September 2017 - Test - lists.nanog.org

Verizon Wireless IPv6 deployment contact?
by Randy Carpenter 15 Sep '17

15 Sep '17

Is there anyone from Verizon Wireless that I can talk to regarding IPv6 deployment? I am getting nonsensical answers from my local contacts. Please contact me off-list. thanks, -Randy

1 0

Re: 2017 NANOG Elections General Information
by Dave Temkin 14 Sep '17

14 Sep '17

Hi NANOG Community, Nominations are rapidly coming to a close - September 8th is the last day to submit nominees. Unfortunately, to follow up on my paragraph about diversity: So far, every single candidate that has completed the nomination process is a white male. Having sat in on sessions such as Women in Technology lunch, I know that this community is passionate about diversity. If you, or a friend, would like to discuss what it takes to be on the NANOG board, I or my colleagues would love to speak about it. If you're ready to enter the nomination process, you can see details below. Best Regards, -Dave Temkin, for the NANOG Board of Directors On Mon, Aug 7, 2017 at 2:54 PM, Dave Temkin <dave(a)temk.in> wrote: > Hello NANOGers! > > We are once again approaching the annual NANOG election > <http://nanog.org/elections/2017/general> and appointment time. Board > candidate nominations open August 7th and the complete Election timeline > can be found here <http://nanog.org/elections/2017/general>. We encourage > those in the community who are not currently NANOG members to consider > becoming members of NANOG and to consider standing for a position in our > leadership. Through membership and voting, you will be an active > participant in directing all NANOG activities. > > Only NANOG members are eligible to nominate, be a candidate, vote, and > serve in the NANOG Board of Directors and Committees. Click here > <https://www.nanog.org/membership> to become a member today! **If you > are not a member and wish to vote in this election, your membership must > be received by 9:00 a.m. Pacific Time on Wednesday, October 4, 2017.** > > Why? > > NANOG is at its strongest and best when there is an engaged group of > members. If you care about NANOG and would like to take a turn at > volunteering your time, please consider becoming part of the team by taking > part in the nomination and election process. If you know someone else > that you believe would be interested in serving on the Board of Directors, > nominate them by completing the Online Process > <https://www.bigpulse.com/138028/signin> beginning August 7, 2017. Any > questions should be submitted to elections(a)nanog.org. > > As I spoke about during my opening at NANOG 70, diversity is key to the > viability of the NANOG community. Personally, it concerns me that our only > non-white, non-male elected member of the Board is leaving the board this > year, having served the maximum allowable number of terms. While everyone > is welcome, it is important that we represent our community well at all > levels and so if you or someone you know could help improve that > representation, please consider the nomination process. > > As NANOG continues to evolve, our Board of Directors and Committees will > continue to play an increasingly important role in our success. By joining > now, you can be an integral part of the process. > > For more information about the role of a Board of Director or any > Committee Member, or to find out more about what's involved in serving, > please consult the current NANOG Bylaws > <https://nanog.org/sites/default/files/sites/default/files/NANOG-Bylaws-Octo…> > or follow the links to the Board and Committee pages from the General > 2017 NANOG Elections Page <https://www.nanog.org/elections/2017/general>. > > > Best regards, > > Dave Temkin > On behalf of the NANOG Board of Directors >

