March 2014 - Test - lists.nanog.org

misunderstanding scale (was: Ipv4 end, its fake.)
by TJ 31 Mar '14

31 Mar '14

Millions of IPs don't matter in the face of X billions of people, and XX-XXX billions of devices - and this is just the near term estimate. (And don't forget utilization efficiency - Millions of IPs is not millions of customers served.) Do IPv6. /TJ On Mar 22, 2014 3:09 AM, "Bryan Socha" <bryan(a)digitalocean.com> wrote: > > As someone growing in the end of ipv4, its all fake. Sure, the rirs will > run out, but that's boring. Don't believe the fake auction sites. > Fair price of IP at the end is $1 for bad Rep $2 for barely used, $3 for no > spam and $4 for legacy. Stop the inflation. Millions of IPS exist, > there is no shortage and don't lie for rirs with IPS left.

70 316

Re: why IPv6 isn't ready for prime time, SMTP edition
by Larry Sheldon 31 Mar '14

31 Mar '14

On 3/30/2014 11:17 PM, Patrick W. Gilmore wrote: > On Mar 30, 2014, at 16:40 , Måns Nilsson <mansaxel(a)besserwisser.org> wrote: >> Subject: Re: why IPv6 isn't ready for prime time, SMTP edition Date: Sat, Mar 29, 2014 at 11:06:11AM -0400 Quoting Patrick W. Gilmore (patrick(a)ianai.net) >>>> On Mar 29, 2014, at 3:15, Måns Nilsson <mansaxel(a)besserwisser.org> wrote: >>>> Quoting John R. Levine (johnl(a)iecc.com) >>>>>> Ergo, ad hominem. Please quit doing that. >>>>>> As a side note I happen to run my own mail server without spam filters >>>>>> -- it works for me. I might not be the norm, but then again, is there [snip] > However, I think you'll find your definition of "undue" and most of the rest of the Internet's is vastly different. > Seems like I got chased off of NANOG for less, in years gone by....... -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Can I borrow some MTA address traces?
by John R. Levine 30 Mar '14

30 Mar '14

As noted about a zillion messages ago, one of the concerns about IPv6 mail is whether DNSBLs will be workable, with one of the questions being whether the lookups will blow away DNS caches. As far as I can tell, there is basically no research on DNS cache behavior other than a few very old papers that said for normal loads, a reasonable sized cache is big enough to work. For the DNSBL stuff I'm doing some simulations, which need data to drive the lookups. The data is really simple, a sequence of pairs: [ IP address, timestamp ] IPv4 traces are currently more useful than IPv6, since v6 doesn't have the botnet traffic that makes the DNSBL lookups interesting. Traces from medium sized systems, say a million connections a day, would be great. If you consider the IP addresses confidential you can hash them, although real ones would be better so I can test tweaks that treat known high volume senders (gmail etc.) differently. Thanks. Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. http://jl.ly PS: I hope it's OK if we take a break from reinventing patented anti-spam techniques that have failed repeatedly before to talk about something else.

1 0

Re: why IPv6 isn't ready for prime time, SMTP edition
by Larry Sheldon 30 Mar '14

30 Mar '14

On 3/29/2014 12:59 PM, Jimmy Hess wrote: > *Postage schemes as proposed with end users email clients 'attaching > postage' simply not workable Not in IPv4. Not in IPv6. Not in IPng > Not in any conceivable future version of IP. And I insist that we are all wasting our time trying to make SMTP and its supporting protocols (and their kin under IPX/SPC, Sperrylink, UUCP, et alia) are not at the transport layer and nothing at the transport layer is responsible for nor rich with solutions for their problems. IF the overriding problem is due to an inability to identify and authenticate the identification of the sender, then let us work on establishing a protocol for identifying the sender and authenticating the identification of the sender and permitting the receiver to accept or deny acceptance of traffic by reference to that identification. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

4 3

Re: Cisco Security Advisory
by Scott Weeks 29 Mar '14

29 Mar '14

--- rdrake(a)direcpath.com wrote: From: Robert Drake <rdrake(a)direcpath.com> because seeing 5 advisories at once is like a giant line break in NANOG discussions, so it's harder to tune it out and skip the emails :) They could Bcc: all the lists they are sending to in one set of emails so the message-id is the same, then you could filter duplicates at least. Or they could do the summary email like you guys want, whichever makes people happy. :) ------------------------------------------------------------ You got 5 (actually 6 this time) perhaps because you're only on NANOG. I got over 30 this time and once when there were 9 vulnerabilities I got almost 50 emails from cisco. scott

3 2

Re: Cisco Security Advisory
by Larry Sheldon 29 Mar '14

29 Mar '14

On 3/29/2014 12:43 AM, Mark Tinka wrote: > But clearly, this is one of those issues where you have a > good amount of folk on either side of the fence. I wonder what the ratio of "I don't want that info here" (for various values of "here") to "Geeeeeez! WHY didn't somebody tell me" is. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Re: Cisco Security Advisory
by Scott Weeks 28 Mar '14

