November 2023 - Test - lists.nanog.org

swedish dns zone enumerator
by Randy Bush 03 Nov '23

03 Nov '23

i have blocked a zone enumerator, though i guess they will be a whack-a-mole others have reported them as well /home/randy> sudo tcpdump -pni vtnet0 -c 10 port 53 and net 193.235.141 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on vtnet0, link-type EN10MB (Ethernet), capture size 262144 bytes 22:42:39.516849 IP 193.235.141.90.32768 > 666.42.7.11.53: 14 NS? 33j4h.org.al. (30) 22:42:39.517640 IP 193.235.141.17.32768 > 666.42.7.11.53: 14 NS? 33m6d.xn--mgbayh7gpa. (38) 22:42:39.519169 IP 193.235.141.17.32768 > 666.42.7.11.53: 14 NS? 33lxd.tn. (26) 22:42:39.520064 IP 193.235.141.171.32768 > 666.42.7.11.53: 14 NS? 33md6.jo. (26) 22:42:39.521081 IP 193.235.141.247.32768 > 666.42.7.11.53: 14 NS? 33lxd.lb. (26) 22:42:39.523981 IP 193.235.141.162.32768 > 666.42.7.11.53: 14 NS? 33pd2.az. (26) 22:42:39.525043 IP 193.235.141.60.32768 > 666.42.7.11.53: 14 NS? 33nc5.com.al. (30) 22:42:39.526185 IP 193.235.141.209.32768 > 666.42.7.11.53: 14 NS? 33nc5.sz. (26) 22:42:39.527931 IP 193.235.141.150.32768 > 666.42.7.11.53: 14 NS? 33q5p.com.al. (30) 22:42:39.529516 IP 193.235.141.210.32768 > 666.42.7.11.53: 14 NS? 33qbq.com.al. (30) 10 packets captured 124 packets received by filter 0 packets dropped by kernel inetnum: 193.235.141.0 - 193.235.141.255 netname: domaincrawler-hosting descr: domaincrawler hosting org: ORG-ABUS1196-RIPE country: SE admin-c: VIJE1-RIPE tech-c: VIJE1-RIPE status: ASSIGNED PA notify: c+1196(a)resilans.se mnt-by: RESILANS-MNT mnt-routes: ETTNET-LIR created: 2008-04-03T11:21:00Z last-modified: 2017-04-10T12:47:06Z source: RIPE randy

6 9

Network Solutions NOC Contact
by Shahid Shafi 02 Nov '23

02 Nov '23

Hi All, Can anyone from Network Solutions NOC or ops reach out to me asap? We are dealing with a business critical issue and need your help urgently. The issue is related to DNS propagation. thanks Shahid

1 0

Congrats Board Members! Exploring N89 w/ Kentik’s Justin Ryburn + Playlist on YouTube
by Nanog News 02 Nov '23

02 Nov '23

*C**ongratulations Board Members! * Congratulations Cat Gurinsky + Vincent Celindro, for being elected to the NANOG Board of Directors! We are grateful for your service and look forward to your upcoming term. *NANOG 89 Playlist is on YouTube! * Have you subscribed to our YouTube channel? Watch all N89 presentations on our "NANOG 89 Playlist." *WATCH NOW* https://m.youtube.com/watch?v=BdnVdJ8_gK8&list=PLO8DR5ZGla8g_ 8k95Rjhgf2Jx2touuPJ4 *NANOG 90 Meeting Host: We Want You!* * Invest in the Strength of the Community We Have Built* NANOG is, and always has been, dedicated to the people who make up our community. Our in-person conferences draw up to 1,500 individuals in multiple facets of network engineering, operations, and architecture, who gather with us in major cities across North America. Our next meeting will take place in Charlotte, NC 12-14, February, 2024. Your organization will receive top branding above all other sponsors. Contact Shawn Winstead swinstead(a)nanog.org for more details. *Guest Blog: Exploring NANOG's Most Recent Meeting * *Deep Dive into N89 San Diego w/ Kentik's Justin Ryburn * *“As the networking landscape evolves, events like NANOG 89 are pivotal in fostering collaboration, knowledge sharing, and innovation."* Check out Ryburn's highlights and thoughts on attending N89. *READ MORE * https://nanog.org/stories/articles/exploring-nanog-89/

