- Test - lists.nanog.org

Default route with object tracking
by Andrey Gordon 01 Feb '10

01 Feb '10

Hi list. I'd like to setup my default routes to the Interwebz to be conditional on reachability of something on the Interwebz. I got two different ISPs (no BGP). I'm trying to figure out what would be a reliable object to track? Meaning, it's probably not reasonable to track my ISPs default gateway, since it does not protect me from someone on the ISP side screwing up. I'm thinking of tracking something like google.com, but am not sure if after I resolve google.com for the first time, it will be simply tracking an arbitrary server (or some load balancer). I wanted to see what experienced folks think is a reliable tracking target. Any comments are much appreciated. thank you, ----- Andrey Gordon [andrey.gordon(a)gmail.com]

9 9

Comcast IPv6 Trials
by John Jason Brzozowski 01 Feb '10

01 Feb '10

Folks, I am emailing you today to share some news that we hope you will find interesting. Today we are announcing our 2010 IPv6 trial plans. For more information please visit the following web site: http://www.comcast6.net We have also made available a partial, dual-stack version of our portal which can be found at: http://ipv6.comcast.net Please do not hesitate to contact me via email with any questions, comments, or clarifications. If you feel that others will find this information interesting feel free to forward this message. Regards, John ========================================= John Jason Brzozowski Comcast Cable e) mailto:john_brzozowski@cable.comcast.com o) 609-377-6594 m) 484-962-0060 =========================================

23 31

domain registra question
by Deric Kwok 31 Jan '10

31 Jan '10

Hi We are doing hosting and We are interested in doing Domain registra Could you provide more info? Thank you

3 2

Countries with the most botnets
by Steven Bellovin 30 Jan '10

30 Jan '10

A colleague needs to know, along with citable sources if possible. Ideally - number of zombified PCs, percentage of zombified PCs, name of nation, source. Threat reports from symantec and macafee suggest the US leads, with China a very close second. Yes, we realize that answers will be imperfect. --Steve Bellovin, http://www.cs.columbia.edu/~smb

5 4

SSH brute force China and Linux: best practices
by Bobby Mac 30 Jan '10

30 Jan '10

Hola Nanog: So after many years of a hiatus from Linux, I recently dropped XP in favour of Fedora. Now that my happy windows blinders are off, I see alarming things. Ugly ssh brute force, DNS server IP spoofing with scans and typical script kiddie tactics. What are the new set of best practices for those running a NIX home computer. Yes I have a firewall and I do peruse my logs on a regular basis. BTW: ever drop a malformed URL to alert an admin to some thing that sucks? w3.hp.com/execs/makes/too/much/money or www.yourbuddiesdomain.com/it/is/all/rfc/space/use/1918/when/referring/to/no… Thanks, BobbyMac

10 9

Re: domain registra question
by Deric Kwok 30 Jan '10

30 Jan '10

Hi Thank you so much Do we need to setup any application for processing? I don't understand this whols. ls it serve? Thank you again On Sat, Jan 30, 2010 at 9:22 AM, hutuworm <hutuworm(a)gmail.com> wrote: > You may want to check the Registrar Tasks section at > http://www.icann.org/en/processes/ > > *Registrar Tasks* > > - Registrar Accrediation Process<http://www.icann.org/en/processes/registrars/raa-process-17feb09-en.pdf> [PDF, > 16K] > - Registrar Accreditation Agreement Renewal Process<http://www.icann.org/en/processes/registrars/raa-renewal-process-18feb09-en…> [PDF, > 16K] > - Assignment Process<http://www.icann.org/en/processes/registrars/assignment-process-17feb09-en.…> [PDF, > 16K] > - Adding a gTLD Appendix<http://www.icann.org/en/processes/registrars/adding-gtld-appendix-17feb09-e…> [PDF, > 12K] > - ICANN Procedure for Handling Conflicts with Privacy Law<http://www.icann.org/en/processes/icann-procedure-17jan08.htm> > - De-Accredited Registrar Transition Procedure<http://www.icann.org/en/processes/registrars/de-accredited-registrar-transi…> [PDF, > 121K] > > > On Sat, Jan 30, 2010 at 10:07 PM, Deric Kwok <deric.kwok2000(a)gmail.com>wrote: > >> Hi >> >> We are doing hosting and >> >> We are interested in doing Domain registra >> >> Could you provide more info? >> >> Thank you >> >> >

