- Test - lists.nanog.org

Re: Email Server and Dm.
by Guillaume Parent 03 Nov '13

03 Nov '13

KNow On Nov 3, 2013 1:10 PM, "TR Shaw" <tshaw(a)oitc.com> wrote: > In addition to all the other reco's below, > > 1) only allow sending by your users from the submit port and only with > authentication. There should be no client sending through the SMTP port. > > 2) Implement SSL on POP & IMAP if at all possible Otherwise enforce > CRAM-MD5 > > 3) Review logs esp pop and imap login failures. > > 4) Turn off VRFY. > > On Nov 3, 2013, at 11:49 AM, Private Sender wrote: > > > Signed PGP part > > On 11/3/2013 8:39 AM, rwebb(a)ropeguru.com wrote: > > > So I figured a little break from the NSA was in order. > > > > > > I am looking for some info on current practice for an email server > > > and SMTP delivery. It has been a while since I have had to setup an > > > email server and I have been tasked with setting up a small one for > > > a friend. My question centers around the server sending outgoing > > > email and the current practices requirements for other servers to > > > accept email Things like rDNS, SPF records, etc... > > > > > > I am pretty much set on the issue of incoming spam and virus. > > > Probably overkill but it is checked at the Sophos UTM firewall and > > > at the email server itself. > > > > > > Thanks, > > > > > > Robert > > > > > > > MX, PTR, and SPF are really all you need. I would recommend you go a > > step further and use DKIM, ADSP, and DMARC. It will help keep asshat > > spammers from flaming your domain all over the internet. > > > > I use http://www.unlocktheinbox.com/ to verify my configuration. > > > > - -- > > - -Bret Taylor > > > > > >

1 0

RE: If you're on LinkedIn, and you use a smart phone...
by Phil Bedard 03 Nov '13

03 Nov '13

I had to answer the question of "Why is LinkedIn asking for my GMail account information" to one of my parents recently. "Oh it is so they can access your information and use it...". It is how some random guys I play tennis with in a league keep popping up as people I should add, since they likely succumbed to that prompt. Another practice of theirs I do not like. Phil From: Laszlo Hanyecz Sent: 10/26/2013 1:44 To: Chris Hartley Cc: Phil Bedard; Nanog Subject: Re: If you're on LinkedIn, and you use a smart phone... When a user signs up for a social media account they generally do so by providing an email address like victim(a)freewebmailsite.com and selecting a password. The social media site can obviously probe freewebmailsite.com and attempt to authenticate using the same password that you just provided to them (for the purpose of logging into their social media site). I guess offering an email proxy or asking if it's ok to worm through your email for contacts is merely a formality. How many social media users do you guess would use the same password on the social media site as they would for freewebmailsite.com (and likely their employer's organization's email)? It's kind of like when google asks their users with android phones to provide their mobile phone number for SMS password recovery. Laszlo On Oct 25, 2013, at 11:43 PM, Chris Hartley <hartleyc(a)gmail.com> wrote: > Anyone who has access to logs for their email infrastructure ought > probably to check for authentications to user accounts from linkedin's > servers. Likely, people in your organization are entering their > credentials into linkedin to add to their contact list. Is it a > problem if a social media company has your users' credentials? I > guess it depends on your definition of "is." The same advice might > apply to this perversion of trust as well, but I'm not sure how > linkedin is achieving this "feat." > > On Fri, Oct 25, 2013 at 7:25 PM, Phil Bedard <bedard.phil(a)gmail.com> wrote: >> I saw some antectdotal stuff on this yesterday but reading their >> engineering blog entry makes me feel all warm and fuzzy inside. Oh >> nevermind, that's just the alcohol. This is perhaps one of the worst >> ideas I've seen concocted by a social media company yet. >> >> >> -Phil >> >> On 10/25/13, 6:56 PM, "George Bakos" <gbakos(a)alpinista.org> wrote: >> >>> next thing you know, Google is going to be offering free email so they >>> can do the same thing. >>> >>> On Fri, 25 Oct 2013 08:45:40 -0700 >>> Shrdlu <shrdlu(a)deaddrop.org> wrote: >>> >>>> I hate to do this, but it's something that anyone managing email >>>> servers (or just using a smart phone to update LI) needs to know >>>> about. I just saw this on another list I'm on, and I know that there >>>> are folks on NANOG that are on LinkedIn. >>>> >>>> ++++++++++ >>>> http://www.bishopfox.com/blog/2013/10/linkedin-intro/ >>>> >>>> LinkedIn released a new product today called Intro. They call it >>>> ___doing the impossible___, but some might call it ___hijacking >>>> email___. >>>> Why do we say this? Consider the following: >>>> >>>> Intro reconfigures your iOS device (e.g. iPhone, iPad) so that all of >>>> your emails go through LinkedIn___s servers. You read that right. Once >>>> you install the Intro app, all of your emails, both sent and received, >>>> are transmitted via LinkedIn___s servers. LinkedIn is forcing all your >>>> IMAP and SMTP data through their own servers and then analyzing and >>>> scraping your emails for data pertaining to___whatever they feel like. >>>> >>>> ++++++++++ >>>> >>>> Read the full article. If you're using LI via your smart phone, and >>>> you have already installed this app, you probably need to save off >>>> your contacts and data, and wipe the phone. I wouldn't trust >>>> uninstalling as enough, myself. In the long run, I'll be deleting my >>>> account. >>>> >>>> No, I don't use a smart phone to update any social media. No, I >>>> especially do not trust LI (never have, never will). BTW, they're >>>> currently adding back any contacts you've deleted. Thanks for >>>> reminding me that Joe Barr, Len Sassaman, and Jay D Dyson are gone >>>> from this world. >>>> >>>> -- >>>> Life may not be the party we hoped for, but while we are here, >>>> we might as well dance. >>>> >>>> >>> >>> >>> -- >>> >> >> >> >

