March 2022 - Test - lists.nanog.org

Any engineers from HE on the list?
by Shawn L 22 Mar '22

22 Mar '22

Wondering if there are any engineers from HE (Hurricane Electric) on the list that could help with a strange traffic issue through your network If so, please contact me off-list Thanks Shawn

1 0

Standards Compliant Mail Client Re: V6 still not supported Re: 202203211201.AYC
by Abraham Y. Chen 21 Mar '22

21 Mar '22

Hi, Blake: 1) " so it's not a chore to tell what thread you're even replying to? ": I am lost by your statement. I start each of my reply by quoting a phrase or sentence of the message that I am responding to. To be sure the original message in included, I copy the last message following what I am writing. I also prefix it with the forum message tag such as in this case "NANOG Digest, Vol 170, Issue 20 Message: 33 ". This should be enough for anyone to follow in the latest exchange, as well as tracing it back in history from the NANOG Digest, if interested. Anything more could I do to ease your efforts without beginning to create a long tail to a thread? 2) " ... a standards compliant mail client ... ": Please name the "standards" and list a couple software that comply with it. This is a topic that I am actually very interested in studying because eMails these days come in too many formats / styles. Please teach me. Thanks, Abe (2022-03-21 12:20) On 2022-03-20 19:01, Blake Dunlap wrote: > Can you get a standards compliant mail client so it's not a chore to > tell what thread you're even replying to? > > On Fri, Mar 18, 2022, 11:44 Abraham Y. Chen <aychen(a)avinta.com> wrote: > > Dear Borg: > > 1) " ... I dont see a way of extending IPv4 without making it a > new protocol. ... new IP protocol that is much more similar to > IPv4, just extends address space. ... ": I believe that you > will be pleasantly surprised at the proposal summarized by the the > below whitepaper. It proposes an overlay architecture over the > current Internet. As such, assignable IPv4 addresses are extended > without the baggage of the current Internet and no new protocol. > To begin the deployment, all need be done is "*/disabling/* the > program code that has been */disabling/* the use of the 240/4 > netblock" in routers. > > https://www.avinta.com/phoenix-1/home/RevampTheInternet.pdf > > 2) The "transition" will be mostly transparent from ordinary > users' point of view, because IoTs do not need be reprogrammed. > Please feel free to ask me to describe specific issues that you > may come across. > > Regards, > > > Abe (2022-03-18 12:43) > > > > ------------------------------ > NANOG Digest, Vol 170, Issue 20 > > Message: 33 > Date: Fri, 18 Mar 2022 09:36:40 +0100 (CET) > From:borg@uu3.net > To:nanog@nanog.org > Subject: Re: V6 still not supported > Message-ID: <Pine.LNX.4.64.2203180928500.16585@cube> > Content-Type: TEXT/PLAIN; charset=US-ASCII > > While Im dont like IPv6, I see it as a bad idea. > >From my knowledge I dont see a way of extending IPv4 without making it > a new protocol. It was not designed that way. > > What I would LOVE to see that someone will pop in with new IP protocol > that is much more similar to IPv4, just extends address space and fixes > some well know issues. (for example remove netmask and use prefixlen/CIDR). > > Other importand aspect is some kind of IPvX -> IPv4 interop, so you can > quickly put clients into new protocol and they have access to entire IPv4 > internet out of the box. > > Also, we need to please enterprises so we need largish RFC1918 space too. > > Just my 2 cents again > > > ---------- Original message ---------- > > From: Matt Hoppes<mattlists(a)rivervalleyinternet.net> <mailto:mattlists@rivervalleyinternet.net> > To: Joe Maimon<jmaimon(a)jmaimon.com> <mailto:jmaimon@jmaimon.com>,bzs(a)theworld.com, > Tom Beecher<beecher(a)beecher.cc> <mailto:beecher@beecher.cc> > Cc: NANOG<nanog(a)nanog.org> <mailto:nanog@nanog.org> > Subject: Re: V6 still not supported > Date: Thu, 17 Mar 2022 23:34:19 -0500 > > At this point I would**love** to see IPv4 get extended, a software patch applied > to devices, and IPv6 die a quick painless death. > >> Its not impossible to envision that IPv4 does not ever go away but actually >> gets extended in such a way that it obsoletes IPv6. The longer this drags out >> the less implausible it seems. >> >> Joe >> >> > > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> > Virus-free. www.avast.com > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> > > > <#m_-5998402233395781358_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> > -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