2 1

Using /126 for IPv6 router links
by Mathias Seiler 30 Jan '10

30 Jan '10

Hi In reference to the discussion about /31 for router links, I d'like to know what is your experience with IPv6 in this regard. I use a /126 if possible but have also configured one /64 just for the link between two routers. This works great but when I think that I'm wasting 2^64 - 2 addresses here it feels plain wrong. So what do you think? Good? Bad? Ugly? /127 ? ;) Cheers Mathias Seiler MiroNet GmbH, Strassburgerallee 86, CH-4055 Basel T +41 61 201 30 90, F +41 61 201 30 99 mathias.seiler(a)mironet.ch www.mironet.ch

38 96

Apply Now for ARIN Meetings Fellowship to Attend ARIN XXV
by cja＠daydream.com 30 Jan '10

30 Jan '10

ARIN is pleased to offer a Meetings Fellowship Program to bring new voices and ideas to public policy discussions. This call is for Fellows to attend ARIN XXV in Toronto, Canada 18-21 April 2010. If you are interested in participating in the program, submit your application by 19 February. The application, submission instructions, and a detailed description of the program can be found at: https://www.arin.net/participate/meetings/fellowship.html One individual from each of the three sectors within ARIN's service region (Canada, the Caribbean and North Atlantic Islands, and the United States and Outlying Areas) will be selected. Fellows receive financial support to attend the Public Policy and Members Meeting, and ARIN Advisory Council representatives will serve as mentors to the fellows to help maximize their meeting experience. Individuals selected for the fellowship receive: * Free meeting registration https://www.arin.net/participate/meetings/ARIN-XXV/ * Round-trip economy class airfare to the meeting, booked directly by ARIN * Hotel accommodations at the venue hotel, booked directly by ARIN * A stipend to cover meals and incidental travel expenses. Please contact info(a)arin.net if you have any questions concerning the program and the application process. Regards, Cathy Aronson ARIN Advisory Council

1 0

Level 3 DC issues?
by John Palmer (NANOG Acct) 29 Jan '10

29 Jan '10

Anyone see any connectivity issues with Level-3 in the DC area? This issue is causing big latency problems that appeared to have taken out Bank of America's website.

