- Test - lists.nanog.org

Re: FYI Netflix is down
by Ryan Malayter 11 Jul '12

11 Jul '12

Jon Lewis wrote: > It seems like if you're going to outsource your mission critical > infrastructure to "cloud" you should probably pick at least 2 > unrelated cloud providers and if at all possible, not outsource the > systems that balance/direct traffic...and if you're really serious > about it, have at least two of these setup at different facilities > such that if the primary goes offline, the secondary takes over. If a > cloud provider fails, you redirect to another. Really, you need at least three independent providers. One primary (A), one backup (B), and one "witness" to monitor the others for failure. The witness site can of course be low-powered, as it is not in the data plane of the applications, but just participates in the control plane. In the event of a loss of communication, the majority clique wins, and the isolated environments shut themselves down. This is of course how any sane clustering setup has protected against "split brain" scenarios for decades. Doing it the right way makes the cloud far less cost-effective and far less "agile". Once you get it all set up just so, change becomes very difficult. All the monitoring and fail-over/fail-back operations are generally application-specific and provider-specific, so there's a lot of lock-in. Tools like RightScale are a step in the right direction, but don't really touch the application layer. You also have to worry about the availability of yet another provider! -- RPM

4 5

Re: [c-nsp] automatic bgp route refresh
by Joe Maimon 11 Jul '12

11 Jul '12

Joe Maimon wrote: > Hey All, > > I would greatly appreciate it if somebody would point me to the release > notes for the change I see in 15.1 where BGP neighbor route-map > configurations happen in real time, without needing any clearing, soft > or otherwise. > > Much obliged. > > Best, > > Joe So I opened the TAC case, went through the repro multiple times, documented it, webexed it, discussed it. First I am told that there is an undocumented command to turn it off. " The feature we are talking about is route refresh capability this is a bgp hidden command which will not negotiate this capability and you will have to manually refresh routes after making any configuration changes. neighbor x.x.x.x dont-capability-negotiate enhanced-refresh " Which does not work. Then I am told that all IOS have been updated to do this and that there are no publicly available release notes for this change and if I want any further help, I need to have my account manager convince them that I am worthy. Which seems to be the way they try to resolve all cases these days. Cisco support has sunk to new levels. You end up paying them to sadistically torture and tantalize you. Which I am not into. I remember when they would actually file a bug when you found one (with a mtrr +-2yrs). Best, Joe

1 0

U.S. spy agencies ... email for cybersecurity
by William Allen Simpson 11 Jul '12

11 Jul '12

Somebody needs to give them a clue-by-four. The private sector already has the "Internet address where an email ... originated"; it's already in the Received lines. We don't need to be informed about it, we already inform each other about it. And it's already delivered "at network speed." It is my understanding the Dept of Homeland Security already cooperates in sharing government intrusion information. We certainly don't need a "U.S. spy agency" MITM to "protect the private sector." Moreover, the US is the source of most spam and malware, so the NSA isn't really going to be much help. And the US is the source of the only known cyber attacks on other country's infrastructure, so it's not likely much help there, either. Unless they expect retaliation? === http://in.reuters.com/article/2012/07/10/net-us-usa-security-cyber-idINBRE8… U.S. spy agencies say won't read Americans' email for cybersecurity 8:48pm EDT By Tabassum Zakaria and David Alexander WASHINGTON (Reuters) - The head of the U.S. spy agency that eavesdrops on electronic communications overseas sought on Monday to reassure Americans that the National Security Agency would not read their personal email if a new cybersecurity law was enacted to allow private companies to share information with the government. ... But to help protect the private sector, he said it was important that the intelligence agency be able to inform them about the type of malicious software and other cyber intrusions it is seeing and hear from companies about what they see breaching the protective measures on their computer networks. "It doesn't require the government to read their mail or your mail to do that. It requires them, the Internet service provider or that company, to tell us that that type of event is going on at this time. And it has to be at network speed if you're going to stop it," Alexander said. He said the information the government was seeking was the Internet address where an email containing malicious software originated and where it traveled to, not the content of the email. ... But the U.S. government is also concerned about the possibility of a cyber attack from adversaries on critical infrastructure such as the power grid or transportation systems.

