May 2021 - Test - lists.nanog.org

Re: FCC accelerates STIR/SHAKEN deadlines
by Sean Donelan 20 May '21

20 May '21

On Thu, 20 May 2021, goemon(a)anime.net wrote: >> Shockingly (I'm shocked, shocked to find that gambling is going on in here) >> the commission found a subset of small voice service providers appear to be >> originating a large and increasing quantity of illegal robocalls. > > so they are illegal, then precisely what enforcement is currently being done > by the FCC? The FCC writes sternly worded letters. FCC Demands Two Companies Cease-and-Desist Illegal Robocall Campaigns These Are the Third Tranche of Enforcement Bureau Cease and Desist Letters https://www.fcc.gov/document/fcc-demands-two-companies-cease-and-desist-ill… FCC Issues Robocall Cease-And-Desist Letters to Six Voice Providers https://www.fcc.gov/document/fcc-issues-robocall-cease-and-desist-letters-s…

1 0

FCC accelerates STIR/SHAKEN deadlines
by Sean Donelan 20 May '21

20 May '21

The Federal Communications Commission voted today to accelerate the STIR/SHAKEN deadlines for certain small IP voice service provider networks to no later than June 30, 2022. Large IP VSP networks had a deadline of June 30, 2021. Shockingly (I'm shocked, shocked to find that gambling is going on in here) the commission found a subset of small voice service providers appear to be originating a large and increasing quantity of illegal robocalls. According to the FCC NPRM, a March 2021 report released by Transaction Network Services, a provider of call analytics, found that the problem of robocalls originated by certain smaller voice service providers has gotten worse: by the end of 2020, "[a]lmost 95% of high risk calls originate from non-Tier-1 telephone resources, up 3% from last year."

1 1

Buying IPs with poor reputation
by Ross Tajvar 19 May '21

19 May '21

I'm curious if anyone has experience deliberately buying blacklisted blocks, or blocks that otherwise have poor reputation. Is there a significant price difference? How do you seek them out? Most of the sellers I've found seem to focus on blocks with good reputation, or on improving the reputation of a bad block. But I am interested in purchasing some IPs for internal services where reputation doesn't really matter. Thanks, Ross

3 2

NAT/CGNAT IP address/users ratios
by Scott, Thomas 18 May '21

18 May '21

Hello NANOG (and friends), Asking if anyone would care to share their CGNAT and NAT ratios. We're looking at some best practices and I wanted to see what the community at large has seen working, and not working. I am by no means a NAT expert, and usually I see the other end where it's clearly *not* working. Does anyone have estimating formulas for devices/users to internal blocks to public IPs? Regards, [cid:image001.png@01D74BF4.DDAC29B0]<https://www.intelsat.com/> Thomas Scott Engineer, Network Operations 2875 Fork Creek Church Road, Ellenwood, GA 30294 +1 404-381-2446 | M +1 480-241-7422 www.intelsat.com<http://www.intelsat.com/> [https://www.intelsat.com/wp-content/uploads/2020/12/INTELSAT-Logo-Horiz_4C_…] As the foundational architects of satellite technology, Intelsat operates the largest, most advanced satellite fleet and connectivity infrastructure in the world. We apply our unparalleled expertise and global scale to reliably and seamlessly connect people, devices and networks in even the most challenging and remote locations. Transformation happens when businesses, governments and communities build a ubiquitous connected future through Intelsat's next-generation global network and simplified managed services. At Intelsat, we turn possibilities into reality. Imagine Here, with us, at Intelsat.com. For more information, visit www.intelsat.com<http://www.intelsat.com> and follow us on Facebook<https://www.facebook.com/#%21/pages/Intelsat/106822915740>, Twitter<https://twitter.com/INTELSAT> and LinkedIn<http://www.linkedin.com/company/5071?trk=vsrp_companies_res_name&trkInfo=VS…> This email message is for the sole use of the intended recipients and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Intelsat S.A. and its subsidiaries.