2 1

Changing Google Geodatabase information
by Bryan Socha 03 Nov '13

03 Nov '13

I've been searching for a way to submit updates to google for incorrect geodatabase information on our ip address assignments. does anyone have a contact or know how to do this? Thanks, Bryan Socha

2 1

Re: latest Snowden docs show NSA intercepts all Google and Yahoo DC-to-DC traffic
by Harry Hoffman 02 Nov '13

02 Nov '13

That's with a recommendation of using RC4. Head on over to the Wikipedia page for SSL/TLS and then decide if you want rc4 to be your preference when trying to defend against a adversary with the resources of a nation-state. Cheers, Harry Niels Bakker <niels=nanog(a)bakker.net> wrote: >* mikal(a)stillhq.com (Michael Still) [Fri 01 Nov 2013, 05:27 CET]: >>Its about the CPU cost of the crypto. I was once told the number of >>CPUs required to do SSL on web search (which I have now forgotten) >>and it was a bigger number than you'd expect -- certainly hundreds. > >False: https://www.imperialviolet.org/2010/06/25/overclocking-ssl.html > >"On our production frontend machines, SSL/TLS accounts for less than >1% of the CPU load, less than 10KB of memory per connection and less >than 2% of network overhead. Many people believe that SSL takes a lot >of CPU time and we hope the above numbers (public for the first time) >will help to dispel that." > > > -- Niels. >

9 8

RE: Reverse DNS RFCs and Recommendations
by Beng Hui Ong 02 Nov '13

02 Nov '13

we cannot assume that the connection between isp and cpe is a single entity. a typical example will be the guy who run the dslam and the guy who run the bras belong to two different companies in market which mandate open access. Alex Rubenstein <alex(a)corp.nac.net> wrote: >> >> Not necessarily. When the CPE is configured through DHCP (or PPP?), >> >> the ISP can send the secret. >> > >> > Which can be seen, in many cases, by other parties >> >> Who can see the packets sent from the local ISP to the CPE directly >> connected to the ISP? > >The NSA, FBI, CIA, DHS. Or, the ISP, the ISP's employees, contractors, sub-contractors. Or the phone company handling the PPPOE, L2TP, or whatever else. Or the WiFi sniffer on the street outside. > > > >