1 0

Pulling of Network Maps
by Mike Hammett 02 Nov '23

02 Nov '23

Has anyone else noticed a trend of some network operators that previously offered street-level detailed maps, not only upon request, but also posted publicly have started to only provide them upon quotes? Not even the popular online mapping services have current-enough-to-be-useful maps. The claim is that it's proprietary. A) It wasn't before and B) No it isn't. Everything you've ever done is a FOIA request or 811 design ticket away. I'm not sure how this helps the companies. It certainly makes it harder for me trying to piece networks together when they won't tell me where they are until I give them A and Z locations. If it's too hard for me to figure out where you are, you just plain won't get the sale. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

12 16

Charter DNS servers returning invalid IP addresses
by Jason J. Gullickson 01 Nov '23

01 Nov '23

I've been working for a week or so to solve a problem with DNS resolution for Charter customers for our domain bonesinjars.com. I've reached-out to Charter directly but since I'm not a customer I couldn't get any help from them. I was directed by a friend to this list in hopes that there may be able to reach a Charter/Spectrum engineer who might be able to explain and/or resolve this one. A dig against Google's DNS servers correctly returns 4 A records: dig bonesinjars.com 8.8.8.8 ; <<>> DiG 9.18.12-0ubuntu0.22.04.3-Ubuntu <<>> bonesinjars.com 8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31383 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;bonesinjars.com. IN A ;; ANSWER SECTION: bonesinjars.com. 60 IN A 198.49.23.145 bonesinjars.com. 60 IN A 198.185.159.145 bonesinjars.com. 60 IN A 198.49.23.144 bonesinjars.com. 60 IN A 198.185.159.144 ;; Query time: 1039 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP) ;; WHEN: Mon Oct 23 10:26:32 CDT 2023 ;; MSG SIZE rcvd: 108 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26879 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;8.8.8.8. IN A ;; Query time: 35 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP) ;; WHEN: Mon Oct 23 10:26:32 CDT 2023 ;; MSG SIZE rcvd: 36 Verizon, AT&T, Comcast and all other DNS servers we tested return the same 4 A records. However the same dig against a Charter DNS (24.196.64.53) returns only 127.0.0.54: dig bonesinjars.com 24.196.64.53 ; <<>> DiG 9.16.1-Ubuntu <<>> bonesinjars.com 24.196.64.53 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17691 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;bonesinjars.com. IN A ;; ANSWER SECTION: bonesinjars.com. 60 IN A 127.0.0.54 ;; Query time: 55 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) ;; WHEN: Tue Oct 24 13:28:36 CDT 2023 ;; MSG SIZE rcvd: 60 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4658 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;24.196.64.53. IN A ;; ANSWER SECTION: 24.196.64.53. 86400 IN A 24.196.64.53 ;; Query time: 27 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) ;; WHEN: Tue Oct 24 13:28:36 CDT 2023 ;; MSG SIZE rcvd: 57 Any help understanding and addressing this is greatly appreciated! Jason

21 37

165 Halsey recurring power issues
by Babak Pasdar 01 Nov '23

01 Nov '23

Hello, I wanted to get some feedback as to what is considered standard A/B power setup when data centers sell redundant power. It has always been my understanding that A/B power means individually unique and preferably alternate path connections to disparate UPS units. A few months ago, 165 Halsey took us down for several hours. They claimed that a UPS failed causing this issue. Our natural reaction was that we have A/B redundant power so a failed UPS on the A circuit should not take down the cabinet. Joe the facility manager claimed that industry standard A/B power means two circuits to the same UPS, which makes no sense to me. They committed to move us to A/B power with redundant circuits to disparate UPS units. However, we had a multi-hour outage again in that site this weekend. At first glance it seems to be the same problem. We have checked with all of our other data center providers who have confirmed A/B power is in fact individually unique connections to disparate UPS units. 165 Halsey's definition of what constitutes redundant power seems unique. Why would anyone pay extra for a second connection to the same UPS? However, I wanted to get feedback to see if I am taking crazy pills here 🙂 None-the-less, we have lost all confidence in this facility. Best Regards, Babak

9 15