2 1

Georgia DOL Contact
by Joe Freeman 17 May '21

17 May '21

Is anyone on the list with Georgia Department of Labor? I've got customers having problems logging into their website and need a good contact there to troubleshoot. Routing appears ok as we can get to hosts on that subnet, so I suspect the issue is above layer 3. Thanks- Joe

1 0

Comments due (5/14) Feasibility of EAS Participation for Internet-related services
by Sean Donelan 17 May '21

17 May '21

Search FCC Electronic Comment Filing System for proceedings 15-91 and 15-94 https://www.fcc.gov/ecfs/ https://www.fcc.gov/ecfs/search/filings?q=((proceedings.name:((15%5C-91)%20… Feasibility of EAS Participation for Internet-related services Comments received from - Digital Media Association - Digital Content Next - TechFreedom - INCOMPAS - REC Networks and Riverton Radio Project Assocation - NOAA/National Weather Service - Xperi Holding Corporation (patent holder of HD Radio) There may be a few more filed after 5pm EDT which will show up on ECFS Monday's update.

1 1

NANOG U Webinar - THURSDAY
by Nanog News 17 May '21

17 May '21

NANOG U WEBINAR *Discover: "State of Routing Security and RPKI Introduction"* Date + Time: May 20, 11am - 1pm PST / 2pm - 4pm EST *Agenda: *Join Melchior Aelmans, Consulting Engineer at Juniper Networks, as he explores: - current state of BGP Routing Security - what it does and where it fails - introduction of RPKI Origin Validation - what is after Origin Validation *Speaker: *Melchior Aelmans, Consulting Engineer at Juniper Networks ***NANOG U Webinars are 1-3 hours, depending on the format. Registration is free for all, but required to participate. *Can’t attend the live session?* No problem! A recording will be available shortly after the original air date. Register Now <https://www.nanog.org/events/webinar-routing-security/> REGISTER NOW FOR NANOG 82! Feeling sluggish? NANOG 82 Virtual is sure to re-ignite your think-tank! *Register NOW* for our upcoming NANOG 82 Virtual! *N-82 PRESENTATIONS NOT TO MISS:* - DNS Evolution: *No it wasn't a hijack* - Security of Alerting Authorities in the WWW: *Measuring Namespaces, DNSSEC, and Web PKI* - Tenant Networking in Public Clouds: *Do We Still Need Networking Engineers?* - NOG in a Box: *So, you want to start a NOG?* - Enhancing PING and TRACEROUTE - Disaggregated routing gets real in Deutsche Telekom - Applications of Segment Routing Flex-Algo and BGP Classful Transport - Tracing DDoS End-to-End in 2021 - Evolution of Network Automation at Roblox *Register Now <https://www.nanog.org/events/nanog-82/>* Get Your NANOG Swag On! *Deadline: Monday, May 24, 2021 11:49 PDT **Have something to commemorate our LAST remote event in this historic time.* Show off your NANOG pride with a t-shirt, sweatshirt, polo, cap, or laptop stickers. *Share the love:* don’t forget to tag us in your NANOG pics on Facebook, Instagram, Twitter, and LinkedIn so we can follow along! *#WeAreNANOG* If you’d like your swag in time to show it off at NANOG 82 Virtual, be sure to place your order by May 24th. All orders after the 24th will be shipped on demand. SHIPPING RATES - $10.00 for orders from $0.00 to $49.99 - $15.00 for orders from $50.00 to $99.99 - $20.00 for orders from $100.00 to $149.99 - $25.00 for orders from$150.00 to $199.99 *FREE SHIPPING for orders $200.00 and up* *Register Now <https://www.nanog.org/events/nanog-swag/>*