4 3

Re: latest Snowden docs show NSA intercepts all Google and Yahoo DC-to-DC traffic
by Harry Hoffman 02 Nov '13

02 Nov '13

So, I'm not sure if I'm being too simple-minded in my response. Please let me know if I am. The purpose of encrypting data is so others can't read your secrets. If you use a simple substitution cipher it's pretty easy to derive the set of substitution rules used. Stronger encryption algorithms employ more "difficult" math. Figuring out how to get from the ciphertext to the plaintext becomes a, computationally, difficult task. If your encryption algorithms are "good" *and* your source of random data is really random then the amount of time it takes to decrypt the data is so far out that it makes the data useless. Cheers, Harry Mike Lyon <mike.lyon(a)gmail.com> wrote: >So even if Goog or Yahoo encrypt their data between DCs, what stops >the NSA from decrypting that data? Or would it be done simply to make >their lives a bit more of a PiTA to get the data they want? > >-Mike > > > >> On Nov 1, 2013, at 19:08, Harry Hoffman <hhoffman(a)ip-solutions.net> wrote: >> >> That's with a recommendation of using RC4. >> Head on over to the Wikipedia page for SSL/TLS and then decide if you want rc4 to be your preference when trying to defend against a adversary with the resources of a nation-state. >> >> Cheers, >> Harry >> >> Niels Bakker <niels=nanog(a)bakker.net> wrote: >> >>> * mikal(a)stillhq.com (Michael Still) [Fri 01 Nov 2013, 05:27 CET]: >>>> Its about the CPU cost of the crypto. I was once told the number of >>>> CPUs required to do SSL on web search (which I have now forgotten) >>>> and it was a bigger number than you'd expect -- certainly hundreds. >>> >>> False: https://www.imperialviolet.org/2010/06/25/overclocking-ssl.html >>> >>> "On our production frontend machines, SSL/TLS accounts for less than >>> 1% of the CPU load, less than 10KB of memory per connection and less >>> than 2% of network overhead. Many people believe that SSL takes a lot >>> of CPU time and we hope the above numbers (public for the first time) >>> will help to dispel that." >>> >>> >>> -- Niels. >>>

