December 2015 - Test - lists.nanog.org

Re: Whatsapp issue ?
by Dovid Bender 31 Dec '15

31 Dec '15

Just came up here in NJ. ------Original Message------ From: Marco Paesani Sender: NANOG To: nanog ReplyTo: marco(a)paesani.it Subject: Whatsapp issue ? Sent: Dec 31, 2015 11:46 Hi, here in Italy WA don't working, anybody know why ? Thanks ! Ciao, -- Marco Paesani MPAE Srl Skype: mpaesani Mobile: +39 348 6019349 Success depends on the right choice ! Email: marco(a)paesani.it Regards, Dovid

2 1

interconnection costs
by Reza Motamedi 31 Dec '15

31 Dec '15

Hi NANOG We are a group of researchers and our focus is on the economy of interconnection in the Internet. My question is mainly about the various costs of an AS establishing a connection with another AS, including the costs charged by the colocation providers. I am familiar with most of the connection options such as public peering on IXP, and private peering through xconnects. My understanding is that in addition to the cost of transit that the smaller AS pays to the larger AS, in the former you pay a monthly fee to establish a link to the switching fabric and then you can connect to as many ASes that are member in the IXP, and in the later you need to pay for as many xconnects that you need to connect to as many ASes that you plan to peer with. Obviously in both cases there is the cost of being in the colocation and renting a rack or whatever. What are the other costs involved? How should the AS reach the colocation center in the first place? I don't think every network can dig a hole an lay cables. Who should they pay to get from one PoP to another? Do ASes have to pay for xconnect to connect their PoP in a data center to the rest of their network? I think there is no single answer as different businesses may have different pricing models. I hope the discussion can help me understand the whole ecosystem a little bit better. Best Regards Reza Motamedi (R.M) Graduate Research Fellow Oregon Network Research Group Computer and Information Science University of Oregon

12 22

Level3 DNS not resolving for our domains
by Otto Monnig 31 Dec '15

31 Dec '15

Is anyone seeing issues with domains not resolving at 4.2.2.[1-6]? All other test DNS servers function correctly. Thank you, -- Otto Monnig CTO KTG IP, LLC

6 8

Fwd: port 123 reflection attacks
by Colin Johnston 31 Dec '15

31 Dec '15

Where does it say we need to contact home cert instead on your website ? verification of what ? HSOFT ranges have been compromised by NTP reflection attacks and the NTP servers hosted by HSOFT need to have a NTP update. This has been discussed on NANOG and I also sent information in Chinese to aid debug as well. Have had no response from HSOFT… Colin > Begin forwarded message: > > From: "cncertcc" <cncert(a)cert.org.cn> > Subject: Re:Fwd: port 123 reflection attacks > Date: 30 December 2015 at 08:15:28 GMT > To: "Colin Johnston" <colinj(a)gt86car.org.uk> > > Greetings, > Please forward the case to the corresponding CERT you are located in first to have it transferred to CNCERT after verification. Thanks for your understanding. > > > > > > > ------------------ > > Thanks and Regards > CNCERT/CC > -------------------------------------------------------- > 国家互联网应急中心 > National Computer network Emergency Response technical Team / Coordination Center of China > Tel:+8610-82991000 fax:+8610-82990375 > email: cncert(a)cert.org.cn website:www.cert.org.cn > Address: A3 Yumin Road, Chaoyang District, Beijing,100029, China > -------------------------------------------------------- > > > > ------------------ Original ------------------ > From: "Colin Johnston"<colinj(a)gt86car.org.uk>; > Date: Fri, Dec 25, 2015 07:31 PM > To: "cncertcc"<cncert(a)cert.org.cn>; > Cc: "Colin Johnston"<colinj(a)gt86car.org.uk>; > Subject: Fwd: port 123 reflection attacks > > > >> Begin forwarded message: >> >> From: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >> Subject: Fwd: port 123 reflection attacks >> Date: 25 December 2015 at 11:27:02 GMT >> To: oversea-support(a)cnnic.cn <mailto:oversea-support@cnnic.cn>, bdservice(a)cnnic.cn <mailto:bdservice@cnnic.cn> >> Cc: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >> >> Can you investigate with priority please >> >> Colin >> >> >>> Begin forwarded message: >>> >>> From: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >>> Subject: port 123 reflection attacks >>> Date: 25 December 2015 at 11:19:26 GMT >>> To: 16036260(a)qq.com <mailto:16036260@qq.com>, ipas(a)cnnic.cn <mailto:ipas@cnnic.cn> >>> Cc: Colin Johnston <colinj(a)gt86car.org.uk <mailto:colinj@gt86car.org.uk>> >>> >>> please stop the port 123 reflection attacks from 115.47.24.220 >>> >>> Colin >>> >> >

