- Test - lists.nanog.org

Is Level(3) AS3356 absorbing GBLX AS3549
by Christopher J. Pilkington 24 Jan '13

24 Jan '13

Overnight BGPmon reports that 3356 was adjacent to our AS, but it is not. Only plausible situation I can think of is Level(3) absorbing the 3549 GlobalCrossing AS. Is this going on? Or am I suffering from insufficient caffeination? -cjp

2 1

(no subject)
by rr 24 Jan '13

24 Jan '13

http://flamingoservices.lv/lv/wp-content/plugins/yahool321.php

1 0

How to avoid security issues with VPN leaks on dual-stack networks
by Fernando Gont 24 Jan '13

24 Jan '13

Folks, Thought you might be interested... Techtarget has just published an article I've authored for them, entitled "How to avoid security issues with VPN leaks on dual-stack networks". The article is available at: <http://searchsecurity.techtarget.com/tip/How-to-avoid-security-issues-with-…> (Note: There are some banners (?) intermixed... but the whole article can be viewed without registration... just keep scrolling down!) Its "Abstract" is: ---- cut here ---- The imminent exhaustion of freely available IPv4 addresses has, over a number of years, led to the incorporation of IPv6 support by most general-purpose operating systems. However, many applications, such as VPN client and server software, have been lagging behind to become IPv6-ready. This results in scenarios in which dual-stacked hosts employ IPv6-unaware VPN software, thus opening the door to security vulnerabilities, such as VPN traffic leaks. In this tip, we'll discuss how these VPN security issues arise and the various mitigation options available for containing VPN traffic leaks. ---- cut here ---- P.S.: Any comments will be welcome. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

1 0

IP Address Management IPAM software for small ISP
by Eric A Louie 24 Jan '13

24 Jan '13

I'm looking for IPAM solutions for a small regional wireless ISP. There are 4 Tier 2 personnel and 2 NOC technicians who would be using the tool, and a small staff of engineers. They have regionalized IP addresses so blocks are local, but there are subnets that are global. don't care if it's a linux or windows solution. Need to be able to migrate from FreeIPdb (yes, I know, it's a dinosaur) We're not dealing with a lot now, but the potential for growth is pretty high. What are you using and how is it working for you? Much appreciated, Eric

30 48

CGN fixed/hashed nat question
by Eric Oosting 23 Jan '13

23 Jan '13

Let me start out by saying I'm allergic to CGN, but I got to ask the question: Some of the CGN providers are coming out with "fixed" nat solutions for their IPv6 transition/IPv4 preservation technologies to reduce logging. This appears to provide for a static mapping of outside ports/IPs to a particular customer such that the service provider doesn't need to log literally every session through the box. At the last nanog, I seem to remember someone stepping up and discussing the problems associated with just taking ports 1025 through 1025+X and giving it to some customer and had brought up the idea of using a hash or salt to map what would appear to be random ports to a customer in such a way that you could reverse the port back to the customer later if need be. For the life of me, I can't find anything on the internets about this concept. I had it in my head it was a lightning talk or something, but reviewing the agenda doesn't ring any bells. Anyone know what I'm talking about and what it's called? -e

10 17

Re: Security reporting response handling [was: Suggestions for the future on your web site]
by Scott Weeks 23 Jan '13

23 Jan '13

--- oscar.vives(a)gmail.com wrote: From: " ." <oscar.vives(a)gmail.com> weak. A more realistic reason is moral panic // he is making us look bad. Making stupid people look stupid should not be a crime. ------------------------------------------------- It's his wake up call ... oops, I mean his 'welcome' to the wonderful world of corporate/government/university politics. Welcome kid. This is what it's going to be like until you're too old to care... >;-) scott

1 0

Re: IP Address Management IPAM software for small ISP
by Chris Conn 23 Jan '13

23 Jan '13

> looking for IPAM solutions for a small regional wireless ISP. > There are 4 Tier 2 personnel and 2 NOC technicians who would be using > the tool, and a small staff of engineers. > Nobody uses HaCI?

2 2

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)
by Scott Weeks 23 Jan '13

23 Jan '13

--- jfmezei_nanog(a)vaxination.ca wrote: From: Jean-Francois Mezei <jfmezei_nanog(a)vaxination.ca> Either way, you still need to have either a cookie or a hidden form [...] ------------------------------------------------ But ONLY when needing to do a transaction. As I originally mentioned why force a cookie just to look around: no cookie, no lookie. :-( scott

8 7

Tw telecom noc/routing contact needed
by Eric J Esslinger 22 Jan '13

22 Jan '13

I've been fighting with an issue with a Time Warner Telecom customer whose site is unreachable from our ip blocks, as well as a number of other ip blocks within my upstream's network according to the call I made to them. All I'm getting through listed arin contacts are apparantly unmonitored maildrops and customer contact numbers that won't put me through to a live person without a valid TW phone or circuit number. Based on the behavior I suspect a reverse routing issue back to our ip blocks but have been unable to get much help from the other end of the problem. I need to speak to someone, and if someone reading this list can has info but doesn't want to share it, if they can pass my contact info on I can be contacted via this email or the phone number in my signature. Thank you. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

1 1

DNS resolver addresses for Sprint PCS/3G/4G
by Jay Ashworth 22 Jan '13

22 Jan '13

I've noticed, for quite some time, that there seems to be a specific category of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both their 3G and 4G networks, and I wonder if it isn't because the defined resolvers are 8.8.4.4 and 8.8.8.8, which aren't *on* Sprint's networks. Does anyone have, in their magic bag of tricks, IP addresses for resolvers that *are* native to that network, that they wouldn't mind whispering in my ear? I don't suppose Android's smart enough to swap that file around when the IP core notices the uplink has changed? (Yes, I know, that's properly a question for XDA-Devel...) Offlist is fine. Yes, I owe the list summaries on a couple earlier questions; I still have the details to write from. :-} Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

3 3