28 Mar '14

On 3/27/2014 7:44 PM, Alexander Neilson wrote: > I wonder if they should be invited to only post a single message with > the titles and links to the alerts so that people can follow it up. ---------------------------------------------------------- If a person is on multiple of *NOG mailing lists a lot of these're received. For example, I got well over 30 of them this round. It'd be nice to get something brief like this: ---------------------------------------------- The Semiannual Cisco IOS Software Security Advisory has been released. For information please goto this URL: http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html Advisory titles: - Session Initiation Protocol Denial of Service Vulnerability - Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Uplinks Denial of Service Vulnerability - Internet Key Exchange Version 2 Denial of Service Vulnerability - Network Address Translation Vulnerabilities - SSL VPN Denial of Service Vulnerability - Crafted IPv6 Packet Denial of Service Vulnerability ----------------------------------------------- Not everyone uses cisco and not everyone needs to see every vulnerability detail email multiple times. Imagine if all vendors started doing what cisco is doing. :-( scott

2 1

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)
by Randy Bush 28 Mar '14

28 Mar '14

john, i think your attemt to move the discussion to the arin ppml list exemplifies one core of the problem. this is not about address policy, but arin thinks of itelf as a regulator not a registry. contrast with the ripe community and the ncc, which is not nirvana but is a hell of a lot better. among other key differences, the ncc is engaged with the community through technical and business working groups. e.g. the database working group covers what you think of as whois and the routing registry. the wg developed the darned irr definition and continues to evolve it. consequence? the irr is actively used in two regions in the world, europe and japan (which likes anything ocd:-). the routing wg works with the ops to develop routing technology such as route flap damping. there is a reason that serious ops attend ripe meetings. yes, a whole lot of folk with enable are engaged. for years there has been a wg on the global layer nine issues. the dns wg deals with reverse delegation, root server ops, etc. and guess what, all the dns heavy techs and ops are engaged. there is a wg for discussing what services the ncc offers. the recent simplification and opening of services to legacy and PI holders happened in the ncc services wg, it was about services not addressing policy. and this is aside from daniel's global measurement empire. not sure it is a registry's job to do this, but it is a serious contribution to the internet. the ncc is engaged with its community on the subhects that actually interest operators and affect our daily lives. there is nothing of interest at an arin meeting, a bunch of junior wannabe regulators and vigilantes making an embarrassing mess. i've even taken to skipping nanog, if ras talks i can watch the recording. all the cool kids will be in warsaw. ops vote with our feet. randy

12 19

Re: why IPv6 isn't ready for prime time
by William Herrin 28 Mar '14

28 Mar '14

Apropos nothing, I tried to bring up IPv6 with another service provider today (this being the fourth I've attempted with only one success) but all I'm getting is: %BGP-3-NOTIFICATION: sent to neighbor xxxx:xxxx:1000:A000::6 2/7 (unsupported/disjoint capability) 0 bytes :( -Bill -- William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004