3 2

BGP Update Report
by cidr-report＠potaroo.net 01 Nov '13

01 Nov '13

BGP Update Report Interval: 24-Oct-13 -to- 31-Oct-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS30693 118832 4.7% 242.0 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 2 - AS6407 53437 2.1% 1113.3 -- PRIMUS-AS6407 - Primus Telecommunications Canada Inc. 3 - AS9829 42413 1.7% 30.7 -- BSNL-NIB National Internet Backbone 4 - AS8402 31837 1.3% 18.8 -- CORBINA-AS OJSC "Vimpelcom" 5 - AS28573 31108 1.2% 8.6 -- NET Serviços de Comunicação S.A. 6 - AS6057 23257 0.9% 57.4 -- Administracion Nacional de Telecomunicaciones 7 - AS36998 22882 0.9% 12.3 -- SDN-MOBITEL 8 - AS10620 21791 0.9% 8.3 -- Telmex Colombia S.A. 9 - AS13118 21652 0.9% 470.7 -- ASN-YARTELECOM OJSC Rostelecom 10 - AS29990 21546 0.9% 1134.0 -- ASN-APPNEXUS - AppNexus, Inc 11 - AS7552 20464 0.8% 17.2 -- VIETEL-AS-AP Vietel Corporation 12 - AS35873 19784 0.8% 1798.5 -- MOVE-NETWORKS - Move Networks, inc. 13 - AS6849 17484 0.7% 19.6 -- UKRTELNET JSC UKRTELECOM, 14 - AS42334 17101 0.7% 1005.9 -- BBP-AS Broadband Plus s.a.l. 15 - AS4775 16743 0.7% 128.8 -- GLOBE-TELECOM-AS Globe Telecoms 16 - AS18403 14353 0.6% 24.9 -- FPT-AS-AP The Corporation for Financing & Promoting Technology 17 - AS8151 12915 0.5% 10.7 -- Uninet S.A. de C.V. 18 - AS9299 11499 0.5% 23.3 -- IPG-AS-AP Philippine Long Distance Telephone Company 19 - AS35819 11426 0.5% 22.2 -- MOBILY-AS Etihad Etisalat Company (Mobily) 20 - AS29049 11263 0.5% 33.4 -- DELTA-TELECOM-AS Delta Telecom LTD. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6174 6731 0.3% 3365.5 -- SPRINTLINK8 - Sprint 2 - AS56131 4957 0.2% 2478.5 -- UXCCONNECT-AS-AP UXC Connect Pty Ltd 3 - AS54465 8794 0.3% 2198.5 -- QPM-AS-1 - QuickPlay Media Inc. 4 - AS35873 19784 0.8% 1798.5 -- MOVE-NETWORKS - Move Networks, inc. 5 - AS37367 1569 0.1% 1569.0 -- CALLKEY 6 - AS6629 9342 0.4% 1557.0 -- NOAA-AS - NOAA 7 - AS28493 1549 0.1% 1549.0 -- Universidad Pedagogica Nacional 8 - AS5323 1326 0.1% 1326.0 -- DNIC-ASBLK-05120-05376 - DoD Network Information Center 9 - AS7202 8884 0.3% 1269.1 -- FAMU - Florida A & M University 10 - AS29990 21546 0.9% 1134.0 -- ASN-APPNEXUS - AppNexus, Inc 11 - AS6407 53437 2.1% 1113.3 -- PRIMUS-AS6407 - Primus Telecommunications Canada Inc. 12 - AS22592 5150 0.2% 1030.0 -- HBP - HBP, Inc. 13 - AS42334 17101 0.7% 1005.9 -- BBP-AS Broadband Plus s.a.l. 14 - AS50337 1912 0.1% 956.0 -- TETTAS-AS TETTAS SRL 15 - AS57130 1858 0.1% 929.0 -- SECPRAL-AS Secpral COM SRL 16 - AS51973 2656 0.1% 885.3 -- KOLT-AS Koltushsky Internet Ltd 17 - AS45808 882 0.0% 882.0 -- UTP-MY Bandar Seri Iskandar 18 - AS6775 5205 0.2% 867.5 -- BACKBONE_EHF_EUROPE Backbone ehf 19 - AS5487 4880 0.2% 697.1 -- Elisa Oyj 20 - AS62431 680 0.0% 680.0 -- NCSC-IE-AS National Cyber Security Centre TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/20 21588 0.8% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 103.243.220.0/22 21525 0.8% AS29990 -- ASN-APPNEXUS - AppNexus, Inc 3 - 23.90.5.0/24 21020 0.8% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 4 - 23.90.6.0/24 21013 0.8% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 5 - 8.20.2.0/24 19774 0.8% AS35873 -- MOVE-NETWORKS - Move Networks, inc. 6 - 62.84.76.0/24 17081 0.7% AS42334 -- BBP-AS Broadband Plus s.a.l. 7 - 23.90.21.0/24 13254 0.5% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 8 - 192.58.232.0/24 9337 0.3% AS6629 -- NOAA-AS - NOAA 9 - 206.152.15.0/24 8791 0.3% AS54465 -- QPM-AS-1 - QuickPlay Media Inc. 10 - 202.154.17.0/24 8682 0.3% AS4434 -- ERX-RADNET1-AS PT Rahajasa Media Internet 11 - 120.28.62.0/24 8278 0.3% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 12 - 222.127.0.0/24 8028 0.3% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 13 - 121.52.144.0/24 7887 0.3% AS17557 -- PKTELECOM-AS-PK Pakistan Telecommunication Company Limited AS45773 -- HECPERN-AS-PK PERN AS Content Servie Provider, Islamabad, Pakistan 14 - 67.210.190.0/23 5851 0.2% AS11976 -- FIDN - Fidelity Communication International Inc. 15 - 67.210.188.0/23 5210 0.2% AS11976 -- FIDN - Fidelity Communication International Inc. 16 - 79.134.225.0/24 5200 0.2% AS6775 -- BACKBONE_EHF_EUROPE Backbone ehf 17 - 208.91.124.0/22 5146 0.2% AS22592 -- HBP - HBP, Inc. 18 - 134.211.16.0/22 4955 0.2% AS56131 -- UXCCONNECT-AS-AP UXC Connect Pty Ltd 20 - 216.181.203.0/24 4763 0.2% AS6407 -- PRIMUS-AS6407 - Primus Telecommunications Canada Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 01 Nov '13

