- Test - lists.nanog.org

Re: Google groups outage
by andrew.wallace 14 Oct '10

14 Oct '10

Issue is corrected, apologies. ----- Original Message ---- From: andrew.wallace <andrew.wallace(a)rocketmail.com> To: nanog(a)nanog.org Sent: Thu, 14 October, 2010 11:53:13 Subject: Google groups outage 500 server error for a long time. http://groups.google.com/ Andrew

1 0

Dutch Hotels Must Register As ISPs
by Hank Nussbacher 14 Oct '10

14 Oct '10

http://yro.slashdot.org/story/10/10/13/0044233/Dutch-Hotels-Must-Register-As -ISPs

7 6

Request : Yahoo contact
by Jeff Archambeau 14 Oct '10

14 Oct '10

I am having an email issue with yahoo's email blacklists and their auto-responses have been less than helpful. If there is a yahoo mail administrator on this list, would you please contact me off-list so we can discuss the issue and help me resolve this? Thanks. Jeff Archambeau Core3 Solutions LLC jarchambeau(a)core3solutions.com<mailto:jarchambeau@core3solutions.com> Technology: Undivided www.core3solutions.com<http://www.core3solutions.com/> 248.530.1001 (Ext. 108) :: Office 248.498.6098 :: Fax 248.530.1001 :: Helpdesk

2 1

Re: AS22558 - Routing apparently hijacked space
by Robert Bonomi 13 Oct '10

13 Oct '10

> From nanog-bounces+bonomi=mail.r-bonomi.com(a)nanog.org Tue Oct 12 04:00:19 2010 > To: nanog(a)nanog.org > Subject: AS22558 - Routing apparently hijacked space > Date: Tue, 12 Oct 2010 02:01:32 -0700 > From: "Ronald F. Guilmette" <rfg(a)tristatelogic.com> > > > I can't take credit for finding this one. Somebody else on another > mailing list I'm on actually found it. > > AS22558 itself _does not_ appear to be hijacked. Rather this is > a relatively new (2009) AS, but the AS itself is very odd indeed. > > It's contact phone number isn't working, it apparently has no web site > associated with its domain name (mpgnetworks.com) and although the whois > record clearly indicates that the company behind this AS is located in > California, the California Secretary of State's web site has no record > of any "MPG Networks, LLC" operating legally within California. The whois record is also suspect. A little bird tells me tht there is is no 'suite 411' at 707 Wilshire. > ===================================================================== > ASNumber: 22558 > ASName: MPGNET > ASHandle: AS22558 > RegDate: 2010-01-27 > Updated: 2010-01-27 > Ref: http://whois.arin.net/rest/asn/AS22558 > > OrgName: MPG Networks, LLC > OrgId: MPGNE > Address: 707 Wilshire, suite 411 > City: Los Angeles > StateProv: CA > PostalCode: 90017 > Country: US > RegDate: 2009-11-03 > Updated: 2009-11-03

1 0

Using crypto auth for detecting corrupted IGP packets?
by Manav Bhatia 13 Oct '10

13 Oct '10

Hi, I believe, based on what i have heard, that some operators turn on cryptographic authentication because the internet checksum that OSPF, etc use for packet sanity is quite weak and offers trifle little protection against lot of known errors like: - re-ordering of 2-byte aligned words - various bit flips that keep the 1s complement sum the same (e.g. 0x0000 to 0xffff and vice versa) So a corrupted packet could still pass the ethernet CRC checks and IP and OSPF checksums. Or it could be valid till the ethernet CRC check is done and gets corrupted after that (PCI transmission errors, DMA errors, memory issues, line card corruption and last but not the least, CRCs and internet checksums could miss wire-corrupted packets) Currently an operator can do the following: - Use the poor internet checksum OR - Turn on cryptographic authentication in the routing protocols to catch all such bit errors which could be caused by line card corruption, etc. One can go through http://portal.acm.org/citation.cfm?id=294357.294364 to understand the issues with the internet checksums. I would be interested in knowing if operators use the cryptographic authentication for detecting the errors that i just described above. You could send me a mail offline and i will consolidate the responses and send a summary on the list in a few days time. Cheers, Manav

6 11

Google Mail Contact
by James Martin 13 Oct '10

13 Oct '10

Hi: Can someone from Google's mail/blacklist/whitelist group contact me offlist? Thanks, James Martin