9 14

LEVEL3, FLAG, NTT peering policies
by Luqman Kondeth 11 Jul '12

11 Jul '12

HI All, Apologies if this has been asked before, I was hoping to get a quick answer to rescue a situation J. We are advertising our prefixes to an ISP in the region who has level3, ntt & flag telecom as its upstream providers. I wanted to know if ntt & flag telecom have any BGP filtering policy based on AS or IP prefixes? I know level3 has such policies which are downloaded from the RIPE DB according to their published peering policy document. I’ve read through the peering policies of NTT & FLAG ( http://www.us.ntt.net/support/policy/routing.cfm , http://www.onesc.net/communities/as15412/ ) and donot see anything which would suggest they use the ripe db or any other db for filtering based on AS or IP prefixes. Infact, it doesn’t seem they have an inbound filter policy on IP prefixes or AS Could someone please confirm? Many thanks

2 1

strat-1 gps
by Randy Bush 11 Jul '12

11 Jul '12

my old TymServe 2100-GPS seems to have died. would appreciate reccos for a replacement. it is in a stand-alone environment so i can avoid roof access issues. antenna already in place. thanks. randy

8 9

*spam* Fwd: U.S. spy agencies ... email for cybersecurity
by shawn wilson 10 Jul '12

10 Jul '12

can some op filter this asshole? ---------- Forwarded message ---------- From: NIG NOG <nanog195(a)yahoo.com> Date: Tue, Jul 10, 2012 at 11:44 AM Subject: Re: U.S. spy agencies ... email for cybersecurity To: Suresh Ramasubramanian <ops.lists(a)gmail.com>, "valdis.kletnieks(a)vt.edu" <valdis.kletnieks(a)vt.edu> Cc: North American Network Operators Group <nanog(a)nanog.org> “Come on! It’s time to play with the Wii!” Kimber dragged Chris to the middle balance board. “Let’s do snowboarding first. That’s fun.” She let everyone get in position, and started the snowboarding game. At first, Chris felt a little clumsy. His massive, stuffed balls weighed heavily on his legs, and his thick, semi-erect dick, straining against his pants, made it feel like they were going to pull down at any moment. As Tasha and Kimber snickered at his poor performance, Chris felt himself getting annoyed. I’ve never done this with a monster cock between my legs! It’s throwing me off balance! Chris sighed audibly and settled his feet as far apart as possible on the balance board. His mammoth nutsack swung heavily between his legs. It pulled the stretchy pants even lower on his body, exposing the base of his broad prick. Chris felt a bit self-conscious about that, but it felt so good to let his gargantuan ballsack brush against the fabric of his pants and against the sides of his thighs. He soon noticed another benefit. With both his colossal rod and his fat nuts between his legs, his center of gravity had shifted downward considerably. Once he relaxed and allowed his gargantuan manhood to sway freely, its huge weight counteracted his upper body motions, acting like some genital gyroscope. In no time, Chris was ’snowboarding’ much better than he had ever done before, surpassing both Tasha and Kimber. As an added bonus, the swaying, sliding sensation felt fantastic. “Wow, Chris! You’re really coming from behind!” cheered Kimber, who, facing in the same direction as Chris, and positioned in front of him in the row, did not see his technique. “I’m about to cum just from the view from behind,” drooled Tasha, ogling Chris’s butt and the mammoth, swinging bulge between his legs. “I think he’s a natural.” After a few minutes more of snowboarding, Kimber announced, “Okay, that was a good warm up. Let’s get our hearts pumping.” She stopped the game and stepped off her board, then bent down and turned it parallel to the tv. Tasha followed suit and Chris complied clumsily, finding it difficult to bend over with a semi-hard boner between him and the board. Once the boards were positioned, Kimber launched a step aerobics routine, and Chris groaned immediately. The huge girth of his balls forced his thighs apart into a bowlegged stance, and the heft of his twenty pound nutsack and thick, fat prick was a burden to swing up with each step. While each of the girls fairly bounced up and down the board, Chris was laboriously heaving himself up and down, feeling like he had a thirty pound sack of potatoes between his legs. Ugh. Whew! I’m not sure how long I can do this. After a few quick, clumsy steps up and down, Chris stepped back off the board. “I’m not sure I’m quite built for this one, Kimber,” he said apologetically. “Oh, Chris” she said while bouncing up and down the step, “that’s okay. Sit this one out. You can jump back in whenever you want.” Chris waddled around the coffee table and sat down on the couch, spreading his legs wide to give his bloated balls plenty of room. He sighed with relief as the cushions absorbed the weight of his oversized genitals. Chris adjusted himself with both hands and settled down to watch the two girls bounce up and down on the step. This is the kind of workout I can handle! Just get Jen in there too, and my heart rate will be plenty high. Tasha and Kimber continued their step routine for several more minutes, until Tasha gasped, “That’s it! I’m picking the next one,” and stepped off the board with slightly wobbly legs. She gave a quick glance back at Chris on the couch, his fat, semi-hard salami bulging visibly through his stretchy pants. “I think this one is more our speed.” She launched a hula hoop routine, and Chris was transfixed as both girls began gyrating their hips and butts. “Ooooh! This one is fun!” squealed Kimber. Fun? This one is freaking amazing!, thought Chris. He could feel his cock immediately start to swell and thicken again. Kimber’s firm bubble butt looked incredible in the tight pink shorts she had on, and it bounced tantalizingly as she swiveled around. Tasha’s posterior wasn’t quite as curvy, though it was still nice, but her silky, high-cut shorts gave Chris a better view of her creamy white hips. Nnnnngh! Gotta get some of that. Chris’s thick prick began to creep even farther down the leg of his pants, easily surpassing the twenty six inch point. His girth continued to swell, stretching the leg of the pants entirely out of proportion. I’ll just slip out of these and I can have Kimber and Tasha right here on the couch. I wonder if I should do Kimber first, or Tasha? I bet Tasha will want to watch me with Kimber. Ohhh, but maybe Kimber will let me kiss her boobs while Tasha swallows first. I wonder if either of them has enough room for a second helping? Suddenly, Chris realized what he was doing. His mammoth schlong had almost reached his ankle in the sweats, and was easily over a foot around. It looked like he had two legs in one leg of the pants. His massive dick was throbbing urgently, and continued to surge and grow. I told Jen that I would control myself until she got back, and I’m already working out seconds with these two. I can’t do that! Jen would freak out! He stroked the side of his ballooning cock wistfully. What am I gonna do? I can’t resist this for six more hours. I gotta get off! He stroked his huge anaconda with both hands, a bit more vigorously. I gotta satisfy my cock. It has to get off soon! Chris’s eyes went back to the two mouthwatering asses shimmying in front of him. Oh, god. I need them soooooo bad. Jen would kill me, but I need some sex sooooon! -- Shawn Wilson 703-517-1201

