July 2015 - Test - lists.nanog.org

Level3 routing issues
by Matt Hoppes 29 Jul '15

29 Jul '15

Is anyone seeing packet loss or routing issues on the Level3 network on the east coast right now?

4 4

DOCSIS CMTS Systems
by Colton Conor 29 Jul '15

29 Jul '15

We are servicing more MDU customers that have older buildings. There is no CAT5E installed, so extremely old phone cable or coaxial TV cable seems to be our only inside wire options. There is no easy and inexpensive way to run new cable, so we must deal with what is available. We are very familiar with the VDSL2 offerings to be able to use the phone cable, but know nothing about CMTS solutions available.DOCSIS 3.0 capable modems seem to be much more inexpensive than VDSL2 capable modems. We are looking for recommendations on small CMTS systems for MDU's. I would expect we would want at least DOCSIS 3.0 capabilities, and I assume DOCSIS 3.1 is too new and expensive to deploy on a small scale (think 50 to 200 units per property). We would need the full solution to manage and maintain such an offering. I was thinking something like this might be a good fit: http://www.picodigital.com/product-details.php?ID=miniCMTS200a which is available new for $4500 online. For those of you deploying CMTS systems what do you use and recommend? I am not sure if there is a cable equivalent list to NANOG, but if so please let me know.

5 5

RE: Working with Spamhaus
by Michael J McCafferty 29 Jul '15

29 Jul '15

I know this is going to sound worse than the spirit in which I offer it but... Step one might be to adjust the attitude from "Deal with these people" to something along the lines of "how might we best resolve the issue". No matter who you deal with, you will get much further with a good humble attitude rather than blame. It is my experience that if they list more than a very specific range of IP addresses on your network, you have a real problem. If you have a spammer at the top and bottom of a CIDR block then they may list the range, but I have had them lost two small ranges in the same /24 before... so I know they have very good specificity. I am sorry I can not offer you any specific steps or contact information to help you expedite the resolution, but I hope you will find some value in this advice. Perhaps, if your network is small and you control all your mail servers and you really are clean, you can configure thrm to relay through a smart host or SendGrid or etc. Good luck,Mike Sent from my Verizon Wireless 4G LTE smartphone -------- Original message -------- From: Bryan Tong <contact(a)nullivex.com> Date: 07/28/2015 8:06 PM (GMT-07:00) To: nanog(a)nanog.org Subject: Working with Spamhaus Hello All, SpamHaus has done us the favor of blacklisting all of our prefixes due to the issues with handful of IPs from customers we have removed from our network. They are now being unresponsive on helping us get these listings removed and we have a lot of legitimate customers who are no longer able to send email. If anyone has any advice on how to deal with these people. Please let me know here or off list. Thanks!

