- Test - lists.nanog.org

Re: [nznog] Web Servers: Dual-homing or DNAT/Port Forwarding?
by Alex White-Robinson 11 Dec '13

11 Dec '13

Wotcha, >Number 1 gets you thinking along the IPv6 route (no pun, and imho :) ) >since you have to treat each boxes as if it was public. I see this kind of statement surprisingly often. Having a public address doesn't make a device public. I don't really see a drive to have devices exposed to the internet without a stateful device in front of them in IPv6 world. People shouldn't allow unsolicited connections to hit your internal workstation on any address scheme. Cheers, Alex. Date: Tue, 10 Dec 2013 05:56:41 +1300 From: Pieter De Wit <pieter(a)insync.za.net> To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] Web Servers: Dual-homing or DNAT/Port Forwarding? Message-ID: <52A5F649.7070904(a)insync.za.net> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" Hi, I normally use a combination of "1" and "2". I prefer 1 for weird and "not nat friendly" protocols, like SIP or some other application. The general rule of thumb is to use number 2 in other cases. In both setups, remember to deploy local firewalls as well. This will help for the case when a box on the subnet is hacked. My other twist is to deploy "1" without the private NIC, along with local firewalls (and as you said, dedicated FW). Number 1 gets you thinking along the IPv6 route (no pun, and imho :) ) since you have to treat each boxes as if it was public. Cheers, Pieter

5 4

Contact for www.army.mil (AS1503 )
by Christopher Morrell 11 Dec '13

11 Dec '13

Hi, We are currently having routing issues between one of our customers and www.army.mil which is originated from AS1503. Does anyone have a contact for AS1503? We've tried the ARIN contacts for AS1503 but have not received any response. Thanks, Chris Fibrenoire AS22652

4 3

Equinix type colo/Data Center in South Korea
by Shahid Shafi 11 Dec '13

11 Dec '13

I am wondering if anyone has experience hosting services in South Korea, who did you choose for colocation services and in what city? thanks, shahid

2 1

Cogent & Level 3 routing issue?
by Matthew Crocker 10 Dec '13

10 Dec '13

Anyone seeing issues between Cogent & Level3 in NYC? I have Sprint & Cogent for bandwidth. Everything has been humming along for a couple years just fine. Yesterday around 8:00AM my BGP session with Cogent flapped. Now, when my Cogent BGP is up I get 100% packet loss in level3 land. When Cogent BGP is down (i.e. I’m running solely on Sprint) Everything is fine. I have an open ticket with Cogent. They say they have a ‘capacity issue’ with level3 that has been escalated to executive levels. With Sprint & Cogent BGP UP I see traceroutes showing traffic leaving me on Sprint but returning on Cogent (and failing at level3). I’m guessing it is the level3/cogent border With Sprint UP & Cogent Down I see trace routes showing traffic on to/from on Sprint just fine. Anyone else having issues? -Matt -- Matthew S. Crocker President Crocker Communications, Inc. PO BOX 710 Greenfield, MA 01302-0710 E: matthew(a)crocker.com P: (413) 746-2760 F: (413) 746-3704 W: http://www.crocker.com

4 5

Network Lifecycle Management - anybody???
by Stefan 09 Dec '13

09 Dec '13

As $subj may infer, do you guys follow any type of network lifecycle in your environment? If so - what would be some criteria you would consider critical: - consistent rate of cash flow, year after year, while replacing aging gear (allowing for consistent budgetary planning) - risk reduction while replacing unsupported equipment - security issues associated with OS or appliances not supported - business / apps demand for capacity or features (e.g. virtualization, SDN, etc.), laid out well in advance to allow for a 3-4-5 yrs plan with a consistent replacement rate of aging equipment - increased costs of support for aging equipment, or recertification for vendor support - anything else ... ??? Care to share some [other] aspects, as they may relate to $subj? Thanks, ***Stefan

2 1

Re: turning on comcast v6
by Cutler James R 09 Dec '13

09 Dec '13

On Dec 9, 2013, at 12:32 PM, Gary Buhrmaster <gary.buhrmaster(a)gmail.com> wrote: > On Mon, Dec 9, 2013 at 4:51 PM, Cutler James R > <james.cutler(a)consultant.com> wrote: > .... >> >> I opted for my minimal-effort solution. I installed a Motorola SB6121 and a 5th gen Airport Extreme and turned them on. Of course I configured the Airport Extreme with a name, management password, and confirmed IPv6 was set to to configure Automatically and Native. When the Comcast drop was plugged in and Comcast authorized the modem, I had a multistacked LAN. >> >> Going on 11 months of IPv4/IPv6 service. I’ve had about 1 hour of downtime. > > Not having the device, but a friend does (who has asked about > IPv6 support), does the Airport Extreme support prefix delegation > with a separate guest IPv6 delegation from the non-guest address? > When I looked at the Apple forums, I only saw questions, no > answers regarding that support. > > Gary My testing on OS X Mavericks shows that an Airport5,117 with firmware 7.6.4 creates the guest wireless network: 1. With an IPv4 address from an automatically assigned RFC1918 LAN connected through NAT to WAN. 2. With NO IPv6 addressing of any kind. My conclusion is that Apple does not yet support IPv6 in any fashion for Wireless Guest networks. James R. Cutler james.cutler(a)consultant.com

