October 2017 - Test - lists.nanog.org

Re: RFC 1918 network range choices
by John Kristoff 06 Oct '17

06 Oct '17

On Thu, 5 Oct 2017 15:03:58 +0000 "Jay R. Ashworth" <jra(a)baylink.com> wrote: > The answer seems to be "no, Jon's not answering his email anymore". You might get a better answer over on the internet-history list. Lots of people are still around that could probably shed some light on it. <http://www.postel.org/internet-history/> John

5 4

Charity IT Pulse :) one more sleep till Bytenight Action for Children 2017
by Colin Johnston 05 Oct '17

05 Oct '17

>> >> Dear all, one more sleep until ByteNight events across the UK on Friday night. >> Please donate if you can electronically >> >> >> See mydonate page linked to Byte Night https://mydonate.bt.com/fundraisers/colinjohnston1 <https://mydonate.bt.com/fundraisers/colinjohnston1> >> >> For more information go to www.bytenight.org.uk <http://www.bytenight.org.uk/> or to donate Text Byte17 and the amount to 70070. >> >> In just 1 days time, on Friday 6 October, I am spending one night sleeping rough for Byte Night. Byte Night works to support some of the 83,000 young people who are homeless in the UK. One in four young people who are homeless have been diagnosed with mental health issues and one in five will have self-harmed due to their situation at home. £10 could provide an hour’s support with a mental health practitioner for 1 young people to help them get through their issues. Action for Children has supported many young people to a safe and happy future. Unfortunately, so many more still need our help. You can help support young people across the UK by generously donating to my page >> >> >> >> Yours >> >> Colin Johnston >> >> Colin Johnston <https://myprofile.bt.com/Person.aspx?accountname=IUSER%5C600969844> >> IT Support Senior Professional, Core IT Infrastructure >> BT Technology Service & Operations <https://intra.bt.com/bt/tso/Pages/index.aspx> | Tel: 01313001324 <tel:01313001324> | MyProfile <https://myprofile.bt.com/Person.aspx?accountname=IUSER%5C600969844> | colin.johnstone(a)bt.com <mailto:colin.johnstone@bt.com> | http://fixit.bt.com/ <http://fixit.bt.com/> >> >> BT Group plc Registered office: 81 Newgate Street London EC1A 7AJ. Registered in England and Wales no. 4190816 This electronic message contains information from BT Group plc which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic message in error, please delete it and notify me immediately by telephone or email. >

2 1

Re: Contact at Proofpoint?
by Alexander Maassen 05 Oct '17

05 Oct '17

ecarbonel(a)proofpoint.com Kind regards, Alexander Maassen - Maintainer DroneBL- Peplink Certified Engineer -------- Oorspronkelijk bericht --------Van: John Morrissey <jwm(a)horde.net> Datum: 03-10-17 23:19 (GMT+01:00) Aan: nanog(a)nanog.org Onderwerp: Contact at Proofpoint? Anyone have a clueful contact at Proofpoint? One of our e-mail domains is being blackholed by their products, and we're striking out via normal channels. -john

1 0

BGP hijack: 64.68.207.0/24 from as133955
by Mark Jeftovic 04 Oct '17

04 Oct '17

as133955 is broadcasting bogus BGP announcement for our netblock 64.68.207.0/24 It's in China, and we're trying to contact as24155 but they are also in China and we're just emailing their whois record address. If you're nearby and in a position to block/dampen that might be helpful. Thx - mark -- Mark Jeftovic <markjr(a)easydns.com> Founder & CEO, easyDNS Technologies Inc. http://www.easyDNS.com

4 4

Contact at Proofpoint?
by John Morrissey 04 Oct '17

04 Oct '17

Anyone have a clueful contact at Proofpoint? One of our e-mail domains is being blackholed by their products, and we're striking out via normal channels. -john