5 4

BGP Update Report
by cidr-report＠potaroo.net 29 Jan '10

29 Jan '10

BGP Update Report Interval: 21-Jan-10 -to- 28-Jan-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS2686 21921 2.1% 139.6 -- AT&T Global Network Services - EMEA 2 - AS18170 20829 2.0% 946.8 -- CHANGWON-AS-KR Changwon National University 3 - AS7643 19874 1.9% 32.2 -- VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT) 4 - AS18106 18698 1.8% 271.0 -- VIEWQWEST-SG-AP Viewqwest Pte Ltd 5 - AS5800 17908 1.7% 88.7 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 6 - AS7303 12288 1.2% 18.3 -- Telecom Argentina S.A. 7 - AS45408 11986 1.1% 5993.0 -- 8 - AS14420 11554 1.1% 37.5 -- CORPORACION NACIONAL DE TELECOMUNICACIONES CNT S.A. 9 - AS37986 11383 1.1% 129.4 -- TULIP Tulip Telecom Ltd. 10 - AS4270 9020 0.9% 1804.0 -- Red de Interconexion Universitaria 11 - AS9829 7823 0.7% 20.7 -- BSNL-NIB National Internet Backbone 12 - AS4134 7407 0.7% 7.3 -- CHINANET-BACKBONE No.31,Jin-rong Street 13 - AS23577 7312 0.7% 12.6 -- ATM-MPLS-AS-KR Korea Telecom 14 - AS17964 7008 0.7% 44.1 -- DXTNET Beijing Dian-Xin-Tong Network Technologies Co., Ltd. 15 - AS14522 6725 0.6% 26.8 -- Satnet 16 - AS35805 6686 0.6% 17.3 -- UTG-AS United Telecom AS 17 - AS11139 5639 0.5% 20.1 -- CWRIN CW BARBADOS 18 - AS8151 5587 0.5% 7.8 -- Uninet S.A. de C.V. 19 - AS17974 5362 0.5% 7.7 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 20 - AS1237 5350 0.5% 37.4 -- KREONET-AS-KR Korea Institute of Science and Technology Information TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS45408 11986 1.1% 5993.0 -- 2 - AS5691 2436 0.2% 2436.0 -- MITRE-AS-5 - The MITRE Corporation 3 - AS4270 9020 0.9% 1804.0 -- Red de Interconexion Universitaria 4 - AS151 3951 0.4% 987.8 -- IND-NTC-AS - Hewlett-Packard Company 5 - AS18170 20829 2.0% 946.8 -- CHANGWON-AS-KR Changwon National University 6 - AS37020 795 0.1% 795.0 -- CELTEL-DRC 7 - AS31055 2282 0.2% 760.7 -- CONSULTIX-AS Consultix GmbH 8 - AS48672 630 0.1% 630.0 -- OKCIBANK-AS Commercial Bank GALS 9 - AS8668 3981 0.4% 568.7 -- TELONE-AS TelOne Zimbabwe P/L 10 - AS23699 2259 0.2% 564.8 -- EZNET-AS-ID IP Teknologi Komunikasi, PT. 11 - AS6822 2780 0.3% 556.0 -- SUPERONLINE-AS SuperOnline autonomous system 12 - AS48359 1589 0.1% 529.7 -- HESABGAR-AS Hesabgar Pardaz Gharb Co. Private J.S. 13 - AS36451 493 0.1% 493.0 -- FUJI-BEDFORD - Fujifilm Microdisks U.S.A., Inc. 14 - AS43818 484 0.1% 484.0 -- MELLAT-AS bankmellat 15 - AS41492 478 0.1% 478.0 -- EXIMBANK-AS BANCA DE EXPORT IMPORT A ROMANIEI (EXIMBANK) S.A 16 - AS28878 2237 0.2% 447.4 -- SIGNET-AS Signet B.V. 17 - AS3475 385 0.0% 385.0 -- LANT-AFLOAT - Navy Network Information Center (NNIC) 18 - AS10445 2851 0.3% 356.4 -- HTG - Huntleigh Telcom 19 - AS11057 349 0.0% 349.0 -- WTHOMPSONCO - J. Walter Thompson 20 - AS20066 319 0.0% 319.0 -- MORRISTECH - Morris Technologies, Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 170.210.56.0/22 8949 0.8% AS4270 -- Red de Interconexion Universitaria 2 - 114.70.96.0/24 5993 0.5% AS45408 -- 3 - 114.70.97.0/24 5993 0.5% AS45408 -- 4 - 203.162.118.128/ 4970 0.4% AS7643 -- VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT) 5 - 110.234.206.0/23 3749 0.3% AS37986 -- TULIP Tulip Telecom Ltd. 6 - 110.234.208.0/23 3749 0.3% AS37986 -- TULIP Tulip Telecom Ltd. 7 - 110.234.204.0/23 3749 0.3% AS37986 -- TULIP Tulip Telecom Ltd. 8 - 222.255.186.0/25 3123 0.3% AS7643 -- VNPT-AS-VN Vietnam Posts and Telecommunications (VNPT) 11 - 192.12.120.0/24 2436 0.2% AS5691 -- MITRE-AS-5 - The MITRE Corporation 12 - 62.168.199.0/24 2275 0.2% AS31055 -- CONSULTIX-AS Consultix GmbH 13 - 202.177.223.0/24 2239 0.2% AS17819 -- ASN-EQUINIX-AP Equinix Asia Pacific 14 - 143.138.107.0/24 2144 0.2% AS747 -- TAEGU-AS - Headquarters, USAISC 15 - 203.246.0.0/24 1728 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University 16 - 59.22.142.0/24 1728 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University 17 - 203.246.23.0/24 1728 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University 18 - 59.22.138.0/23 1721 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University 19 - 220.68.46.0/23 1721 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University 20 - 203.246.0.0/19 1721 0.1% AS18170 -- CHANGWON-AS-KR Changwon National University Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0