13 15

Hotmail/live
by matt kelly 10 Jul '12

10 Jul '12

Can a hotmail/live.com postmaster contact me offlist please? Thanks

2 1

Re: U.S. spy agencies ... email for cybersecurity
by Jason Pope 10 Jul '12

10 Jul '12

Seriously, on the subject of "email for cybersecurity", can we please just black list NIG NOG <nanog195(a)yahoo.com>? Jason K Pope

1 0

Running your own DNSchanger proxies
by Cameron Byrne 10 Jul '12

10 Jul '12

On the other thread i read that some ISP are running their own proxies for infected host. That sounded interesting, so i googled around to find out how to do that and i could not find a HOWTO, so imagined up a solution myself, tested it in VirtualBox, and wrote it down in case anyone finds it useful or has another approach https://sites.google.com/site/cbyrne/dnschanger I don't plan to use this solution, but it was interesting to think about and may be a good starting point in the unlikely event that some VP pushes the panic button on Monday. CB

4 3

arin ipv6 whois working for you?
by David Hubbard 10 Jul '12

10 Jul '12

I want to make sure it's not just me but I'm not seeing a bgp route from my upstreams to networks with the addresses they're advertising: ;; ANSWER SECTION: whois.arin.net. 274 IN AAAA 2001:500:13::48 whois.arin.net. 274 IN AAAA 2001:500:13::46 whois.arin.net. 274 IN AAAA 2001:500:13::47 Thanks, Dave

4 4