- Test - lists.nanog.org

AS10392 -- Hijacked?
by Ronald F. Guilmette 29 Sep '10

29 Sep '10

Evidence strongly suggests that AS10392 together with all of the IPv4 space it is currently announcing routes for, i.e.: 192.171.64.0/19 204.137.224.0/19 205.164.0.0/20 205.164.16.0/20 205.164.32.0/20 205.164.48.0/20 have all been hijacked. I will be reporting this formally to ARIN today, via their helpful fraud reporting web form. In the meantime, while this case is being carefully adjudicated by ARIN, some folks may wish to blackhole the above. (The IP space appears to be in use by some sort of snowshoe spamming operation.) Regards, rfg P.S. Connectivity for AS10392 appears to come from only one place: http://www.robtex.com/as/as10392.html#graph

1 0

tagged vs. untagged VLAN
by Jay Nakamura 29 Sep '10

29 Sep '10

In a SP environment, you need to hand off two VLANs to a customer, is there any advantage or disadvantage in doing the following two setups? - One untagged and one tagged VLAN - Two tagged VLAN and no untagged VLAN I can't think of anything other than some equipment may not let you have no untagged VLAN. But it's bugging me that something could go wrong by not having untagged native VLAN that I can't think of.

3 2

Online games stealing your bandwidth
by Rodrick Brown 29 Sep '10

29 Sep '10

I think most people are aware that the Blizzard "World of WarcCraft" patcher distributes files through Bittorrent, however apparently a number of other MMO companies (LotR, Lego) are apparently doing something similar but aren't as upfront about it, and are installing Windows services which seed whenever the computer is online. Game Companies Should Play Fair With P2P | TorrentFreak<http://torrentfreak.com/game-companies-should-play-fair-with-p2p-100901/> If you follow the links in the article people are complaining that the LotR process has served 70gb in a week, others are complaining that the service is resulting in 300ms pings, and unusable connections. This is a very grey area it will be interesting how this issue unfolds in the long run. -- [ Rodrick R. Brown ] http://www.rodrickbrown.com http://www.linkedin.com/in/rodrickbrown

16 19

Requesting assistance from Telia netop (Fwd: Prefix Preference at Level3)
by Jeffrey Lyon 29 Sep '10

29 Sep '10

We're trying to help a downstream customer with an issue and require assistance from a clued Telia netop. The customer is running a GRE tunnel from Los Angeles to Brazil for international transit and needs to avoid carrying local traffic over the tunnel. He is requesting a pref of > 150 for Level3 prefixes. We sent a request to carrier-csc(a)teliasonera.com and here is the response we received: > We do not manipulate the prefixes that comes to us from peers. Customer may configure this on their side, but peers are always set to 150. > Please do not hesitate to contact us is you have any questions, we will close our ticket in 4 hours. Hoping to get ahold of someone at Telia with a much higher degree of awesome than this. -- Jeffrey Lyon, Leadership Team jeffrey.lyon(a)blacklotus.net | http://www.blacklotus.net Black Lotus Communications - AS32421 First and Leading in DDoS Protection Solutions

1 0

Re: LISP Works - Re: Facebook Issues/Outage in Southeast?
by Scott Weeks 29 Sep '10

29 Sep '10

On Sep 23, 2010, at 5:50 PM, "Scott Weeks" <surfer(a)mauigateway.com> wrote: > --- jared(a)puck.nether.net wrote: > It's working over LISP: > > http://www.lisp4.facebook.com/ > ------------------------------------- > > LISP as in Locator/ID Separation Protocol? ------------------------------------------- --- jared(a)puck.nether.net wrote: From: Jared Mauch <jared(a)puck.nether.net> Yes. --------------------------------- Wow, that's cool. I didn't know LISP had progressed that far... scott

3 3

Re: Online games stealing your bandwidth
by Richard Barnes 28 Sep '10

28 Sep '10

There's some standardization work being done in the IETF ALTO working group. They're looking at ways ISPs can inform P2P clints about which peers are "better", I.e., topologically nearby. http://tools.ietf.org/wg/alto/ I'm less familiar with DECADE, but I believe they're working on more directly cache-related stuff. http://tools.ietf.org/wg/decade/ On Sep 25, 2010 4:44 PM, "Matthew Walster" <matthew(a)walster.org> wrote: On 25 September 2010 21:16, Rodrick Brown <rodrick.brown(a)gmail.com> wrote: > I think most people are... <snip> I once read an article talking about making BitTorrent scalable by using anycasted caching services at the ISP's closest POP to the end user. Given sufficient traffic on a specified torrent, the caching device would build up the file, then distribute that direct to the subscriber in the form of an additional (preferred) peer. Similar to a CDN or Usenet, but where it was cached rather than deliberately pushed out from a locus. Was anything ever standardised in that field? I imagine with much of P2P traffic being (how shall I put this...) less than legal, it's of questionable legality and the ISPs would not want to be held liable for the content cached there? M

