October 2019 - Test - lists.nanog.org

FW: This DNS over HTTP thing
by Keith Medcalf 04 Oct '19

04 Oct '19

Masataka Ohta wrote: > >Livingood, Jason wrote: > >> The challenge of course is that in the absence of a silver bullet >> solution, that people working to combat all forms of childsorship >> exploitation are simultaneously trying several things, ranging from >> going to the source as you suggest and arresting people, to trying to >> interrupt the online tools that they may use or that might >> fund/support them, etc. > >The Internet was working very well to suppress child porn by >making video freely distributed, which made child porn industry >a lot less profitable. > >Freely distributed video also makes investigation of victims >easier. > >So, people who want to make money from child porn has been >trying to have censorship of various degree. > >In UK, they are very successful. Finally, someone with a modicum of common sense and proper reasoning. I salute you, sir! -- The fact that there's a Highway to Hell but only a Stairway to Heaven says a lot about anticipated traffic volume.

2 1

Spectrum DNS servers resolving my domain name to a loopback address.
by jake vdb 04 Oct '19

04 Oct '19

Hey, I posted this on r/networking and was advised to post on this list. The small company I work for has a niche SaaS app and for the past week Spectrum DNS servers have resolved the name to 127.0.0.54. I found a Spectrum user on reddit to confirm the problem: nslookup rightbridge.net dns-cac-lb-02.rr.com Non-authoritative answer: Name: rightbridge.net Address: 127.0.0.54 server 209.18.47.62 Default Server: dns-cac-lb-02.rr.com Address: 209.18.47.62 I have been trying for a week to get Spectrum tech support and Twitter support to help, but so far that's been an exercise in futility. As far as I'm aware, this only affects Spectrum. I have switched some users to Google's public DNS servers, but I can't reach all of them. Reddit has been some help troubleshooting; That is indeed interesting. What I notice is: > It replies to A requests with a 60 second TTL every single time, which is > a behavior normally expected of an authoritative server, yet it is marking > the replies as non-authoritative. I would expect non-authoritative servers > to have a decrementing TTL. > It responds with 0 records for NS, MX, AAAA, and A requests. Not NXDOMAIN > though. > It seems like a wildcard record that covers everything under your domain. > I see this behavior on both of the Spectrum resolvers that my cable modem > connection is offered via DHCP. I don't have this problem if I use my own > resolver (on a Spectrum connection). > I'm stumped. Despite my comment earlier about it being unlikely to be a > Spectrum problem, I now agree that it does appear to be something strange > on their side. Just to be sure, have you ever used Spectrum as a provider > for something related to this domain, where they hosted the domain or > anything? I'm not sure if they even offer that service, but want to ask > just to be sure. There is typically little reason to have a specific domain > singled out in your nameservers unless you host it. > The one guess I have is that they have gone out of their way to ban your > domain for some reason. Wildcard pointing all queries to it to localhost > would not be too unexpected of a way to ban a domain. Have you had any > trouble with malware infections, spam, or anything else you can think of > that might have lead someone to want to ban the domain? I don't believe Spectrum has even been a service provider for my employer. They do not offer service where our home office is located, and they have only used Rackspace for hosting in the 13 years they've been around. No malware, infections, spam (that I'm aware of). We are not registered on any Blacklists. I appreciate any help / advice, Jake

2 1

Re: IPv6 on mobile networks, was Update to BCP-38?
by John R. Levine 04 Oct '19

04 Oct '19

In article <d3f78384-9b25-c4c4-495f-5dcc0e0c1925(a)satchell.net>, Stephen Satchell <nanog(a)nanog.org> wrote: > My AT&T cell phone has both IPv4 and IPv6 addresses. The IPv4 address > is from my access point; the IPv6 address appears to be a public address. My AT&T cellphone (via MVNO Tracfone) has a 10/8 IPv4 address and IPv6 address 2600:380:28be:8b34:2504:2096:6ac7:6262. But when I connect to a web site that reports the connecting address, it says I'm 2600:387:a:9a2::8. What's going on there? Those are both within at&t's 2600:300::/24', but am I behind a NAT66? An aggressive web cache? -- Regards, John Levine, johnl(a)taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly

4 3

RE: IPv6 Pain Experiment
by Scott Weeks 04 Oct '19

04 Oct '19

--- aaron1(a)gvtc.com wrote: From: "Aaron Gould" <aaron1(a)gvtc.com> Thank God for DNS ;) ------------------------------------ No, just Paul Mockapetris... :-) https://en.wikipedia.org/wiki/Paul_Mockapetris scott

1 0

Spectrum (Charter) Fragmented UDP
by Phil Lavin 03 Oct '19

03 Oct '19

At some point over night on 30th September (i.e. the night going into 1st October), we saw a number of Spectrum (Charter) customers stop handling fragmented UDP packets. This has manifested itself in such that the phones of affected customers are no longer receiving UDP SIP INVITE packets which exceed whatever their WAN side MTU is. We've so far had 6 customers report the issue - we can see that the last call on 30th September worked and the first and subsequent calls on 1st October failed. Is anyone aware of an update to CPE devices pushed out that night which may have broken their ability to handle IP fragmentation?

5 6

Re: IPv6 Pain Experiment
by Masataka Ohta 03 Oct '19

03 Oct '19

Denis Fondras wrote: >> What? It's a typical configuration with glues. >> >> For example, in my organization, ns1.noc.titech.ac.jp is the >> primary for noc.titech.ac.jp and titech.ac.jp. > Sorry, you are right, I probably haven't understood. A more artificial configuration is primary1.childzone.parentzone.example.com is the primary for parentzone.example.com and primary2.childzone.parentzone.example.com is the primary for childzone.parentzone.example.com But, note that DNS operators in the real world are so creative. Masataka Ohta

1 0

Re: IPv6 Pain Experiment
by Masataka Ohta 03 Oct '19

03 Oct '19

Denis Fondras wrote: >> What if primary.childzone.parentzone.example.com >> is the primary for parentzone.example.com, >> and childzone.parentzone.example.com? >> > > In that specific case it looks like you are asking for trouble regardless of > address family :) What? It's a typical configuration with glues. For example, in my organization, ns1.noc.titech.ac.jp is the primary for noc.titech.ac.jp and titech.ac.jp. Masataka Ohta

1 0

Twilio
by Ben Cannon 03 Oct '19

03 Oct '19

Can an engineer for Twilio please reach out to me off-list if possible? Thanks. -Ben. -Ben Cannon CEO 6x7 Networks & 6x7 Telecom, LLC ben(a)6by7.net <mailto:ben@6by7.net>

2 2

Re: IPv6 Thought Experiment
by Scott Weeks 02 Oct '19

02 Oct '19

-------------------------- “MUST NOT support IPv4”.. I think a good start would be: "MUST support IPv6"! ----------------------------------- Woah, there! Hold your horses. It's only been 20-something years. You can't expect these things to happen overnight! >;-) scott

1 0

Optical training
by James Chang 02 Oct '19

02 Oct '19

Hi All, Hopefully this is the right place to post this question. I'm a routing guy mainly working with ISIS/BGP for my company in our core space. I have an opportunity to get involve with our L2 DWDM network. We are a Cisco shop using NCS2K as DWDM nodes. But before jump into learning the NCS specific stuff, I would like to take a vendor neutral training course in Optical fiber testing with OSA/OTDR, OTN, DWDM signaling, OSNR/dispersion....etc. I think this will help me understand how to build out a DWDM network from ground up. I'm hoping someone I could get into designing network for my company. Thanks in advance, James

4 5