December 2015 - Test - lists.nanog.org

Level3 DNS not resolving for our domains
by Otto Monnig 30 Dec '15

30 Dec '15

Is anyone seeing issues with domains not resolving at 4.2.2.[1-6]? All other test DNS servers function correctly. Thank you, -- Otto Monnig CTO KTG IP, LLC

6 8

Fwd: port 123 reflection attacks
by Colin Johnston 30 Dec '15

30 Dec '15

Where does it say we need to contact home cert instead on your website ? verification of what ? HSOFT ranges have been compromised by NTP reflection attacks and the NTP servers hosted by HSOFT need to have a NTP update. This has been discussed on NANOG and I also sent information in Chinese to aid debug as well. Have had no response from HSOFT… Colin > Begin forwarded message: > > From: "cncertcc" <cncert(a)cert.org.cn> > Subject: Re:Fwd: port 123 reflection attacks > Date: 30 December 2015 at 08:15:28 GMT > To: "Colin Johnston" <colinj(a)gt86car.org.uk> > > Greetings, > Please forward the case to the corresponding CERT you are located in first to have it transferred to CNCERT after verification. Thanks for your understanding. > > > > > > > ------------------ > > Thanks and Regards > CNCERT/CC > -------------------------------------------------------- > 国家互联网应急中心 > National Computer network Emergency Response technical Team / Coordination Center of China > Tel:+8610-82991000 fax:+8610-82990375 > email: cncert(a)cert.org.cn website:www.cert.org.cn > Address: A3 Yumin Road, Chaoyang District, Beijing,100029, China > -------------------------------------------------------- > > > > ------------------ Original ------------------ > From: "Colin Johnston"<colinj(a)gt86car.org.uk>; > Date: Fri, Dec 25, 2015 07:31 PM > To: "cncertcc"<cncert(a)cert.org.cn>; > Cc: "Colin Johnston"<colinj(a)gt86car.org.uk>; > Subject: Fwd: port 123 reflection attacks > > > >> Begin forwarded message: >> >> From: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >> Subject: Fwd: port 123 reflection attacks >> Date: 25 December 2015 at 11:27:02 GMT >> To: oversea-support(a)cnnic.cn <mailto:oversea-support@cnnic.cn>, bdservice(a)cnnic.cn <mailto:bdservice@cnnic.cn> >> Cc: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >> >> Can you investigate with priority please >> >> Colin >> >> >>> Begin forwarded message: >>> >>> From: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >>> Subject: port 123 reflection attacks >>> Date: 25 December 2015 at 11:19:26 GMT >>> To: 16036260(a)qq.com <mailto:16036260@qq.com>, ipas(a)cnnic.cn <mailto:ipas@cnnic.cn> >>> Cc: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >>> >>> please stop the port 123 reflection attacks from 115.47.24.220 >>> >>> Colin >>> >> >