6 12

Re: AS11296 -- Hijacked?
by Heath Jones 28 Sep '10

28 Sep '10

He blocked google mail? WTF? ---------- Forwarded message ---------- From: Mail Delivery Subsystem <mailer-daemon(a)googlemail.com> Date: 28 September 2010 20:49 Subject: Delivery Status Notification (Failure) To: hj1980(a)gmail.com Delivery to the following recipient failed permanently: rfg(a)tristatelogic.com Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.7.1 <mail-qy0-f176.google.com[209.85.216.176]>: Client host rejected: Domain google.com BLACKLISTED - Use http://www.tristatelogic.com/contact.html (state 14). ----- Original message ----- MIME-Version: 1.0 Received: by 10.224.62.217 with SMTP id y25mr308053qah.193.1285703359508; Tue, 28 Sep 2010 12:49:19 -0700 (PDT) Received: by 10.229.226.204 with HTTP; Tue, 28 Sep 2010 12:49:12 -0700 (PDT) In-Reply-To: <63619.1285701703(a)tristatelogic.com> References: <63619.1285701703(a)tristatelogic.com> Date: Tue, 28 Sep 2010 20:49:12 +0100 Message-ID: <AANLkTi=qX7cX4F3Y_AZ803WdPmKMTC_hZZPsmdqS1v3r(a)mail.gmail.com> Subject: Re: AS11296 -- Hijacked? From: Heath Jones <hj1980(a)gmail.com> To: "Ronald F. Guilmette" <rfg(a)tristatelogic.com> Cc: nanog(a)nanog.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Out of curiosity, what led you to this conclusion? > Evidence strongly suggests that AS11296 together with all of the IPv4 > space it is currently announcing routes for, i.e.: > have all been hijacked. I will be reporting this formally to ARIN today, > via their helpful fraud reporting web form.

2 1

AS11296 -- Hijacked?
by Ronald F. Guilmette 28 Sep '10

28 Sep '10

Evidence strongly suggests that AS11296 together with all of the IPv4 space it is currently announcing routes for, i.e.: 63.247.160.0/19 199.241.64.0/19 206.226.64.0/24 206.226.65.0/24 206.226.66.0/24 206.226.67.0/24 206.226.68.0/24 206.226.69.0/24 206.226.70.0/24 206.226.71.0/24 206.226.72.0/24 206.226.73.0/24 206.226.74.0/24 206.226.75.0/24 206.226.76.0/24 206.226.77.0/24 206.226.78.0/24 206.226.79.0/24 206.226.96.0/19 have all been hijacked. I will be reporting this formally to ARIN today, via their helpful fraud reporting web form. In the meantime, while this case is being carefully adjudicated by ARIN, some folks may wish to blackhole the above. (The IP space appears to be in use by some sort of snowshoe spamming operation.) Regards, rfg P.S. Connectivity for AS11296 appears to come from only one place: http://www.robtex.com/as/as11296.html#graph

2 1

EFF needs your help to stop the Senate's DNS censorship bill
by Peter Eckersley 28 Sep '10