1 0

Vote Now for the ARIN 2010 Board and AC Elections
by John Curran 13 Oct '10

13 Oct '10

NANOG Community - Apologies for the cross-post, but the outcome of the ARIN Advisory Council and Board of Trustees elections can significantly effect both the policies and operations of ARIN in the future, with corresponding effects on this community. I've spared this community numerous announcements of the election process, but I would be remiss if we did not post one reminder about the election to this community: ** To the extent that you are an ARIN Member, please participate in these elections ASAP! You have just over 72 hours to do so! Further information is attached for reference. Thanks! /John John Curran President and CEO ARIN --- Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Date: October 13, 2010 11:17:36 AM EDT To: arin-announce(a)arin.net<mailto:arin-announce@arin.net> Subject: [arin-announce] Vote Now for the 2010 Board and AC Elections The polls remain open for the election to fill two (2) seats on the ARIN Board of Trustees and five (5) seats on ARIN Advisory Council. The polls will close at 3:00 PM EDT on 16 October. You must be the designated member representative (DMR) from a General Member in good standing to vote. As stated in previous announcements, the deadline for establishing voter eligibility was 21 September 2010. Brief candidate biographies, a link to submit or view statements of support, videos of candidate speeches, and the voting "booth" itself can be found through ARIN Election Headquarters at: https://www.arin.net/app/election/ The online election is a two-step process. Step 1. Register to vote using the DMR email on file with ARIN’s Member Services Department. The email address must include the DMR’s name or initials and organization’s domain name. Step 2. Vote and confirm the vote via the online voting booth. Only confirmed votes will be counted. Designated member representatives must cast and confirm their ballots by 3:00 EDT, 16 October. Don’t wait until the last minute to cast your vote. If you have any questions about voting or encounter problems with the system, please contact us at info(a)arin.net. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce

1 0

RE: T-Mobile USA - Peering Policy
by Ryan Finnesey 13 Oct '10

13 Oct '10

I looked into Deutsche Telekom and T-System but the AS I have for T-Mobile USA does not seem to be connected to either network which is odd because Deutsche Telekom owns T-Mobile USA but thank you for the recommendation. Cheers Ryan -----Original Message----- From: kris foster [mailto:kris.foster@gmail.com] Sent: Wednesday, October 13, 2010 12:36 AM To: Ryan Finnesey Subject: Re: T-Mobile USA - Peering Policy You're looking for Deutsche Telekom http://as3320.peeringdb.com On Oct 12, 2010, at 9:28 PM, Ryan Finnesey wrote: > Can someone on the list from T-Mobile USA please contact me. I have > tried sending a message to admin(a)tmodns.net but the message bounces back > and the mailbox for arintechcontact(a)t-mobile.com is full. I am trying > to find out information regarding there peering policy. > > Cheers > Ryan > >