2 2

isp/cdn caching
by Aaron Gould 02 Oct '17

02 Oct '17

Hi, I've been aware of a few caching providers for a few years now, but I'm learning of others as time goes on. which makes me curious if there are more springing up and gaining popularity. I'm speaking of ISP-type caching whereas the cache provider sends hardware servers and perhaps a switch to the local ISP to install locally in their network. Can someone please send a simple list of what they know is the current players in this ISP Caching space? I'll list the ones I know about and you please let me know of others. This seems to be an evolving/growing thing and I'm curious of where we are today for significant providers and possibly up-and-coming ones that I should know about. (amazon prime has my wondering also.) Google (GGC) Netflix (OCA) Akamai (AANP) Facebook (FNA) Apple (I heard this isn't isp-located like the others, but unsure) ? others ? ? others ? ? others ? -Aaron Gould

5 4

Long BGP AS paths
by William Herrin 02 Oct '17

02 Oct '17

To the chucklehead who started announcing a 2200+ byte AS path yesterday around 18:27 EDT, I beg of you: STOP. You've triggered a bug in Quagga that's present in all versions released in the last decade. Your announcement causes routers based on Quagga to send a malformed update to their neighbors, collapsing the entire BGP session. Every 30 seconds or so. For everyone else: please consider filtering BGP announcements with stupidly long AS paths. There's no need nor excuse for them to be present in the DFZ and you could have saved me a painful Saturday. Cisco: router bgp XXX bgp maxas-limit 50 Juniper: https://kb.juniper.net/InfoCenter/index?page=content&id=KB29321 Quagga: ip as-path access-list maxas-limit50 deny ^([{},0-9]+ ){50} ip as-path access-list maxas-limit50 permit .* Regards, Bill Herrin -- William Herrin ................ herrin(a)dirtside.com bill(a)herrin.us Dirtside Systems ......... Web: <http://www.dirtside.com/>

9 11

Which one(s) of SWIP, RWhois, RDAP? (Fwd: [ARIN-consult] NEW Consultation: Available Methods of Reporting Network Sub-Delegation Information)
by John Curran 02 Oct '17