01 Nov '13

This report has been generated at Fri Nov 1 21:13:38 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 25-10-13 481005 273685 26-10-13 480922 272864 27-10-13 480241 273108 28-10-13 480622 271494 29-10-13 480919 271909 30-10-13 481209 272234 31-10-13 481352 272350 01-11-13 481734 272532 AS Summary 45515 Number of ASes in routing system 18684 Number of ASes announcing only one prefix 4185 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 118856704 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 01Nov13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 481879 272481 209398 43.5% All ASes AS6389 3056 59 2997 98.1% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 3432 461 2971 86.6% NET Serviços de Comunicação S.A. AS17974 2710 135 2575 95.0% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS7029 4185 1872 2313 55.3% WINDSTREAM - Windstream Communications Inc AS22773 2191 147 2044 93.3% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4766 2937 951 1986 67.6% KIXS-AS-KR Korea Telecom AS10620 2641 1051 1590 60.2% Telmex Colombia S.A. AS18566 2057 567 1490 72.4% MEGAPATH5-US - MegaPath Corporation AS4323 2960 1538 1422 48.0% TWTC - tw telecom holdings, inc. AS18881 1523 105 1418 93.1% Global Village Telecom AS36998 1854 457 1397 75.4% SDN-MOBITEL AS7303 1724 466 1258 73.0% Telecom Argentina S.A. AS1785 2036 818 1218 59.8% AS-PAETEC-NET - PaeTec Communications, Inc. AS4755 1787 583 1204 67.4% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS7552 1191 138 1053 88.4% VIETEL-AS-AP Vietel Corporation AS22561 1245 219 1026 82.4% DIGITAL-TELEPORT - Digital Teleport Inc. AS35908 911 89 822 90.2% VPLSNET - Krypt Technologies AS7545 2102 1282 820 39.0% TPG-INTERNET-AP TPG Telecom Limited AS18101 980 180 800 81.6% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS4808 1158 404 754 65.1% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS24560 1092 367 725 66.4% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS701 1508 785 723 47.9% UUNET - MCI Communications Services, Inc. d/b/a Verizon Business AS8151 1355 637 718 53.0% Uninet S.A. de C.V. AS6983 1293 584 709 54.8% ITCDELTA - ITC^Deltacom AS13977 852 143 709 83.2% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS6147 792 108 684 86.4% Telefonica del Peru S.A.A. AS4788 844 171 673 79.7% TMNET-AS-AP TM Net, Internet Service Provider AS855 726 55 671 92.4% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS4780 1000 335 665 66.5% SEEDNET Digital United Inc. AS7738 780 137 643 82.4% Telemar Norte Leste S.A. Total 52922 14844 38078 72.0% Top 30 total Possible Bogus Routes 23.92.224.0/23 AS55048 VMWARE - VMware, Inc. 23.92.226.0/23 AS55048 VMWARE - VMware, Inc. 23.92.228.0/23 AS55048 VMWARE - VMware, Inc. 23.92.230.0/23 AS55048 VMWARE - VMware, Inc. 23.92.232.0/23 AS55048 VMWARE - VMware, Inc. 27.54.116.0/22 AS55452 27.54.116.0/24 AS55452 27.54.119.0/24 AS55452 27.100.7.0/24 AS56096 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.25.16.0/23 AS19535 64.25.20.0/24 AS19535 64.25.21.0/24 AS19535 64.25.22.0/24 AS19535 64.25.27.0/24 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business 64.57.192.0/22 AS33321 BALTICORE - Balticore, LLC 64.57.196.0/22 AS40927 AS-SWWG-LLC - SWWG, LLC 64.57.200.0/21 AS40927 AS-SWWG-LLC - SWWG, LLC 64.111.0.0/20 AS8039 CCC-ASN-1 - Cinergy Communications 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 65.37.240.0/20 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 65.37.243.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 65.37.247.