3 2

Re: Windows 10 Release
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 07:32, Larry Sheldon wrote: > On 7/29/2015 07:20, Scott Helms wrote: >> It's downloading for me right now, though I did reserve my slot. > > When I checked a few minutes ago it said my PC had passed the tests--now > it says it is downloading. > > Speed and responsiveness "feels" normal. Screen popped up just now--said something to effect of "Now or later?" I said later (haven't been to been in a while, have three other machines to coordinate with). It offered me later today, tomorrow, or the next day! This may hurt after all. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Windows 10 Release
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 07:20, Scott Helms wrote: > It's downloading for me right now, though I did reserve my slot. When I checked a few minutes ago it said my PC had passed the tests--now it says it is downloading. Speed and responsiveness "feels" normal. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Windows 10 Release
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 06:58, STARNES, CURTIS wrote: > I see that everyone can download Windows 10 this morning! > There goes my bandwidth. Just checked this PC--apparently I already have it and am "good to go". I was expecting an email or something. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Windows 10 Release
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 06:58, STARNES, CURTIS wrote: > I see that everyone can download Windows 10 this morning! > There goes my bandwidth. One of us does not understand how "they" said it was going to be done. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Working with Spamhaus
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 00:58, Larry Sheldon wrote: > On 7/29/2015 00:37, Matt Palmer wrote: > >> I suspect that http://www.spamhaus.org/query/ip/199.87.233.245 may be >> part >> of it (although it indicates a /21 blocked, not a /17). > > And the removal instructions for that range (SBL) seems crystal clear to > me, but long experience teaches that what is crystal clear to me is > often to clear at all to spammers. I am surprised that I have not been banned again for talking about spam here, so I'll leave you with this (from the information Matt provided): http://www.spamhaus.org/sbl/query/SBL263089 Has these notations: SBL263068 104.224.252.0/27 esited.com 2015-07-25 Spamming for fake products SBL260293 104.224.197.94 whdot.com 2015-06-25 Spam source @104.224.197.94 SBL257796 104.224.205.144/28 whdot.com 2015-05-27 brand-fraud websites hosted on hacked subdomain SBL253760 104.201.2.88 zeroddos.com 2015-04-16 Blackhat SEO spammer hosting @104.201.2.88 SBL249474 104.232.128.0/19 esited.com 2015-03-09 snowshoe range - CLOUDDDOS TECHNOLOGY CO.,LIMITED (AS22552) SBL244070 104.221.128.0/17 esited.com 2015-01-05 snowshoe range - eSited Solutions SBL244052 104.195.0.0/18 esited.com 2015-01-05 snowshoe range - eSited Solutions (NL-1) SBL241541 104.201.0.0/18 esited.com 2014-12-02 Kuang Ren snowshoe range - ZERO DDOS LLC SBL241495 69.87.192.0/20 d esited.com 2014-12-01 Kuang Ren snowshoe range - eSited Solutions (NL-1) SBL241492 23.249.176.0/20 esited.com 2014-12-01 Kuang Ren snowshoe range - GCHAO LLC SBL241491 66.254.160.0/19 esited.com 2014-12-01 Kuang Ren snowshoe range SBL241489 162.247.232.0/21 esited.com 2014-12-01 Kuang Ren snowshoe range SBL234439 104.167.64.0/19 esited.com 2014-09-14 spam emitters - ZERO DDOS LLC SBL226660 199.87.239.226/31 esited.com 2014-06-27 DNS for spam domains SBL223484 167.88.192.0/20 esited.com 2014-05-26 spam emitters - ZERO DDOS LLC SBL207432 199.87.233.92 esited.com 2013-12-12 spam site - 78high.ss99g.com SBL207431 199.87.239.226 esited.com 2013-12-12 spam redirector at zjjj58.com / s9gg.com Removal Procedure To have record SBL263089 (199.87.232.0/21) removed from the SBL, the Abuse/Security representative of esited.com (or the Internet Service Provider responsible for supplying connectivity to 199.87.232.0/21) needs to contact the SBL Team by email (use this link) to explain how the abuse problem has been terminated (we need to know exactly how the issue has been dealt with and that this abuse problem is fully terminated). If the abuse problem that caused this listing has been terminated we will normally remove the listing from the SBL without delay. It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the email Subject: If you are a representative of esited.com, you also need to see: Current Live esited.com SBL Listings -- sed quis custodiet ipsos custodes? (Juvenal)

2 1

Re: Working with Spamhaus
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/29/2015 00:37, Matt Palmer wrote: > I suspect that http://www.spamhaus.org/query/ip/199.87.233.245 may be part > of it (although it indicates a /21 blocked, not a /17). And the removal instructions for that range (SBL) seems crystal clear to me, but long experience teaches that what is crystal clear to me is often to clear at all to spammers. What is it about Colorado? -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Re: Working with Spamhaus
by Larry Sheldon 29 Jul '15

29 Jul '15

On 7/28/2015 22:06, Bryan Tong wrote: > If anyone has any advice on how to deal with these people. Please let me > know here or off list. Based on years of experience, the very best way is "don't". Don't profit from spam, and as a result don't deal with Spamhaus at all. -- sed quis custodiet ipsos custodes? (Juvenal)

3 2