Members/waehlisch/call-for-input-rpki-browser Thanks matthias -- Matthias Waehlisch . Freie Universitaet Berlin, Inst. fuer Informatik, AG CST . Takustr. 9, D-14195 Berlin, Germany .. mailto:waehlisch@ieee.org .. http://www.inf.fu-berlin.de/~waehl :. Also: http://inet.cpt.haw-hamburg.de .. http://www.link-lab.net

1 0

Re: Anyone else having trouble reaching thepiratebay.se? AS39138
by Javier J 28 Nov '14

28 Nov '14

Looks like its working now (on FIOS anyway) Curious to know why the major networks stopped seeing it yesterday as well. On Thu, Nov 27, 2014 at 12:45 AM, Courtney Smith <courtneysmith(a)comcast.net> wrote: > > > No problem here in Los Angeles either, but seeing a lone route through > Atrato only. > > > > flags destination gateway lpref med aspath origin > > *> 194.71.107.0/24 <> 100 0 3491 5580 39138 22351 2.207 > 51040 i > > * 194.71.107.0/24 <> 100 0 174 5580 39138 22351 > 2.207 51040 i > > > > > > On 11/27/2014 午前 11:24, Tony Wicks wrote: > >> > >> No problem here in New Zealand > >> > >> tonyw@vrhost1-w> show route 194.71.107.0/24 > >> > >> icore1-w.inet.0: 519451 destinations, 525214 routes (519437 active, 14 > >> holddown, 0 hidden) > >> + = Active Route, - = Last Active, * = Both > >> > >> 194.71.107.0/24 *[BGP/170] 10:25:44, MED 0, localpref 90 > >> AS path: 4826 5580 39138 22351 131279 51040 I, > >> validation-state: unverified > >> > to 175.45.102.9 via ae1.526 > >> > > Hopefully the body cones thru this time. The issue isn't city or country > based. In my last post I pointed out the do not announce to peers > community AS5580 was sending to Cogent, Level3 and who knows who else. So > any ASN that is not a customer of Cogent or Level3 wont learn the 5580 path > from them. > > When I checked a few hours ago, Comcast, Centurylink, AT&T, TATA, and > possibly Sprint were not seeing the /24 based on their public looking > glasses or route servers. Have not had time to run bgplay to see if > routeviews data shows how they previously saw the /24 in past 30 days. > Finding the ASN(s) they used to see from would shed light on why they > stopped seeing. Checking bgplay and contacting AS51040 to reach out to > their upstreams is my suggestion.

3 5

MediaTemple/GoDaddy contact?
by Sean Lutner 27 Nov '14

27 Nov '14

Anyone from media temple/godaddy around? I have a site hosted in mediatemple that a customer can't reach and normal support has been not helpful thus far. Off-list is fine, much appreciated. -- Sean

1 0

Anyone else having trouble reaching thepiratebay.se? AS39138
by Javier J 27 Nov '14

27 Nov '14

Name: thepiratebay.se Address: 194.71.107.27 Its reachable from some places and not others. Is it being filtered? Is it being hijacked? Email to them bounced from google apps. Are we now officially living in a police state? mtr dies at hop 2 for me: 2. l100.nwrknj-vfttp-134.verizon-gni.net ( 173.70.26.1 ) Is verizon now censoring the internet for me?

13 17

NTT NOC Contact
by james jones 27 Nov '14

27 Nov '14

Looking to discuss a routing issue going through NTT's link to JP.

4 5

Seeking IPv6 Security Resources
by Chris Grundemann 27 Nov '14

27 Nov '14

Hail NANOG! I am looking for IPv6 security resources to add to: http://www.internetsociety.org/deploy360/ipv6/security/ These could be best current practice documents, case-studies, lessons-learned/issues-found, research/evaluations, RFCs, or anything else focused on IPv6 security really. I'm not requesting that anyone do any new work, just that you point me to solid public documents that already exist. Feel free to share on-list or privately, both documents you may have authored and those you have found helpful. Thanks! ~Chris Note: Not every document shared will get posted to the Deploy360 site. -- @ChrisGrundemann http://chrisgrundemann.com

7 6

Re: Anyone else having trouble reaching thepiratebay.se? AS39138
by Courtney Smith 27 Nov '14

27 Nov '14

> No problem here in Los Angeles either, but seeing a lone route through Atrato only. > > flags destination gateway lpref med aspath origin > *> 194.71.107.0/24 <> 100 0 3491 5580 39138 22351 2.207 51040 i > * 194.71.107.0/24 <> 100 0 174 5580 39138 22351 2.207 51040 i > > > On 11/27/2014 午前 11:24, Tony Wicks wrote: >> >> No problem here in New Zealand >> >> tonyw@vrhost1-w> show route 194.71.107.0/24 >> >> icore1-w.inet.0: 519451 destinations, 525214 routes (519437 active, 14 >> holddown, 0 hidden) >> + = Active Route, - = Last Active, * = Both >> >> 194.71.107.0/24 *[BGP/170] 10:25:44, MED 0, localpref 90 >> AS path: 4826 5580 39138 22351 131279 51040 I, >> validation-state: unverified >> > to 175.45.102.9 via ae1.526 >> Hopefully the body cones thru this time. The issue isn't city or country based. In my last post I pointed out the do not announce to peers community AS5580 was sending to Cogent, Level3 and who knows who else. So any ASN that is not a customer of Cogent or Level3 wont learn the 5580 path from them. When I checked a few hours ago, Comcast, Centurylink, AT&T, TATA, and possibly Sprint were not seeing the /24 based on their public looking glasses or route servers. Have not had time to run bgplay to see if routeviews data shows how they previously saw the /24 in past 30 days. Finding the ASN(s) they used to see from would shed light on why they stopped seeing. Checking bgplay and contacting AS51040 to reach out to their upstreams is my suggestion.

1 0

Re: Anyone else having trouble reaching thepiratebay.se? AS39138
by Courtney Smith 27 Nov '14

27 Nov '14

1 0