2 2

AS22558 - Routing apparently hijacked space
by Ronald F. Guilmette 13 Oct '10

13 Oct '10

I can't take credit for finding this one. Somebody else on another mailing list I'm on actually found it. AS22558 itself _does not_ appear to be hijacked. Rather this is a relatively new (2009) AS, but the AS itself is very odd indeed. It's contact phone number isn't working, it apparently has no web site associated with its domain name (mpgnetworks.com) and although the whois record clearly indicates that the company behind this AS is located in California, the California Secretary of State's web site has no record of any "MPG Networks, LLC" operating legally within California. ===================================================================== ASNumber: 22558 ASName: MPGNET ASHandle: AS22558 RegDate: 2010-01-27 Updated: 2010-01-27 Ref: http://whois.arin.net/rest/asn/AS22558 OrgName: MPG Networks, LLC OrgId: MPGNE Address: 707 Wilshire, suite 411 City: Los Angeles StateProv: CA PostalCode: 90017 Country: US RegDate: 2009-11-03 Updated: 2009-11-03 Ref: http://whois.arin.net/rest/org/MPGNE OrgTechHandle: MNA72-ARIN OrgTechName: MPG Networks Admin OrgTechPhone: +1-213-867-3652 OrgTechEmail: admin(a)mpgnetworks.com OrgTechRef: http://whois.arin.net/rest/poc/MNA72-ARIN ===================================================================== So anyway, this AS appears to currently be routing what looks an awful lot like a whole lot of abandoned legacy IP address space, to wit: 66.119.224.0/20 192.101.208.0/20 192.101.224.0/20 192.112.112.0/22 192.112.116.0/22 192.112.120.0/22 192.112.124.0/22 198.13.0.0/22 198.13.4.0/22 198.13.8.0/22 198.13.12.0/22 198.162.208.0/20 198.178.64.0/22 198.178.68.0/22 198.178.72.0/22 198.178.76.0/22 198.178.80.0/20 206.201.48.0/20 Furthermore, looking at the name server data for these blocks, what I see in them sure as heck looks an awful lot like snowshoe spam domains to me. (See listing attached below.) Last but not least, robtex.com indicates that this entire AS is only connected to the Internet via a single other AS, i.e. AS3491, aka "Beyond The Network America, Inc." And I'd just like to take this opportunity to remind everyone that AS3491 is also still the only connection to the Internet for two other hijacked ASes (and all of the apparently hijacked address space that each of those is announcing), i.e. AS6061 and AS10392. In short, it does appear that the crooks are now officially running the Internet. (And yes, I _did_ properly inform the fine folks at Beyond The Network America, Inc. last week that they were aiding and abetting the effective theft of IP address space by whoever has hijacked AS6061 and AS10392, _and_ I _did_ get an acknowledgement back from them, indicating clearly that some live human there had read my message. But no, apparently they don't give a rat's ass, and they are perfectly fine with aiding & abetting the hijacker(s) in this case... presumably as long as whoever it is keeps on sending them checks every month.) Regards, rfg =============================================================== 66.119.224.2 ns1.reliancethanks.com reliancethanks.com aftermathinformational.com 66.119.224.3 ns2.reliancethanks.com reliancethanks.com aftermathinformational.com 66.119.225.239 ns.uberslinger.org 66.119.230.2 ns1.sectionalplacement.com sectionalplacement.com 66.119.230.3 ns2.sectionalplacement.com sectionalplacement.com 66.119.236.2 ns1.sundayexceeding.com precisionwedge.com printablediscovered.com positivelyrecently.com platinumshall.com productionweekday.com sundayexceeding.com 66.119.236.3 ns2.sundayexceeding.com precisionwedge.com printablediscovered.com positivelyrecently.com platinumshall.com productionweekday.com sundayexceeding.com 192.101.239.253 fwd2.select1media.com fgty232oflyaway.com xswe321oracetrack.com asefo221shortness.com puth123ofreely.com jqtyo313outofbounds.com muiuo332consistent.com mjui332owalked.com etye112olightup.com ukkho121greatwin.com jlkk231believableo.com fthno223majority.com cddgo113longway.com select1media.com hngeo131intouch.com cdtu223leadingo.com zipi121ointhezone.com bhtq222oroadtrip.com sfewo331advantage.com cftho232likely.com qaxs221odarkness.com wefro212permanent.com fwd1.select1media.com fgty232oflyaway.com xswe321oracetrack.com asefo221shortness.com puth123ofreely.com jqtyo313outofbounds.com muiuo332consistent.com mjui332owalked.com etye112olightup.com ukkho121greatwin.com jlkk231believableo.com fthno223majority.com cddgo113longway.com select1media.com hngeo131intouch.com cdtu223leadingo.com zipi121ointhezone.com bhtq222oroadtrip.com sfewo331advantage.com cftho232likely.com qaxs221odarkness.com wefro212permanent.com 198.13.2.1 ns1.publicidad3d.info 198.162.208.4 ns1.dnsdeguyana.info unawareofthesubject.info