4 3

VPN-enabled advance fee fraud
by Andrew G. Watters 21 Mar '22

21 Mar '22

Nutshell version: a group of criminals who appear to be in Mexico have created an entire fake law firm and deal flow in the U.S., with Photoshopped notary seals and wire instructions. They reportedly use ExpressVPN-- the owner of the IP block used by the suspects states that it leased the IP block to ExpressVPN under a Letter of Authorization. The suspects make money by causing victims to wire advance fees to Mexico as part of selling their timeshares, and possibly other transactions. My client has lost $70k or so thus far. He has received legit-looking documents, but upon even a cursory electronic inspection they are obvious forgeries. So this gang is savvy enough to steal money, but really reckless as well, which may explain why they are risking clicking on my links as well. I spoke with the lawyer who they are impersonating, and it was news to him that he is in New York City running a law firm considering that he retired in another state many years ago. So the suspects are offshore and I'm not sure what I can do. But I would still rather have their IP addresses than nothing. Can I have a recommendation on the best way to pursue user data from VPN providers such as ExpressVPN? I already sent in a notice to preserve logs for the involved ASN, and I'm headed to Federal court in the next few days to see if I have a chance to get even some of the victim's money back-- or at least an injunction shutting down the suspects' online presence. Any tips on getting VPN user data (or best practices in this type of situation) would be greatly appreciated. Best, Andrew Watters -- Andrew G. Watters Rællic Systems andrew(a)raellic.com +1 (415) 261-8527 https://www.raellic.com

7 8

Re: Making Use of 240/4 NetBlock Re: 202203210957.AYC
by Abraham Y. Chen 21 Mar '22

21 Mar '22

Dear John: 1) " ... everyone, said it's a foolish idea ... ": Oh, "everyone", really? Are you sure? Please name a couple who expressed their judgments based on */facts/*. Otherwise, you may be fooling everyone with rumors to perpetuate a myth. 2) By the way, through constructive criticism, we learned to characterize our EzIP as an */overlay/* network. With this very concise definition, EzIP is now ready to face real bullets. You may want to follow discussions about our work more closely. Regards, Abe (2022-03-21 15:36) ------------------------------ NANOG Digest, Vol 170, Issue 23 Message: 5 Date: 20 Mar 2022 13:58:18 -0400 From: "John Levine"<johnl(a)iecc.com> To:nanog@nanog.org Cc:aychen@avinta.com Subject: Re: Making Use of 240/4 NetBlock Re: 202203151549.AYC Message-ID:<20220320175819.7C27C3976150(a)ary.qy> Content-Type: text/plain; charset=utf-8 It appears that Abraham Y. Chen<aychen(a)avinta.com> said: > ??? C.??? Recently, we were made aware of the Int-Area activities. > Attempts to reach the Group Chairs have not received any responses. > > ??? D.??? I just received an Int-Area Digest Vol 199, Issue 14 > requesting IETF to reactivate the IPv4 support. For people who don't follow the IETF lists, here's a summary of the responses. Mr. Chen thought it was a good idea, everyone else, and I mean everyone, said it's a foolish idea and not worth pursuing. R's, John ------------------------------ -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Re: Making Use of 240/4 NetBlock Re: 202203210955.AYC
by Abraham Y. Chen 21 Mar '22

21 Mar '22

Hi, Randy: Great analogy. Regards, Abe (2022-03-21 15:30) ------------------------------ NANOG Digest, Vol 170, Issue 23 Message: 12 Date: Mon, 21 Mar 2022 03:08:55 -0700 From: Randy Bush<randy(a)psg.com> To: Joe Maimon<jmaimon(a)jmaimon.com> Cc: North American Network Operators' Group<nanog(a)nanog.org> Subject: Re: Making Use of 240/4 NetBlock Re: 202203151549.AYC Message-ID:<m2ils7ehxk.wl-randy(a)psg.com> Content-Type: text/plain; charset=US-ASCII > Is this is how the IETF ivory tower residents likes to try and > suppress debate the ietf is an echo chamber; and if you are not in it, you do not count. https://archive.psg.com/051000.sigcomm-ivtf.pdf randy End of NANOG Digest, Vol 170, Issue 23 ************************************** -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Re: Making Use of 240/4 NetBlock Re: 202203210953.AYC
by Abraham Y. Chen 21 Mar '22