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 65.37.250.0/24 AS11133 65.37.251.0/24 AS11133 65.37.252.0/24 AS11133 65.37.253.0/24 AS11133 65.37.254.0/24 AS11133 65.37.255.0/24 AS11133 65.61.48.0/20 AS33005 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc. 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc. 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.11.112.0/20 AS14572 66.55.96.0/23 AS17203 66.55.98.0/24 AS17203 66.55.99.0/24 AS17203 66.55.100.0/22 AS17203 66.55.102.0/23 AS17203 66.55.104.0/21 AS17203 66.96.16.0/20 AS30528 66.96.22.0/24 AS32517 DOTINC-NET - Dot Internet Solutions Inc. 66.180.64.0/21 AS32558 ZEUTER - Zeuter Development Corporation 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.187.240.0/20 AS14552 ACS-SOUTHEASTDATACENTER - Affiliated Computer Services, Inc. 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 66.212.48.0/20 AS40927 AS-SWWG-LLC - SWWG, LLC 66.212.56.0/21 AS40927 AS-SWWG-LLC - SWWG, LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.254.160.0/20 AS11402 CCCAS-1 - Charlotte Colocation Center, LLc 66.254.176.0/21 AS11402 CCCAS-1 - Charlotte Colocation Center, LLc 66.254.184.0/22 AS11402 CCCAS-1 - Charlotte Colocation Center, LLc 66.254.188.0/22 AS35916 MULTA-ASN1 - MULTACOM CORPORATION 67.21.144.0/22 AS174 COGENT Cogent/PSI 67.21.148.0/22 AS174 COGENT Cogent/PSI 67.206.160.0/19 AS33005 67.206.190.0/24 AS33005 67.206.191.0/24 AS33005 68.69.96.0/21 AS32986 68.69.96.0/24 AS32986 68.69.104.0/21 AS32986 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.0.64.0/20 AS30528 72.0.78.0/23 AS18446 KIHEW-TECHNOLOGIES-INC - Kihew Technologies Inc. 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS6246 AVALONTEL - AvalonTel 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.112.100.0/22 AS16764 74.112.200.0/21 AS11288 74.112.205.0/24 AS11288 74.114.52.0/22 AS40818 74.114.140.0/22 AS32757 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 91.193.60.0/22 AS3356 LEVEL3 Level 3 Communications 91.195.66.0/23 AS3356 LEVEL3 Level 3 Communications 91.197.36.0/22 AS43359 91.199.90.0/24 AS44330 91.200.188.0/22 AS44016 91.207.152.0/24 AS64100 91.207.153.0/24 AS64100 91.209.115.0/24 AS31103 KEYWEB-AS Keyweb AG 91.209.163.0/24 AS48445 91.212.54.0/24 AS21409 IKOULA Ikoula Net SAS 93.190.8.0/24 AS47254 93.190.9.0/24 AS47254 93.190.10.0/24 AS47254 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.13.184.0/23 AS58674 115.166.130.0/23 AS45423 115.166.132.0/24 AS45423 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 124.64.0.0/10 AS4847 CNIX-AP China Networks Inter-Exchange 164.40.184.0/24 AS19821 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 174.136.192.0/18 AS14572 190.3.160.0/21 AS27975 SYNAPSIS COLOMBIA LTDA 190.15.72.0/21 AS15146 CABLEBAHAMAS - Cable Bahamas 190.124.252.0/22 AS7303 Telecom Argentina S.A. 192.166.32.0/20 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 193.9.59.0/24 AS1257 TELE2 193.22.224.0/20 AS3322 193.22.238.0/23 AS6824 HERMES-NETWORK Hermes Telecom International Ltd 193.33.66.0/23 AS39874 193.33.112.0/23 AS8586 OBSL-AS TalkTalk Communications Limited 193.109.15.0/24 AS12690 MKSNET-AS MKS Autonomous System 193.109.224.0/24 AS47427 193.111.30.0/23 AS24734 193.164.152.0/24 AS3356 LEVEL3 Level 3 Communications 193.178.217.0/24 AS20737 193.188.252.0/24 AS8697 JTC-AS8697 Jordan Telecommunications Company 193.202.8.0/21 AS3322 193.254.218.0/23 AS25229 VOLIA-AS Kyivski Telekomunikatsiyni Merezhi LLC 194.50.82.0/24 AS16276 OVH OVH Systems 194.63.152.0/22 AS3356 LEVEL3 Level 3 Communications 194.79.48.0/22 AS39117 194.113.27.0/24 AS12518 SHLINK SHLINK Internet Service 194.126.219.0/24 AS34545 195.114.4.0/23 AS41158 195.128.240.0/23 AS21202 DCSNET-AS Bredband2 AB 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA 195.234.156.0/24 AS25028 195.248.240.0/23 AS34169 MEDIA-COM-TYCHY Media-Com Sp. z o.o. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.58.0.0/18 AS14551 UUNET-SA - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.2.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.3.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.4.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.5.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.6.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.8.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.9.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.12.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.13.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.31.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.34.0/24 AS14551 UUNET-SA - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.35.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.39.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.40.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.41.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.42.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.43.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.44.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.45.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.46.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.47.0/24 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 200.58.52.0/24 AS16814 NSS S.A. 200.58.53.0/24 AS16814 NSS S.A. 200.58.54.0/24 AS16814 NSS S.A. 200.58.55.0/24 AS16814 NSS S.A. 200.58.248.0/21 AS27849 201.71.16.0/20 AS28638 EMTEC EMPRESA DE TECNOLOGIA EMPREENDIMENTOS DE COM 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.49.33.0/24 AS7657 VODAFONE-NZ-NGN-AS Vodafone NZ Ltd. 202.58.113.0/24 AS19161 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 203.191.48.0/20 AS24175 VINAREN-AS-AP VietNam Research and Education Network 203.191.56.0/21 AS38042 INCOMNET-MONGOLIA-AS-AP Incomnet LLC, Mongolia, VSAT and Wireless service 204.9.32.0/24 AS25617 204.9.33.0/24 AS25617 204.9.34.0/24 AS25617 204.9.35.0/24 AS25617 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC 204.69.144.0/24 AS27283 RJF-INTERNET - Raymond James Financial, Inc. 204.106.16.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.115.250.0/24 AS32880 SMOOTHSTONE-IP-COMMUNICATIONS-CORP - Smoothstone IP Communications Corporation 204.115.251.0/24 AS32880 SMOOTHSTONE-IP-COMMUNICATIONS-CORP - Smoothstone IP Communications Corporation 204.115.252.0/23 AS32880 SMOOTHSTONE-IP-COMMUNICATIONS-CORP - Smoothstone IP Communications Corporation 204.187.11.0/24 AS51113 ELEKTA-AS Elekta 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.81.112.0/20 AS32618 ADKNO-KC - Adknowledge, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 208.66.120.0/22 AS32757 208.66.225.0/24 AS3549 GBLX Global Crossing Ltd. 208.66.227.0/24 AS3549 GBLX Global Crossing Ltd. 208.74.224.0/22 AS174 COGENT Cogent/PSI 208.75.152.0/21 AS32146 208.76.20.0/24 AS31812 208.76.21.0/24 AS31812 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.78.128.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.78.129.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.78.130.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.78.132.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.78.133.