1 0

RE: Juniper hardware recommendation
by Michael Fiumano 17 May '21

17 May '21

If accurate interface stats are important to you, MX’s don’t support accurate SNMP Interface Utilization, ie they don’t comply with RFC2665/3635, which seems like a fairly basic thing to do but they decided not to, and has been impactful to me in the past. So, any SNMP monitoring of an interface will always show less utilization than what is actually occurring, possibly leading to a false sense of security, or delay in augmentation. Would also affect usage based billing, if you do that. https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/top… For M Series, T Series, and MX Series, the SNMP counters do not count the Ethernet header and frame check sequence (FCS). Therefore, the Ethernet header bytes and the FCS bytes are not included in the following four tables: ifInOctets ifOutOctets ifHCInOctets ifHCOutOctets Thanks, Michael Fiumano *From:* NANOG *On Behalf Of *Mark Tinka *Sent:* Monday, May 10, 2021 10:25 AM *To:* nanog(a)nanog.org *Subject:* Re: Juniper hardware recommendation On 5/10/21 16:19, aaron1(a)gvtc.com wrote: I prefer MX204 over the ACX5048. The ACX5048 can’t add L3 interface to an mpls layer 2 type of service. There are other limitations to the ACX5048 that cause me to want to possibly replace them with MX204’s. But in defense of the ACX5048, we have gotten some good mileage (a few years now) of good resi/busi bb over vrf’s and also carrier ethernet for businesses and lots of cell backhaul… so they are good for that. I’ve heard the ACX5448 was even better. Trio will always provide better features, but come with the price tag to boot. I’m looking at the MX240 for the SCB3E MPC10E hefty with 100 gig ports You might want to look at the MX10003, in that case, as well. We are deploying those for 100Gbps service (customer-facing). Works out cheaper than offering 100Gbps service on the MX240/480/960 for the same task. Mark.

9 11

TLD .so Partial Outage?
by Tom Daly 16 May '21

16 May '21

Hello NANOG'ers! I'm observing a near global outage of DNS services from d.nic.so. This appears to be an AfriNIC anycast DNS service. Does anyone have contacts at AfriNIC for their DNS systems available? e.nic.so seems to be responding (hosted behind PCH, thanks Woody!). Tom -- Tom Daly tjd(a)q7.io

5 6

Anyone from REACH IRR on this list?
by Pirawat WATANAPONGSE 16 May '21

16 May '21

Dear REACH admins, >From the email address in Merit’s IRR Directory [Reference: http://www.irr.net/docs/list.html#REACH ], I contacted you at dbadmin(a)telstraglobal.net regarding taking-down a fake IRR entry of my prefix [original email attached below], but got the response from Gmail saying that it cannot contact your email server. Please kindly consider my request. Best Regards, Pirawat. ---------- Forwarded message --------- From: Pirawat WATANAPONGSE <pirawat.w(a)ku.th> Date: Thu, May 13, 2021 at 3:24 PM Subject: Request: fake IRR entry take-down To: <dbadmin(a)telstraglobal.net> To whom it may concern, We---at Kasetsart University, Thailand [Reference: https://rdap-web.apnic.net/autnum/AS9411]---are in the process of strengthening our routing security against (BGP) Route Hijacking. We have already registered all of our prefixes with the APNIC RPKI Trust Anchor. We present the following URL as an authentication of prefixes ‘ownership’. [Reference: https://rpki.cloudflare.com/?view=explorer&validateRoute=9411_&asn=9411&ext… ] However, your database is currently announcing 1 fake entry incorrectly listing AS4750 as the origin of *our* 158.108.0.0/16 netblock. [Reference: https://bgp.he.net/net/158.108.0.0/16#_irr] That fake entry represents a security threat to our network. Any AS that implements IRR-Only Route Filtering will obviously trust your database and thus will divert our traffic somewhere else. We therefore humbly request that you take down that fake entry. If you have any questions, please feel free to email me using the addresses in the signature section. Thank you in advance for your help. Best Regards, Pirawat. -- _/_/ _/_/ _/_/ _/_/ Assist.Prof. Pirawat WATANAPONGSE, Ph.D. _/_/ _/_/ _/_/ _/_/ Department of Computer Engineering _/_/ _/_/ _/_/ _/_/ Kasetsart University, Bangkhen (Main) Campus _/_/_/_/ _/_/ _/_/ Bangkok 10900, THAILAND _/_/_/_/ _/_/ _/_/ eMail: Pirawat.W(a)ku.th or Pirawat.W(a)ku.ac.th _/_/ _/_/ _/_/ _/_/ Tel: +66 2 797 0999 extension 1417 _/_/ _/_/ _/_/_/_/_/_/ Fax: +66 2 579 6245 _/_/ _/_/ _/_/_/_/ http://www.cpe.ku.ac.th/~pw/

1 0