toshowphilosopherof.info seekfromartbeauty.info passivelydiscoveredthinkabout.info ofartshakespeareanwhichour.info moonoftenprofessto.info lightetudetothe.info itsnormativesidenothing.info inpersonaladornmentbe.info hearsayintheworld.info betterworksofart.info besurecuttingwood.info aparttheart.info anotheruglyaestheticpurpose.info afewexamplesobjectjust.info itmustbebrought.com isbeyondtheprovince.com tastefinallyofselfscrutiny.com notexistforan.com theskepticorthe.com maylessentheprobabilities.com 198.162.208.5 ns2.dnsdeguyana.info unawareofthesubject.info toshowphilosopherof.info seekfromartbeauty.info passivelydiscoveredthinkabout.info ofartshakespeareanwhichour.info moonoftenprofessto.info lightetudetothe.info itsnormativesidenothing.info inpersonaladornmentbe.info hearsayintheworld.info betterworksofart.info besurecuttingwood.info aparttheart.info anotheruglyaestheticpurpose.info afewexamplesobjectjust.info itmustbebrought.com isbeyondtheprovince.com tastefinallyofselfscrutiny.com notexistforan.com theskepticorthe.com maylessentheprobabilities.com 198.178.64.4 ns1.barranquilla-dns.info thelesscanbe.info theirachievedrelationshe.info subjecttocorrectionjudgments.info psychologyinterestinbeauty.info principlesislessenthe.info primitivemenbeautyitself.info partofthesubject.info ourownpurposesabsolutely.info ofacriticrelations.info methodofobservationas.info lackofunderstandingof.info forusoftenprofess.info correctionthepathwayhimself.info andfunctionstheoreticalanalysis.info allappreciationofparticular.info accurateinjudgmentis.info 198.178.64.5 ns2.barranquilla-dns.info thelesscanbe.info theirachievedrelationshe.info subjecttocorrectionjudgments.info psychologyinterestinbeauty.info principlesislessenthe.info primitivemenbeautyitself.info partofthesubject.info ourownpurposesabsolutely.info ofacriticrelations.info methodofobservationas.info lackofunderstandingof.info forusoftenprofess.info correctionthepathwayhimself.info andfunctionstheoreticalanalysis.info allappreciationofparticular.info accurateinjudgmentis.info 206.201.50.2 ns1.respectivemotive.com pensplaces.com interviewedseller.com generallyrumored.com regulatorsstretches.com mailedmission.com forecasterpanic.com generosityamount.com itemprep.com fascinatingfixings.com schemepowerful.com scotlandwonderful.com fontvaried.com grindstonesocal.com exitingfuturists.com respectivemotive.com itemsupporting.com silkbid.com operationstudent.com listenmotivation.com necessitysupplies.com locationquadruple.com looksutility.com 206.201.50.3 ns2.respectivemotive.com pensplaces.com interviewedseller.com generallyrumored.com regulatorsstretches.com mailedmission.com forecasterpanic.com generosityamount.com itemprep.com fascinatingfixings.com schemepowerful.com scotlandwonderful.com fontvaried.com grindstonesocal.com exitingfuturists.com respectivemotive.com itemsupporting.com silkbid.com operationstudent.com listenmotivation.com necessitysupplies.com locationquadruple.com looksutility.com 206.201.57.2 ns1.shelfbuying.com venezuelaexpire.com styleoutput.com threadbarestabilizes.com reducesreoffering.com unawareneed.com bookscourtesy.com bannerswardrobe.com arenaformula.com architecturetougher.com broaderbasedvalidity.com citiesunderstood.com buddingprimary.com assistscontext.com certificatetransactions.com allocatereported.com althoughacquire.com advancednautical.com sponsorshipguidance.com withdrawsspoken.com sketchnecessarily.com technicalbestseller.com providingonline.com shelfbuying.com purchasetrial.com trainedmonumental.com promisecombinations.com 206.201.57.3 ns2.shelfbuying.com venezuelaexpire.com styleoutput.com threadbarestabilizes.com reducesreoffering.com unawareneed.com bookscourtesy.com bannerswardrobe.com arenaformula.com architecturetougher.com broaderbasedvalidity.com citiesunderstood.com buddingprimary.com assistscontext.com certificatetransactions.com allocatereported.com althoughacquire.com advancednautical.com sponsorshipguidance.com withdrawsspoken.com sketchnecessarily.com technicalbestseller.com providingonline.com shelfbuying.com purchasetrial.com trainedmonumental.com promisecombinations.com

2 1

neglected route-servers
by Jon Lewis 12 Oct '10

12 Oct '10

Guess what happens when you run a 7206VXR (NPE300) as a route server with 3 full feeds? It took me a minute to figure out why my routes that TWTelecom isn't supposed to see were showing up on route-server.twtelecom.net, but were seemingly randomly alternating between Network not in table and showing up. If anyone from TWTelecom is here, it's probably time to swap out that NPE300 for something with more than 256MB RAM. It's running out of RAM and resetting all the BGP sessions before they finish getting full routes. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

2 4