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.78.134.0/24 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.85.116.0/23 AS25956 ALPHEUS - Alpheus Data Services, L.L.C. 208.85.212.0/22 AS32618 ADKNO-KC - Adknowledge, Inc. 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.90.64.0/22 AS16415 PRCNET-DOM - Precision Response Corporation 208.91.72.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 208.92.224.0/22 AS32757 208.117.128.0/18 AS36859 209.87.144.0/21 AS21919 209.87.152.0/22 AS21919 209.87.156.0/24 AS21919 209.87.157.0/24 AS21919 209.87.158.0/24 AS21919 209.87.159.0/24 AS21919 209.161.96.0/20 AS8039 CCC-ASN-1 - Cinergy Communications 209.169.224.0/19 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 209.169.228.0/24 AS11133 209.169.233.0/24 AS11133 209.169.236.0/24 AS11133 209.169.242.0/24 AS11133 209.169.243.0/24 AS11133 209.169.244.0/24 AS11133 209.169.245.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.246.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.247.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.248.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.249.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.250.0/24 AS4323 TWTC - tw telecom holdings, inc. 209.169.251.0/24 AS2685 ASATTCA AT&T Global Network Services - CA 209.169.252.0/24 AS11133 209.169.253.0/24 AS11133 209.169.254.0/24 AS11133 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.193.112.0/20 AS209 ASN-QWEST-US NOVARTIS-DMZ-US 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP. 209.209.64.0/20 AS46851 IPARADIGMS - iParadigms, LLC 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc 209.213.0.0/20 AS33005 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 212.119.32.0/19 AS12550 213.184.64.0/24 AS13071 213.184.65.0/24 AS13071 213.184.66.0/24 AS13071 213.184.67.0/24 AS13071 213.184.68.0/24 AS13071 213.184.69.0/24 AS13071 213.184.70.0/24 AS13071 213.184.71.0/24 AS13071 213.184.72.0/24 AS13071 213.184.73.0/24 AS13071 213.184.74.0/24 AS13071 213.184.75.0/24 AS13071 213.184.76.0/24 AS13071 213.184.77.0/24 AS13071 213.184.78.0/24 AS13071 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.14.64.0/20 AS14728 216.99.64.0/24 AS1678 DOW - The Dow Chemical Company 216.99.65.0/24 AS1678 DOW - The Dow Chemical Company 216.99.68.0/24 AS1678 DOW - The Dow Chemical Company 216.99.82.0/24 AS1678 DOW - The Dow Chemical Company 216.99.83.0/24 AS1678 DOW - The Dow Chemical Company 216.99.85.0/24 AS1678 DOW - The Dow Chemical Company 216.99.87.0/24 AS1678 DOW - The Dow Chemical Company 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Integra Telecom BGP contact
by Joseph Jackson 01 Nov '13

01 Nov '13

Anyone from Integra Telecom who knows their BGP routing on list? I have an open ticket but can't get past the noc techs and the issue is a weird one. Thanks!

2 1

Re: large scale ipsec
by Scott Weeks 01 Nov '13

01 Nov '13

--- morrowc.lists(a)gmail.com wrote: From: Christopher Morrow <morrowc.lists(a)gmail.com> One good reason to not do link encryption is: "the problem is that whackadoodle box you put outside the router!" :( most often those boxes can't do light-level monitoring, loopbacks, etc... all the stuff your NOC wants to do when 'link flapped,doh!' happens. ----------------------------------------------------- Yes! It is really hard to work with those things for the reasons you mention and they tend to be the culprit quite often. Also, a lot of times it adds more finger pointing as there tends to be a different group taking care of just the bulk encryptors. Last, I have seen some strange behaviors, such as not passing BPDUs. That makes VLANing *phun*. Not! scott

1 0