- Test - lists.nanog.org

ATT, IPv6 and 6RD
by Bill Merriam 01 Feb '12

01 Feb '12

I now have ATT IPv6 over their residential ADSL broadband. They deployed using 6RD which means every time your IPv4 address changes your IPv6 address changes also. Does anybody have a clue why they chose to use 6RD instead of the much more fully-assed TR-187 for their deployment? Saying they're dimwits doesn't count. Bill

2 1

Fiber outage in Miami
by Jimmy Changa 01 Feb '12

01 Feb '12

Was anyone impacted by a botched fiber move in Miami this weekend? I lost 2 pieces of dark fiber for over almost 24 hours due to a fiber move being performed by FiberLight. I'm curious if anyone else was impacted. Sent from mobile device

6 12

Re: [#135346] Unauthorized BGP Announcements (follow up to Hijacked Networks)
by Hal Murray 01 Feb '12

01 Feb '12

I'm not a lawyer nor an operator. > Imagine that instead of www.google.com, it was www.whitehouse.gov > At some point, I suspect that this gets service to get it fixed RIGHT NOW. > At some point, the guys informing you it's RIGHT NOW show up with badges. Where is Milo Medin when we need him? > The question is, when is it badges? It can be construed as a denial of > service attack on the addresses' rightful owners. They will respond to any > major government site being hijacked. Probably to Apple or Google. Likely > to a Tier-1 ISPs internal infrastructure. How long should it take to fix a problem like this? Why didn't one of the players upstream from the bad guy pull their plug or drop the bogus announcement? Why didn't any of the players between the first upstream and the tier 1s apply pressure? Do existing contracts cover this case? If not, what needs to be fixed? Is a RFC needed so the lawyers have something to reference? Would a session to discuss this at a NANOG gathering help? > a) law enforcement doesn't understand the problem. and b) the law moves > very slowly. It might be a good idea to make sure that somebody in law enforcement does understands what happened here so they can think about what who needs to do what the next time something like this happens. (Make sure that operators know how to get in touch with somebody who knows.) -- These are my opinions, not necessarily my employer's. I hate spam.

2 1

Re: IP KVM suggestions
by Chris Hunt 01 Feb '12

01 Feb '12

On 1/30/2012 11:05 AM, nanog-request(a)nanog.org wrote: > ------------------------------ > > Message: 8 > Date: Mon, 30 Jan 2012 12:09:16 -0600 > From: "Express Web Systems" <mailinglists(a)expresswebsystems.com> > To: "'NANOG'" <nanog(a)nanog.org> > Subject: RE: IP KVM suggestions > Message-ID: <033601ccdf7a$481d0f90$d8572eb0$@com> > Content-Type: text/plain; charset="us-ascii" > >> > I have a need for a small, portable, web based IP kvm with decent >> > features that doesn't break the bank. Preferably something that >> > supports ISO mounting from http or ftp and USB connectivity. Would >> > also prefer something browser independent. Small plugin like the >> > Raritan devices would be acceptable too. It will be used internally for >> > Remote access while building devices pre deployment to customers. Any >> > suggestions? >> > >> > Thanks! >> > >> > Blake > Lantronix Spider is a small, portable, affordable and web enabled IP KVM. > Supports ISO mounting and has USB connections. > > http://www.lantronix.com/it-management/kvm-over-ip/securelinx-spider.html > > It is a single server unit. So if you want to connect many servers at the > same time, it might not be the best option as the price quickly escalates. > However, if you buy one and just move it from server to server (which is > what I got from your email), then it is a pretty good fit. Java based web > interface, not the greatest, but it works. > > For multiple server access from a single unit, look at the Dell 2161DS > (rebranded Avocent units) line. They are abundant on ebay, and relatively > inexpensive, and can expand to up to 128 servers (via add on PEM modules - > the unit has 16 ports and you connect a PEM to one of the ports and you can > connect up to 8 servers to the PEM 16 x 8 = 128). The 2161DS-2 also supports > ISO mounting when using USB dongles (the 2161DS does not). Java based client > software... Dell isn't supporting the 2161DS software any more apparently > and won't install natively on Windows 7, I have it running on Windows7, but it has to be "Run As Administrator" > but the software can be installed > on an XP machine and then copied, this also works for linux, etc. > > Tom Walsh > If security is a concern, then you will probably want to only use the 2161-DS behind a VPN, if at all. The session authentication is fairly weak and supports no ACLs. It does support lock-out on multiple bad authentication attempts though. -Chris