7 12

SAFNOG-3: Conference Report
by Mark Tinka 14 Sep '17

14 Sep '17

Hello all. With the SAFNOG-3 event - recently held in Durban, South Africa - just concluded, the SAFNOG-3 MC (Management Committee) would like to extend its gratitude and appreciation to all the delegates, speakers, sponsors, partners and iWeek, for your support in producing yet another successful SAFNOG conference. SAFNOG-3 recorded 172 registered participants, with 160 shows in Durban. Furthermore, we attracted 1,009 unique views via the live stream throughout the 2-day conference. Each of the presentations that were given during the meeting are now available online to download at: http://www.safnog.org/#section-agenda Videos of each of the presentations are catalogued and available on the SAFNOG Youtube channel at: https://www.youtube.com/channel/UCLRItGb8Y2HXIu_EUdp3Sag/playlists High-resolution photographs of both conference days as well as the exhibition room, closing social dinner and whisky BoF are also all available at: http://www.safnog.org/ For those who attended the meeting (remotely or in-person), we welcome your feedback to help us understand what worked, what didn't, what you'd like to see for the next meeting(s), and how we can improve. Kindly spend some time completing the online survey for this at: https://www.surveymonkey.com/r/G2QGX5D SAFNOG now moves back into its normal schedule of April, with the upcoming SAFNOG-4 meeting. Details about this event will be shared on our mailing list and with the wider community in the coming weeks. We look forward to seeing you all (again) in April, 2018. Cheers, Mark Tinka On Behalf of the SAFNOG Management Committee

1 0

Verizon issues | Looking glass
by Van Dyk, Donovan 13 Sep '17

13 Sep '17

Hello, Has anyone else been seeing issues today from routes being learnt through the Verizon network, AS 701? Does anyone know if they have a looking glass? I can’t find one. Thanks -- Donovan Van Dyk SOC Network Engineer Fort Lauderdale, FL USA [cid:image001.png@01D32CD1.73DBD490] The information contained in this electronic mail transmission and its attachments may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient (or an individual responsible for delivery of the message to such person), you are strictly prohibited from copying, disseminating or distributing this communication. If you have received this communication in error, please notify the sender immediately and destroy all electronic, paper or other versions.

3 2

Re: Protocol 17 floods from Vietnam & Mexico?
by Large Hadron Collider 13 Sep '17

13 Sep '17

Yes, I'm being UDP flooded. I worked that out by grepping /etc/protocols. On 12/09/2017 18:24, Matt Harris wrote: > Protocol 17 is UDP. UDP is pretty common on the internet. Not sure > why source and destination ports aren't being shown by your tool > there, might be malformed UDP packets designed to obscure themselves > from or otherwise evade some intrusion detection or firewall systems. > > > On Tue, Sep 12, 2017 at 8:08 PM, Large Hadron Collider > <large.hadron.collider(a)gmx.com <mailto:large.hadron.collider@gmx.com>> > wrote: > > 18:04:32.391082 IP 138-122-97-251.internet.static.ientc.mx > <http://138-122-97-251.internet.static.ientc.mx> > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391088 IP 138-122-97-251.internet.static.ientc.mx > <http://138-122-97-251.internet.static.ientc.mx> > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391110 IP 115.75.50.106.35180 > umbrellix.net.10454: UDP, > bad length 65500 > 1464 > 18:04:32.391145 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391152 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391158 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391164 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391170 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391176 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391182 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391188 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391194 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391199 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391205 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391211 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391217 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391223 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391229 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391234 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391248 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391255 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391261 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391266 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391272 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391278 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391284 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391289 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391295 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391313 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391319 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391325 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391331 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391336 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391342 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391348 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391354 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391367 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391374 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391379 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391385 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391391 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391396 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391402 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391408 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391414 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391420 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > 18:04:32.391426 IP 115.75.50.106 > umbrellix.net > <http://umbrellix.net>: ip-proto-17 > > Some stupidity has me wondering... protocol 17? Huh? > > > Is this some attempt to exploit me while at the same time flooding > me at over 800Mbit/s? > > > Needless to say, I've shut my computer down to avoid going over my > data allowance. > > > > > -- > Matt Harris - Chief Security Officer > Main: +1 855.696.3834 ext 103 > Mobile: +1 908.590.9472 > Email:matt@netfire.net <mailto:matt@netfire.net>

5 4

Getting an RADB entry removed that was added by a previous peer
by Matthew Huff 13 Sep '17

13 Sep '17

It appears that Reliance Globalcom (AS6157) added an RADB entry for our prefix (129.77.0.0/16) when we were a peer of theirs years ago, and it was never removed when we ended the relationship. We are ASN 14607. I've reached out to their support, but does anyone have a suggestion on how I could get this cleaned up if they don't respond?