3 2

Re: announcement of freerouter
by Mike - st257 30 Dec '15

30 Dec '15

> Date: Thu, 24 Dec 2015 22:23:24 -0600 > From: Josh Reynolds <josh(a)kyneticwifi.com> > To: mate csaba <matecs(a)niif.hu> > Cc: cs(a)nop.hu, NANOG <nanog(a)nanog.org> > Subject: Re: announcement of freerouter > Message-ID: > <CAC6=tfb4=DmpXBgG159NH-p+uTxa+uwf3vOrB= > rsS8T6YQ7Fsg(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > RouterOS is an existing product by MikroTik. > Mate Csaba's message had nothing to do with MikroTik RouterOS (from Latvia, which doesn't include IS-IS support). And Mikrotik RouterOS isn't free. ;-) Why was this response about RouterOS? (Am I missing something?) The posted presentations/slides touch upon the feature set of FreeRtr (which is similiar to MT RouterOS, but which many production-ready Network OSes have). http://freerouter.nop.hu/present.html And CLI output examples: http://freerouter.nop.hu/present.html > On Dec 24, 2015 9:46 PM, "mate csaba" <matecs(a)niif.hu> wrote: > > > hi, > > pleased to announce a stable release of freerouter. > Neat. > > this is a routing daemon that does packet handling itself > > so it can do bridging, routing ipv4/ipv6 unicast/multicast, > > mpls, vpls, evpn, mpls te, mldp, segment routing, and so on... > > speaks a lot of routing protocols like rip, ospf, isis, eigrp, bgp, > > babel... > > does a lot of tunneling like gre, ipip, ipsec, l2tp, geneve, vxlan, > > nvgre... > > have a lot of built in servers like dns, http(s), smtp, pop3, telnet, > > tacacs, radius, ssh... > > it can start external images which could be connected, so various lab > > topolgies can be easily created. > > our nren uses if as primary fullbgp rr for more than a year for about > > hundred routers. > > here is the homepage: http://freerouter.nop.hu/ > > feel free to try it out and send suggestions/bug reports...:) > > thanks in advance, > > csaba mate > > niif/hungarnet > -- ---~~.~~--- Mike // SilverTip257 //

13 15

ridiculous problems getting an ATT circuit port mode changed
by Joe Maimon 30 Dec '15

30 Dec '15

Apparently there is still raison d'etre for everyone not a giant telco. We placed the circuit with tagging expected for the service vlan. We got it delivered without. We requested it be changed. Apparently that takes a change order, which when it is finally filed, takes 7-10BD to complete. However, there is another complication. The vlan has to be different or the order cant be accepted, since the vlan is in use. Options presented range from just reconfigure all your equipment, use it without the tag, reorder the UNI and expect at least a week of downtime. This when we all know, and the TAC group flat out confirmed, the change is a push of button, a flick of a switch, a twist of a knob, etc, etc.. I view circuits with such change difficulties as liabilities. Does anyone know anybody over in ATT land who can sort through this nonsense? Thanks and enjoy the holidays! Joe

2 1

list of .org domain names?
by Ryan Finnesey 30 Dec '15

30 Dec '15

Is it possible to get a complete list of .org domain names that have been registered? Cheers Ryan

2 1

cloudflare contact
by William Waites 29 Dec '15

29 Dec '15

Could someone from Cloudflare's operations please contact me off-list? Thanks, -w -- William Waites <wwaites(a)tardis.ed.ac.uk> | School of Informatics https://tardis.ed.ac.uk/~wwaites/ | University of Edinburgh https://hubs.net.uk/ | HUBS AS60241 The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

1and1 Clueful Email / DNS Admin Requested
by Jason Hellenthal 29 Dec '15

29 Dec '15

1 0

NSA/GCHQ Exploits Against Juniper Networking Equipment
by Doug Barton 28 Dec '15

28 Dec '15

The Intercept just published a 2011 GCHQ document outlining their exploit capabilities against Juniper networking equipment, including routers and NetScreen firewalls as part of this article. https://www.schneier.com/blog/archives/2015/12/nsagchq_exploit.html

2 1

Survey on Middlebox modeling and troubleshooting
by Zhang, Ying 28 Dec '15

28 Dec '15

Dear All, We are researchers in HP Labs and Duke university. We are currently working on a project related to Middlebox modeling and troubleshooting. We are currently conducting a survey and gathering feedback from operators. Can you help us by providing some answers? Please feel free to email us if you have any additional suggestions. https://www.surveymonkey.com/r/5SFP6G8 Thanks! -Ying

1 0

Re: Broadband Router Comparisons
by Scott Weeks 28 Dec '15

28 Dec '15

--------------- >https://www.kickstarter.com/projects/shieldapparel/shield-the-world-s-first… https://www.etsy.com/listing/55473505/knit-tinfoil-hat-made-to-order -------------------------- There is just no end to stoopid. There's apparently an infinite quantity available. scott

1 0