1 0

BGP Update Report
by cidr-report＠potaroo.net 28 Mar '14

28 Mar '14

BGP Update Report Interval: 20-Mar-14 -to- 27-Mar-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4837 41011 1.4% 60.8 -- CHINA169-BACKBONE CNCGROUP China169 Backbone 2 - AS8402 35505 1.2% 18.7 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 35504 1.2% 22.6 -- BSNL-NIB National Internet Backbone 4 - AS29571 31812 1.1% 170.1 -- CITelecom-AS 5 - AS25184 28844 1.0% 225.3 -- AFRANET AFRANET Co. Tehran, Iran 6 - AS45169 24876 0.9% 1658.4 -- GLOBAL-DESCON-AS-AP Descon Limited 7 - AS28573 24765 0.9% 6.7 -- NET Serviços de Comunicação S.A. 8 - AS13118 22468 0.8% 488.4 -- ASN-YARTELECOM OJSC Rostelecom 9 - AS41691 20828 0.7% 867.8 -- SUMTEL-AS-RIPE Summa Telecom LLC 10 - AS7552 20276 0.7% 17.6 -- VIETEL-AS-AP Viettel Corporation 11 - AS50710 19542 0.7% 86.9 -- EARTHLINK-AS EarthLink Ltd. Communications&Internet Services 12 - AS36998 18568 0.6% 11.3 -- SDN-MOBITEL 13 - AS8151 18305 0.6% 13.0 -- Uninet S.A. de C.V. 14 - AS35819 18279 0.6% 36.0 -- MOBILY-AS Etihad Etisalat Company (Mobily) 15 - AS17974 18025 0.6% 6.5 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 16 - AS48159 16354 0.6% 89.9 -- TIC-AS Telecommunication Infrastructure Company 17 - AS4538 16280 0.6% 30.4 -- ERX-CERNET-BKB China Education and Research Network Center 18 - AS17557 15697 0.5% 130.8 -- PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 19 - AS9808 15203 0.5% 15.7 -- CMNET-GD Guangdong Mobile Communication Co.Ltd. 20 - AS45899 14515 0.5% 39.3 -- VNPT-AS-VN VNPT Corp TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS20450 14151 0.5% 7075.5 -- THL16-ASN - Trojan Hosting, LLC. 2 - AS54465 8022 0.3% 2674.0 -- QPM-AS-1 - QuickPlay Media Inc. 3 - AS45169 24876 0.9% 1658.4 -- GLOBAL-DESCON-AS-AP Descon Limited 4 - AS60345 995 0.0% 995.0 -- NBITI-AS Nahjol Balagheh International Research Institution 5 - AS41691 20828 0.7% 867.8 -- SUMTEL-AS-RIPE Summa Telecom LLC 6 - AS14340 10962 0.4% 783.0 -- SALESFORCE - Salesforce.com, Inc. 7 - AS47714 750 0.0% 750.0 -- DRIESSEN-AS Driessen Aerospace Group NV 8 - AS55746 637 0.0% 637.0 -- WITT-AS-AP Western Institute of Technology at Taranaki, 9 - AS16561 3008 0.1% 501.3 -- ARIBANETWORK Ariba Inc. Autonomous System 10 - AS13118 22468 0.8% 488.4 -- ASN-YARTELECOM OJSC Rostelecom 11 - AS11054 11226 0.4% 488.1 -- LIVEPERSON LivePerson, Inc 12 - AS57201 481 0.0% 481.0 -- EDF-AS Estonian Defence Forces 13 - AS47918 934 0.0% 467.0 -- GIGABASE Gigabase ltd 14 - AS22688 897 0.0% 448.5 -- DOLGENCORP - Dollar General Corporation 15 - AS3 441 0.0% 1987.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology 16 - AS27828 6947 0.2% 434.2 -- Universidad Mayor de San Andres 17 - AS35463 850 0.0% 425.0 -- PSM-AS Pulawska Spoldzielnia Mieszkaniowa 18 - AS12131 6528 0.2% 408.0 -- IJ-NET - Internet Junction Corporation 19 - AS62431 403 0.0% 403.0 -- NCSC-IE-AS National Cyber Security Centre 20 - AS45703 767 0.0% 383.5 -- BKPM-AS-ID Badan Koordinasi Penanaman Modal (BKPM) TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/20 22255 0.7% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 89.221.206.0/24 20666 0.7% AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC 3 - 121.52.144.0/24 15121 0.5% AS17557 -- PKTELECOM-AS-PK Pakistan Telecommunication Company Limited AS45773 -- HECPERN-AS-PK PERN AS Content Servie Provider, Islamabad, Pakistan 4 - 192.58.232.0/24 9987 0.3% AS6629 -- NOAA-AS - NOAA 5 - 216.109.107.0/24 9868 0.3% AS11486 -- COLO-PREM-VZB - Verizon Online LLC AS16561 -- ARIBANETWORK Ariba Inc. Autonomous System 6 - 78.109.192.0/20 9246 0.3% AS25184 -- AFRANET AFRANET Co. Tehran, Iran 7 - 66.210.60.0/24 8066 0.3% AS20450 -- THL16-ASN - Trojan Hosting, LLC. 8 - 206.152.15.0/24 8008 0.3% AS54465 -- QPM-AS-1 - QuickPlay Media Inc. 9 - 205.247.12.0/24 7498 0.2% AS6459 -- TRANSBEAM - I-2000, Inc. 10 - 42.83.48.0/20 7412 0.2% AS18135 -- BTV BTV Cable television 11 - 199.187.118.0/24 6233 0.2% AS11054 -- LIVEPERSON LivePerson, Inc 12 - 74.231.237.0/24 6085 0.2% AS20450 -- THL16-ASN - Trojan Hosting, LLC. 13 - 200.23.126.0/24 5524 0.2% AS8151 -- Uninet S.A. de C.V. 14 - 96.43.153.0/24 5520 0.2% AS14340 -- SALESFORCE - Salesforce.com, Inc. AS2687 -- ASATTCA AT&T Global Network Services - AP 15 - 96.43.152.0/24 5420 0.2% AS14340 -- SALESFORCE - Salesforce.com, Inc. AS2687 -- ASATTCA AT&T Global Network Services - AP 16 - 120.28.62.0/24 4634 0.1% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 17 - 222.127.0.0/24 4478 0.1% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 18 - 65.90.49.0/24 4135 0.1% AS3356 -- LEVEL3 Level 3 Communications 19 - 210.90.39.0/24 4014 0.1% AS4766 -- KIXS-AS-KR Korea Telecom 20 - 2.93.235.0/24 2949 0.1% AS8402 -- CORBINA-AS OJSC "Vimpelcom" Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0