4 3

Protocol 17 floods from Vietnam & Mexico?
by Large Hadron Collider 12 Sep '17

12 Sep '17

18:04:32.391082 IP 138-122-97-251.internet.static.ientc.mx > umbrellix.net: ip-proto-17 18:04:32.391088 IP 138-122-97-251.internet.static.ientc.mx > umbrellix.net: ip-proto-17 18:04:32.391110 IP 115.75.50.106.35180 > umbrellix.net.10454: UDP, bad length 65500 > 1464 18:04:32.391145 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391152 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391158 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391164 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391170 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391176 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391182 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391188 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391194 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391199 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391205 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391211 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391217 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391223 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391229 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391234 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391248 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391255 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391261 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391266 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391272 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391278 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391284 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391289 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391295 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391313 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391319 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391325 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391331 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391336 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391342 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391348 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391354 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391367 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391374 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391379 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391385 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391391 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391396 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391402 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391408 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391414 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391420 IP 115.75.50.106 > umbrellix.net: ip-proto-17 18:04:32.391426 IP 115.75.50.106 > umbrellix.net: ip-proto-17 Some stupidity has me wondering... protocol 17? Huh? Is this some attempt to exploit me while at the same time flooding me at over 800Mbit/s? Needless to say, I've shut my computer down to avoid going over my data allowance.

3 2

[NANOG-announce] NANOG 71 Agenda published
by L Sean Kennedy 12 Sep '17

12 Sep '17

NANOG Community, The NANOG 71 Agenda <http://www.cvent.com/d/v5qxb1/16K?cpc=DXNWVXGZGJR&RefID=NANOG+71+AGENDA> is published and available as an iCal Feed. The Program Committee has worked closely with our speakers to develop a first-rate program and we encourage all attendees to enjoy the whole conference ; as we review submitted content minor changes to the agenda are possible and will be updated in the online feed. Thank you to the many members of our community who submitted interesting content for NANOG 71! Over 800 attendees have registered <http://www.cvent.com/d/v5qxb1/3A> and the NANOG family looks forward to welcoming all of you to San Jose. Useful Information - NANOG 71 <http://www.cvent.com/events/nanog-71/event-summary-4f71b2f3181e49c1ab199f5d…> General Information and Registration - Hotel Room Block <http://www.cvent.com/d/v5qxb1/8K?cpc=FWNKQCGY2MH>(s) Information - There are a few remaining spots to register for the NANOG 71 Hackathon <http://www.cvent.com/events/nanog-71/custom-20-4f71b2f3181e49c1ab199f5d5d40…> - We have a newly implemented attendee meeting scheduler for NANOG 71 - A welcome message that will be sent to registered NANOG 71 attendees shortly will provide more information on scheduled events and applications to help you to make the most of your time in San Jose - Register to attend NANOG On The Road Boston <https://www.nanog.org/meetings/road16/home> this Thursday and Fort Lauderdale <https://www.nanog.org/meetings/road17/home> in November Safe travels and see many of you in San Jose. Thanks, Sean L Sean Kennedy On behalf of the NANOG Program Committee _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Anyone here from Netflix? | VPN Detection Problem
by Jason Canady 12 Sep '17

12 Sep '17

Hello, We have IP addresses being blocked due to proxy servers that were once on the IP address space. They have now been reclaimed and will be used for ISP services to end-users. We need to ensure that customers can watch Netflix without any issues. Would someone please reach out to me to resolve this? Thank you! Best Regards, Jason Canady Unlimited Net, LLC

2 1

Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.
by Sean Pedersen 12 Sep '17

12 Sep '17

We were recently approached by a company that does security consulting. Some of the functions they perform include discovery scans, penetration testing, bulk e-mail generation (phishing, malware, etc.), hosting fake botnets - basically, they'd be generating a lot of bad network traffic. Targeted at specific clients/customers, but still bad. As an ISP, this is new territory for us and there are some concerns about potential impact, abuse reports, reputation, authorization to perform such tests, etc. Does anyone have experience in this area that would be willing to offer advice?

4 4