02 Oct '17

NANOGers! Apologies (as some of you have already seen this) but it has more relevance to network operations than most IP number policy matters, so out of avoidance of any doubt, I call this to your attention. ARIN has opened a community consultation on the question of which methods for reporting network sub-delegations should be supported by ARIN. If you have views on this matter, please read the attached and take the time to comment on the arin-consult mailing list (which is the mailing list which ARIN uses for discussion of community suggestions & consultations and is open to the public.) Thanks! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [ARIN-consult] NEW Consultation: Available Methods of Reporting Network Sub-Delegation Information Date: 2 October 2017 at 8:19:36 AM PDT To: <arin-consult(a)arin.net<mailto:arin-consult@arin.net>> ARIN was previously requested via the ARIN Consultation and Suggestion Process (ACSP) to open a consultation to generate discussion about the possibility of sun-setting RWhois support by the ARIN organization. ARIN's initial response to the ACSP indicated we would open a consultation following the completion of the Registration Data Access Protocol (RDAP) specification inside the IETF processes. This work has been completed and the RFC has been published. ARIN took the additional step of implementing RDAP inside its own directory services offering with referral support to the other Regional Internet Registries (RIRs). With this work complete, we are following through with the formalized request to open a consultation on this topic. https://www.arin.net/participate/acsp/suggestions/2013-22.html In accordance with ARIN's Number Resource Policy Manual (NRPM), Organizations are required to report certain types of customer network sub-delegation information (reassignments and reallocations) to ARIN. Currently there are two reporting methods available. Both are delineated in the NRPM and supported by ARIN's production services. There is also a third possible method of reporting sub-delegation information that could be made available, but is not yet offered. Method 1: SWIP (currently available): The reporting of sub-delegation information using ARIN's database. This can be done either by submitting a SWIP template, interfacing with ARIN's RESTful API, or by creating a sub-delegation inside ARIN Online using ARIN's SWIP-EZ functionality. https://www.arin.net/resources/request/reassignments.html Method 2: RWhois (currently available): The reporting of sub-delegation information on your own hosted and operated RWhois server with referral link information provided in ARIN Whois as part of your own organization's Whois records. In order for a user of ARIN's directory services to view sub-delegation information hosted by an RWhois server, they would have to submit a separate query to that RWhois server, and are not referred in an automated fashion. https://www.arin.net/resources/request/reassignments_rwhois.html Method 3: RDAP: The five RIRs currently use RDAP for referrals to each other's Whois data. Although the specification language of the RDAP could allow it to be used as a third method for the reporting of sub-delegation information to ARIN, it is not currently offered as an option. In order to make this option available, associated registry software would need to be created. This possible method would allow users of ARIN's directory services to view sub-delegation information available on customer hosted RDAP servers in an automated fashion. This RDAP method may also be viewed as redundant to RWhois. https://tools.ietf.org/html/rfc7482 https://www.arin.net/resources/rdap.html Options Going Forward ARIN expects to continue offering Method 1 (SWIP) into the foreseeable future. As previously described, we are acting on a formal suggestion to consult with the community about the future of RWhois support, and also have potential options with RDAP. * Question (general): Of the three sub-delegation reporting methods listed (SWIP, RWhois, RDAP), which should ARIN support in the future? * Question (SWIP/RESTful API specific): The existing RESTful API allows users to report (SWIP) one sub-delegation at a time to be added to ARIN Whois. Should ARIN add bulk-upload features to the RESTful API? * Question (RWhois specific): As noted, RWhois servers are not referred to in an automated fashion when users query ARIN Whois. Should ARIN automate referrals to RWhois servers from ARIN's Whois service? * Question (RDAP specific): If ARIN was to allow the reporting of network sub-delegation information using RDAP, associated enabling software would be required. Should ARIN enable this method by creating an RDAP software suite that would allow ARIN registrants to run RDAP service locally? The feedback you provide during this consultation will help inform decisions about software tools and support for the reporting of network sub-delegation information to ARIN in the future. Thank you for your participation in the ARIN Consultation and Suggestion Process. Discussion on arin-consult(a)arin.net<mailto:arin-consult@arin.net> will close on 27 October 2017. If you have any questions, please contact us at info(a)arin.net<mailto:info@arin.net>. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Consult You are receiving this message because you are subscribed to the ARIN Consult Mailing List (ARIN-consult(a)arin.net<mailto:ARIN-consult@arin.net>). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-consult Please contact the ARIN Member Services Help Desk at info(a)arin.net<mailto:info@arin.net> if you experience any issues.

1 0

Re: AS PATH limits
by Ken Chase 02 Oct '17

02 Oct '17

I dont see that as the solution. Someone else will offend again. However, I also don't see trusting major backbones as our filters (for many other reasons). Our software should be handling what's effectively a buffer overflow or equivalent (beware long paths that are actually shellcode). Quagga among others seems to be subject to this bug, pre 0.99.23 or so (.99.24+ seems ok). So upgrading is a solution. There was also some chatter on the quagga mailing list on how it's more pleasant to stab your eyeballs out rather than constructing extremely long regexp's that might work as a filter. https://lists.quagga.net/pipermail/quagga-users/2017-September/thread.html /kc On Sat, Sep 30, 2017 at 05:30:03PM +0200, Niels Raijer said: >My message to NANOG about this from 12:31 UTC today is still in the moderation queue. I had opened a support case with Cogent before writing my message to NANOG and Cogent has let me know approximately 40 minutes ago that they have contacted their customer. > >Niels > > > >On 30 Sep 2017, at 17:09, sthaug(a)nethelp.no wrote: > >>> If you're on cogent, since 22:30 UTC yesterday or so this has been happening >>> (or happened). >> >> Still happening here. I count 562 prepends (563 * 262197) in the >> advertisement we receive from Cogent. I see no good reason why we >> should accept that many prepends. >> >> Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no > -- Ken Chase - math(a)sizone.org Guelph Canada

7 7

Re: Long BGP AS paths
by Scott Weeks 02 Oct '17

02 Oct '17

> Nowhere in the BGP RFCs it says it is okay for the > software to crash. :: we could send a community to signal that it's ok :: to crash Call it the ECB. (Evil Crash Bit). ;-) scott

1 0