21 Mar '22

Hi, Joe: 1) "... how the IETF ivory tower residents likes to try and suppress debate, ... ": Interesting metaphor. Along this line, I wonder whether those bouncers on the draw bridge realize that technology has advanced to the point that there are other ways to get around the road block, such as taking over the country side to leave the ivory tower in isolation, or parachuting to bypass the draw bridge? Regards, Abe (2022-03-21 12:34) ------------------------------ NANOG Digest, Vol 170, Issue 23 Message: 11 Date: Mon, 21 Mar 2022 05:31:50 -0400 From: Joe Maimon<jmaimon(a)jmaimon.com> To: John Levine<johnl(a)iecc.com>,nanog(a)nanog.org Cc:aychen@avinta.com Subject: Re: Making Use of 240/4 NetBlock Re: 202203151549.AYC Message-ID:<62384606.2030300(a)jmaimon.com> Content-Type: text/plain; charset=UTF-8; format=flowed John Levine wrote: > It appears that Abraham Y. Chen<aychen(a)avinta.com> said: >> C. Recently, we were made aware of the Int-Area activities. >> Attempts to reach the Group Chairs have not received any responses. >> >> D. I just received an Int-Area Digest Vol 199, Issue 14 >> requesting IETF to reactivate the IPv4 support. > For people who don't follow the IETF lists, here's a summary of > the responses. Mr. Chen thought it was a good idea, everyone > else, and I mean everyone, said it's a foolish idea and not > worth pursuing. > > R's, > John > *ahem* Is this is how the IETF ivory tower residents likes to try and suppress debate, by relegating all group think dissenters as white noise nobodies? And if they have succeeded in doing such on their own forums, its more telling about their own process problems than anything else. I sincerely hope I am mistaken in your characterization of the many fine individuals who have repeatedly gone on record in support of maintaining IPv4 responsibly until such time as it is properly obsoleted. While I can understand being considered a nobody, other more notable definitely not nobodies have even on this tired topics' nth thread made themselves heard and some fairly clearly. History will continue to show that the IETF pursued the path of pain for the internet. Joe ------------------------------ -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

A quick note of appreciation
by Etienne-Victor Depasquale 21 Mar '22

21 Mar '22

I've occasionally posted to this list, but mostly take a seat in the audience. *** And what a show this is! *** First-class technical discussions, updated news, timely responses. God bless NANOG, and may this community keep up its invaluable contribution to networking, and thereby, to all of society. With humble gratitude, Etienne -- Ing. Etienne-Victor Depasquale Assistant Lecturer Department of Communications & Computer Engineering Faculty of Information & Communication Technology University of Malta Web. https://www.um.edu.mt/profile/etiennedepasquale

1 0

Survey on DNS resolver operations and DNSSEC
by Moritz Müller 21 Mar '22

21 Mar '22

Hi everyone, The DNS Security Extensions (DNSSEC) add integrity and authenticity to the Domain Name System (DNS). Now, more than 17 years after their standardization, we would like to hear from DNS recursive resolver operators about their experience with DNSSEC. For this reason, we have set up a short survey. It’s directed mainly towards organisations that run a recursive resolver. Filling out the survey should take roughly 5 to 10 minutes. https://forms.gle/FxTD9FofaogdvLqcA (link directs to Google Forms) This survey is carried out by SIDN Labs (https://sidnlabs.nl) and by the Swedish Internet Foundation (https://internetstiftelsen.se/en/) You can contact us via email: moritz.muller(a)sidn.nl Please excuse us, if you have received this email via different mailing lists. — Moritz Müller Research Engineer at SIDN Labs

1 0

Re: Making Use of 240/4 NetBlock Re: 202203141407.AYC
by Abraham Y. Chen 21 Mar '22