3 4

Re: turning on comcast v6
by Cutler James R 09 Dec '13

09 Dec '13

On Dec 9, 2013, at 12:32 PM, Gary Buhrmaster <gary.buhrmaster(a)gmail.com> wrote: > On Mon, Dec 9, 2013 at 4:51 PM, Cutler James R > <james.cutler(a)consultant.com> wrote: > .... >> According to Comcast’s DOCSIS Devices page, http://mydeviceinfo.comcast.net/?s=i&so=1&e=0&d3=1&tier=-1&sc=84, the Cisco DPC3008 is not supported for IPv6. You could always try enabling IPv6 on a system directly connected to the Cisco and see what happens. I’m not optimistic. > > Are you sure you are looking at the correct page? The DPC3008 shows > are supported with IPv6 to me, and since I am using it, it does seem to > work.... The DPC3000, on the other hand is not supported. Oops, I slipped up or down a line scanning across the page. I am now more optimistic. Cutler

1 0

blogs.cisco.com not available via IPv6
by Henri Wahl 09 Dec '13

09 Dec '13

Hi, can anybody from Cisco confirm that blogs.cisco.com (2001:4800:13c1:10::178) is not available via IPv6? Regards -- Henri Wahl IT Department Leibniz-Institut fuer Festkoerper- u. Werkstoffforschung Dresden tel: (03 51) 46 59 - 797 email: h.wahl(a)ifw-dresden.de http://www.ifw-dresden.de Nagios status monitor Nagstamon: http://nagstamon.ifw-dresden.de DHCPv6 server dhcpy6d: http://dhcpy6d.ifw-dresden.de IFW Dresden e.V., Helmholtzstrasse 20, D-01069 Dresden VR Dresden Nr. 1369 Vorstand: Prof. Dr. Juergen Eckert, Dr. h.c. Dipl.-Finw. Rolf Pfrengle

11 12

JANOG 33 Program Published
by Izumi Okutani 09 Dec '13

09 Dec '13

Dear Colleagues, We have published the program for JANOG 33 and welcome you to join us in Beppu City, Japan, from 23rd-24th Jan 2014. Most sessions are in Japanese only but there are a few sessions in English. You are also welcome to connect with us through facebook and twitter for updates in English. The JANOG SNS accounts are open to everyone, including those who are not able to attend the meeting. See you in Beppu. Cheers, Shinichi Yamamoto, Chin Sze Yih, Izumi Okutani JANOG Internationalization team for JANOG 33 ----- JANOG 33 Program : ------------------------ The Program is available in English at: http://www.janog.gr.jp/en/index.php?JANOG33%20Programs%2FJANOG33%20Program%… Translations of the program titles and abstracts were supported by volunteers on the best efforts basis. Note: During the meeting, there will be no official interpretations in English, except for the sessions marked as (English session). Registration : ------------------------ You can register online at: https://regist.e-side.co.jp/product_info.php?products_id=427&language=en 　Deadline: 10th Jan 2014 JST 15:00 SNS Accounts : ------------------------ Facebook : https://www.facebook.com/janogmeetingi18n Twitter : https://twitter.com/janog_i18n

1 0

ICANN related question...
by Eric Tykwinski 09 Dec '13

09 Dec '13

We have a customer that purchased a domain through a reseller of register.com. The Whois records only point to the actual company and the originating accredited registrar: register.com. Does anyone know of any hints to find out who the reseller is? Apparently Register.com can't supply us with that information. Just in case anyone is wondering: Domain ID:D96747839-LROR Domain Name:GIRLSINCDE.ORG Created On:21-Apr-2003 18:39:46 UTC Last Updated On:20-Nov-2013 22:11:57 UTC Expiration Date:21-Apr-2014 18:39:46 UTC Sponsoring Registrar:Register.com, Inc. (R71-LROR) Status:CLIENT TRANSFER PROHIBITED Registrant ID:F50A8CB8E137E659 Registrant Name:Lori Cooney Registrant Organization:Girls Incorporated of Delaware Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 F: 610-429-3222

5 4