3 2

Re: announcement of freerouter
by Mike - st257 31 Dec '15

31 Dec '15

> Date: Thu, 24 Dec 2015 22:23:24 -0600 > From: Josh Reynolds <josh(a)kyneticwifi.com> > To: mate csaba <matecs(a)niif.hu> > Cc: cs(a)nop.hu, NANOG <nanog(a)nanog.org> > Subject: Re: announcement of freerouter > Message-ID: > <CAC6=tfb4=DmpXBgG159NH-p+uTxa+uwf3vOrB= > rsS8T6YQ7Fsg(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > RouterOS is an existing product by MikroTik. > Mate Csaba's message had nothing to do with MikroTik RouterOS (from Latvia, which doesn't include IS-IS support). And Mikrotik RouterOS isn't free. ;-) Why was this response about RouterOS? (Am I missing something?) The posted presentations/slides touch upon the feature set of FreeRtr (which is similiar to MT RouterOS, but which many production-ready Network OSes have). http://freerouter.nop.hu/present.html And CLI output examples: http://freerouter.nop.hu/present.html > On Dec 24, 2015 9:46 PM, "mate csaba" <matecs(a)niif.hu> wrote: > > > hi, > > pleased to announce a stable release of freerouter. > Neat. > > this is a routing daemon that does packet handling itself > > so it can do bridging, routing ipv4/ipv6 unicast/multicast, > > mpls, vpls, evpn, mpls te, mldp, segment routing, and so on... > > speaks a lot of routing protocols like rip, ospf, isis, eigrp, bgp, > > babel... > > does a lot of tunneling like gre, ipip, ipsec, l2tp, geneve, vxlan, > > nvgre... > > have a lot of built in servers like dns, http(s), smtp, pop3, telnet, > > tacacs, radius, ssh... > > it can start external images which could be connected, so various lab > > topolgies can be easily created. > > our nren uses if as primary fullbgp rr for more than a year for about > > hundred routers. > > here is the homepage: http://freerouter.nop.hu/ > > feel free to try it out and send suggestions/bug reports...:) > > thanks in advance, > > csaba mate > > niif/hungarnet > -- ---~~.~~--- Mike // SilverTip257 //

13 15

ridiculous problems getting an ATT circuit port mode changed
by Joe Maimon 31 Dec '15

31 Dec '15

Apparently there is still raison d'etre for everyone not a giant telco. We placed the circuit with tagging expected for the service vlan. We got it delivered without. We requested it be changed. Apparently that takes a change order, which when it is finally filed, takes 7-10BD to complete. However, there is another complication. The vlan has to be different or the order cant be accepted, since the vlan is in use. Options presented range from just reconfigure all your equipment, use it without the tag, reorder the UNI and expect at least a week of downtime. This when we all know, and the TAC group flat out confirmed, the change is a push of button, a flick of a switch, a twist of a knob, etc, etc.. I view circuits with such change difficulties as liabilities. Does anyone know anybody over in ATT land who can sort through this nonsense? Thanks and enjoy the holidays! Joe

2 1

list of .org domain names?
by Ryan Finnesey 30 Dec '15

30 Dec '15

Is it possible to get a complete list of .org domain names that have been registered? Cheers Ryan

2 1

cloudflare contact
by William Waites 30 Dec '15

30 Dec '15

Could someone from Cloudflare's operations please contact me off-list? Thanks, -w -- William Waites <wwaites(a)tardis.ed.ac.uk> | School of Informatics https://tardis.ed.ac.uk/~wwaites/ | University of Edinburgh https://hubs.net.uk/ | HUBS AS60241 The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

1and1 Clueful Email / DNS Admin Requested
by Jason Hellenthal 29 Dec '15

29 Dec '15

1 0

NSA/GCHQ Exploits Against Juniper Networking Equipment
by Doug Barton 28 Dec '15

28 Dec '15

The Intercept just published a 2011 GCHQ document outlining their exploit capabilities against Juniper networking equipment, including routers and NetScreen firewalls as part of this article. https://www.schneier.com/blog/archives/2015/12/nsagchq_exploit.html

2 1