21 Mar '22

Hi, Fred: 0) Thank you for a set of references. 1) We cited only one IETF Draft (Wilson, et al.) among them, because it was the first and only one that clearly stated its limitation (Section 2. Caveats of Use). More importantly, it was written by three top APNIC officials. Later efforts on this topic have not introduced (based on my reading) any more essence to the topic. 2) "... I was there for those discussions, and I'm not sure how to put it more simply.... ": With your knowledge of the past, you are uniquely qualified to critique on our work. However, it would be more expedient for everyone, if you could first read through at least the Abstract and the Conclusions of the EzIP IETF Draft, before commenting. This is because EzIP proposal is based on the same general idea as the references you cited, but with a slight extra step that produced a series of surprising results. In particular, we took the "Caveats" above to our hearts before proceeding. So, please put such issues behind you while reviewing our work. Thanks, Regards, Abe (2022-03-14 14:39) ------------------------------ NANOG Digest, Vol 170, Issue 15 Message: 17 Date: Sun, 13 Mar 2022 21:26:11 -0700 From: Fred Baker <fredbaker.ietf(a)gmail.com> To: "Abraham Y. Chen" <aychen(a)avinta.com>, William Herrin <bill(a)herrin.us> Cc: NANOG <nanog(a)nanog.org> Subject: Re: 202203071610.AYC Re: Making Use of 240/4 NetBlock Message-ID: <79746DEC-8C8B-4D6D-B1D6-CB0A0003A1DC(a)gmail.com> Content-Type: text/plain; charset=us-ascii On Mar 12, 2022, at 8:15 AM, Abraham Y. Chen <aychen(a)avinta.com> wrote: > 2) On the other hand, there was a recent APNIC blog that specifically reminded us of a fairly formal request for re-designating the 240/4 netblock back in 2008 (second grey background box). To me, this means whether to change the 240/4 status is not an issue. The question is whether we can identify an application that can maximize its impact. > > https://blog.apnic.net/2022/01/19/ip-addressing-in-2021/ I think there might be value in reviewing the discussion of the related Internet Drafts https://datatracker.ietf.org/doc/html/draft-deshpande-intarea-ipaddress-rec… https://mailarchive.ietf.org/arch/search/?q=draft-deshpande-intarea-ipaddre… https://datatracker.ietf.org/doc/html/draft-wilson-class-e-02 https://mailarchive.ietf.org/arch/search/?q=draft-wilson-class-e https://datatracker.ietf.org/doc/html/draft-fuller-240space-02 https://mailarchive.ietf.org/arch/search/?q=draft-fuller-240space The walkaway I had from these discussions was that while changing the definition of the address space would allow RIRs to sell more IPv4 address space for a few weeks (such as happened to APNIC when the last /8's were handed out), there were not enough addresses in the identified pools to solve the address shortage. So it was in the end a fool's errand. If you want to have address space to address the current shortage, you need an addressing architecture with more addresses. I was there for those discussions, and I'm not sure how to put it more simply. ------------------------------ -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

7 9

Latest from ICANN: Quantum Computers + N85 Peering Forum
by Nanog News 20 Mar '22

20 Mar '22

Latest from ICANN: Quantum Computers are "Interesting"… But Don't Lose your Head *An Interview with ICANN, Paul Hoffman * In a recent publication, written by ICANN (Internet Corporation for Assigned Names and Numbers), chief technology officer Paul Hoffman discussed the hot topic of Quantum Computing and the DNS. NANOG had the opportunity to talk to Hoffman to better understand the current status + future of quantum computing. Learn what questions our community should be asking + and how much discussion we should be giving this topic at this time. *READ NOW <https://www.nanog.org/stories/latest-from-icann-quantum-computers-are-inter…>* Peering Forum: Now Accepting Applications Peering Coordination Forums are an incredible way to network with others in the industry! The 90-minute session will occur during the hybrid NANOG 85 conference, which will kick off in Montreal on Jun. 6. Please note that participants must be physically present to attend. NANOG 85 Peering Forum applications will remain open until we have received twenty applications or the deadline date of May 31. *SUBMIT NOW <https://www.nanog.org/events/nanog-85/peering-forum/>*

2 2