2 1

Re: Thanks & Let's Prevent this in the Future.
by Hank Nussbacher 01 Feb '12

01 Feb '12

At 03:58 01/02/2012 -0500, Kelvin Williams wrote: Those ISPs that are good network citizens have done it already. Those who don't care and who haven't done it yet - won't do it in the future. The only recourse you have is exactly what you have done. -Hank >How can we prevent anyone else from ever enduring this again? While we may >never stop it from ever happening, spammers (that's what we got hit by >today) are a dime a dozen and will do everything possible to hit an Inbox, >so how can we establish a protocol to immediate mitigate the effects of an >traffic-stopping advertisement? > >I thought registering with IRRs and up-to-date information in ARINs WHOIS >was sufficient, apparently I was wrong. Not everyone respects them, but >then again, they aren't very well managed (I've got several networks with >antiquated information I've been unable to remove, it doesn't impair us >normally, but its still there). > >What can we do? Better yet, how do we as a whole respond when we encounter >upstream providers who refuse to look at the facts and allow another to >stay down? > >kw > >-- >Kelvin Williams >Sr. Service Delivery Engineer >Broadband & Carrier Services >Altus Communications Group, Inc. > > >"If you only have a hammer, you tend to see every problem as a nail." -- >Abraham Maslow

1 0

Arriving early...
by Warren Kumari 01 Feb '12

01 Feb '12

Hi there all, I'm arriving on Friday evening -- was wondering who all might be around on Saturday? Anyone interested in doing something? Sightseeing, wandering around, etc? W -- Some people are like Slinkies......Not really good for anything but they still bring a smile to your face when you push them down the stairs.

2 1

non-congested comcast peers?
by Shacolby Jackson 01 Feb '12

01 Feb '12

Are there any providers that Comcast doesn't regularly run hot? Seems like no matter who I deliver through at some magical point in the evening they start spiking jitter and a little loss. Almost like everyone hits PLAY on netflix at the same time. -shac

4 3

Re: Megaupload.com seized
by Steven Bellovin 01 Feb '12

01 Feb '12

On Jan 19, 2012, at 6:44 PM, james(a)smithwaysecurity.com wrote: > You guys serous, when did the order come in to sezie the domain? http://arstechnica.com/tech-policy/news/2012/01/why-the-feds-smashed-megaup… has a good analysis; also see http://online.wsj.com/article_email/SB1000142405297020461650457717106061194… (which seems to be outside their paywall). What differentiates this from many of the earlier domain name seizures is that this is based on a grand jury indictment, not just an administrative decision by Immigration and Customs Enforcement. It may be heavy-handed or questionable, per the Ars Technica analysis, but as a matter of process it's about as good as you'll get. > > Sent from my HTC > > ----- Reply message ----- > From: "Ryan Gelobter" <ryan.g(a)atwgpc.net> > To: "NANOG" <nanog(a)nanog.org> > Subject: Megaupload.com seized > Date: Thu, Jan 19, 2012 6:41 pm > > > The megaupload.com domain was seized today, has anyone noticed significant > drops in network traffic as a result? > > http://www.scribd.com/doc/78786408/Mega-Indictment > http://techland.time.com/2012/01/19/feds-shut-down-megaupload-com-file-shar… --Steve Bellovin, https://www.cs.columbia.edu/~smb

37 67

Route Optimization Software / Appliance
by Babak Pasdar 01 Feb '12

01 Feb '12

Hello Group, I was wondering if anyone could share their experience with any route optimization approaches, methodologies or platforms, either open source or commercial (Internap FCP), that can actively adjust BGP parameters based on latency and number of layer 3 hops to a network rather than AS hops. We have upstreams all over the country and we would like to automate optimization to take the best egress path. Thank you for your feedback in advance. Best Regards, Babak -- Babak Pasdar President & CEO | Certified Ethical Hacker Bat Blue Corporation | Integrity . Privacy . Availability . Performance (p) 212.461.3322 x3005 | (f) 212.584.9999 | (w) www.BatBlue.com Bat Blue is proud to be the Official WiFi Provider for ESPN's X Games Bat Blue's AS: 25885 | BGP Policy | Peering Policy Receive Bat Blue's Daily Security Intelligence Report Bat Blue's Legal Notice

8 9

Route Management Best Practices
by Joe Marr 31 Jan '12

31 Jan '12

My network has grown large enough that maintaining my prefix announcements to the rest of the world has become increasingly difficult. I currently use static routes and tags on my edge routers to inject route into BGP. The tags correspond to communities that reflect how the routes are announced per region. I would love to heat from others on how they handle this.

3 6