28 Sep '10

As you may or may not have heard, there is a censor-DNS-to-enforce-copyright bill that is going to be passed by the Senate Judiciary Committee this Wednesday (!!!). It will require service providers to censor the DNS entries of blacklisted domains where piracy is deemed too "central" to the site's purpose. Senators are claiming that they haven't heard any opposition to this bill, and it is being sponsored by 14 of the 19 committee members. We believe it needs to be stopped, and we need your help. What EFF needs right now is sign-ons to an open letter, from the engineers who helped build the Internet in the first place. The text of our letter is below. If you agree with it and would like to sign, please send me an email at pde(a)eff.org, with your name and a one-line summary of what part of the Internet you have helped to design, implement, debug or run. This is URGENT. I need your sign-ons by 4:00pm, US Eastern time (1pm Pacific), tomorrow. Unfortunately, the civil liberties community has been ambushed by this bill. You can find out more details on the bill here: https://eff.org/coica --------------------------- Open letter from Internet engineers to members of the Senate Judiciary Committee: We, the undersigned, have played various parts in building a network called the Internet. We wrote and debugged the software; we defined the standards and protocols that talk over that network. Many of us invented parts of it. We're just a little proud of the social and economic benefits that our project, the Internet, has brought with it. We are writing to oppose the Committee's proposed new Internet censorship and copyright bill. If enacted, this legislation will risk fragmenting the Internet's global domain name system (DNS), create an environment of tremendous fear and uncertainty for technological innovation, and seriously harm the credibility of the United States in its role as a steward of key Internet infrastructure. In exchange for this, the bill will introduce censorship that will simultaneously be circumvented by deliberate infringers while hampering innocent parties' ability to communicate. All censorship schemes impact speech beyond the category they were intended to restrict, but this bill will be particularly egregious in that regard because it causes entire domains to vanish from the Web, not just infringing pages or files. Worse, an incredible range of useful, law-abiding sites can be blacklisted under this bill. These problems will be enough to ensure that alternative name-lookup infrastructures will come into widespread use, outside the control of US service providers but easily used by American citizens. Errors and divergences will appear between these new services and the current global DNS, and contradictory addresses will confuse browsers and frustrate the people using them. These problems will be widespread and will affect sites other than those blacklisted by the American government. The US government has regularly claimed that it supports a free and open Internet, both domestically and abroad. We can't have a free and open Internet without a global domain name system that sits above the political concerns and objectives of any one government or industry. To date, the leading role the US has played in this infrastructure has been fairly uncontroversial because America is seen as a trustworthy arbiter and a neutral bastion of free expression. If the US suddenly begins to use its central position in the DNS for censorship that advances its political and economic agenda, the consequences will be far-reaching and destructive. Senators, we believe the Internet is too important and too valuable to be endangered in this way, and implore you to put this bill aside. -- Peter Eckersley pde(a)eff.org Senior Staff Technologist Tel +1 415 436 9333 x131 Electronic Frontier Foundation Fax +1 415 436 9993

1 0

EFF needs your help to stop the Senate's DNS censorship bill
by Peter Eckersley 27 Sep '10

27 Sep '10

Dear network operators, I apologise for a posting that contains some politics; I hope you'll agree that it also has fairly substantial short-to-medium term operational implications. As you may or may not have heard, there is a censor-DNS-to-enforce-copyright bill that is going to be passed by the Senate Judiciary Committee this Wednesday. It will require service providers to censor the DNS entries of blacklisted domains where piracy is deemed too "central" to the site's purpose. Senators are claiming that they haven't heard any opposition to this bill, and it is being sponsored by 14 of the 19 committee members. We believe it needs to be stopped, and we need your help. What EFF needs right now is sign-ons to an open letter, from the engineers who helped build the Internet in the first place. The text of our letter is below. If you agree with it and would like to sign, please send me an email at pde(a)eff.org, with your name and a one-line summary of what part of the Internet you have helped to design, implement, debug or run. This is URGENT. I need your sign-ons by 4:00pm, US Eastern time (1pm Pacific), tomorrow. Unfortunately, the civil liberties community has been ambushed by this bill. You can find out more details on the bill here: https://eff.org/coica --------------------------- Open letter from Internet engineers to members of the Senate Judiciary Committee: We, the undersigned, have played various parts in building a network called the Internet. We wrote and debugged the software; we defined the standards and protocols that talk over that network. Many of us invented parts of it. We're just a little proud of the social and economic benefits that our project, the Internet, has brought with it. We are writing to oppose the Committee's proposed new Internet censorship and copyright bill. If enacted, this legislation will risk fragmenting the Internet's global domain name system (DNS), create an environment of tremendous fear and uncertainty for technological innovation, and seriously harm the credibility of the United States in its role as a steward of key Internet infrastructure. In exchange for this, the bill will introduce censorship that will simultaneously be circumvented by deliberate infringers while hampering innocent parties' ability to communicate. All censorship schemes impact speech beyond the category they were intended to restrict, but this bill will be particularly egregious in that regard because it causes entire domains to vanish from the Web, not just infringing pages or files. Worse, an incredible range of useful, law-abiding sites can be blacklisted under this bill. These problems will be enough to ensure that alternative name-lookup infrastructures will come into widespread use, outside the control of US service providers but easily used by American citizens. Errors and divergences will appear between these new services and the current global DNS, and contradictory addresses will confuse browsers and frustrate the people using them. These problems will be widespread and will affect sites other than those blacklisted by the American government. The US government has regularly claimed that it supports a free and open Internet, both domestically and abroad. We can't have a free and open Internet without a global domain name system that sits above the political concerns and objectives of any one government or industry. To date, the leading role the US has played in this infrastructure has been fairly uncontroversial because America is seen as a trustworthy arbiter and a neutral bastion of free expression. If the US suddenly begins to use its central position in the DNS for censorship that advances its political and economic agenda, the consequences will be far-reaching and destructive. Senators, we believe the Internet is too important and too valuable to be endangered in this way, and implore you to put this bill aside. -- Peter Eckersley pde(a)eff.org Senior Staff Technologist Tel +1 415 436 9333 x131 Electronic Frontier Foundation Fax +1 415 436 9993

1 0