- Test - lists.nanog.org

Seeking people who experienced BGP policy violations
by Pierre Francois 08 Jul '09

08 Jul '09

Hi, I would like to trigger feedback from you (people running BGP) on http://tools.ietf.org/html/draft-francois-limited-scope-specifics-00 This draft documents a threat to the respect of BGP policies of an AS. These can be violated due to the injection of more specific routes whose propagation is limited by misbehavior/mis-configurations of *other* ASes. That is, your peer screw up, and you perform transit for free to him as a result. I'd like to receive information about operational experiences of this issue from people who know they already experienced such violations, either by being the victim or being the unfortunate attacker. Info would be : How did you detect the violation ? How did you / your peers reacted ? Did you take actions to avoid the problem in the future ? Up to know, I've only found people who've been the attacker by mistake. I'd like to hear the victims ! I'd also like to hear about people who know they've never been the victim/attacker : just tell me how you know it ;-) As the doc is an internet-draft, I'd ask you to answer in private or on grow(a)ietf.org (subscribe at https://www.ietf.org/mailman/listinfo/grow ) Best regards, Pierre Francois.

1 0

ARIN and DNSSEC
by Mark Kosters 08 Jul '09

08 Jul '09

Hi ARIN is now signing the /8 zones that it is authoritative for (eg 192.in-addr.arpa, etc). This the phase two of a three-phase process. Given that in-addr.arpa is not yet signed, we have published a list of trust anchors that you can download to configure on your local recursive resolvers. Additional details are at http://www.arin.net/about_us/dnssec/ Regards, Mark Kosters ARIN CTO

8 12

Re: Using twitter as an outage notification (was: Fire, Power loss at Fisher Plaza in Seattle)
by Brandon Butterworth 07 Jul '09

07 Jul '09

> Paying a lot more to host the website with higher "burst" capacity > during an emergency, isn't an option. > > The only other idea I've had is to sign all the customers up to receive > an SMS via some sort of broadcast service (the news will fit easily in > one SMS). If the event is suitably calamitous we will do that for you - http://news.bbc.co.uk/1/hi/help/5194672.stm brandon

8 10

Wisconsin DC
by Jeff Rooney 07 Jul '09

07 Jul '09

Does anyone know of any decent data centers in Wisconsin, preferably Madison or Milwaukee, that offer private caged environments or suites? Thanks in advance. -- Jeff

3 3

Is your ISP blocking outgoing port 25?
by Zhiyun Qian 06 Jul '09

06 Jul '09

It has been long heard that many ISPs block outgoing port 25 for the purpose of reducing spam originated from their network. I wonder which ISPs are still doing so. I know comcast has been doing that but they cancelled it after many complaints. It seems to be the same case for Verizon. AT&T is the major one that I know of that is still enforcing this policy. But they said they can unblock port 25 upon request. I am not sure how easy it is. One simple way to test if your ISP is blocking outgoing port 25 is to try: "telnet mx2.hotmail.com 25" or "telnet gmail-smtp-in.l.google.com 25". If the connection fails, it could be due to the fact your ISP is blocking outgoing port 25, although it can also be other reasons such as local firewall configuration. Can someone perform the test and let me know result if possible? Thanks a lot! Regards. -Zhiyun

26 34

151 Front Street in Toronto Fire (TorIX and others)
by Paul Wall 06 Jul '09

06 Jul '09

FYI There is a fire at 151 Front Street in Toronto, which is home to TorIX as well as a variety of other network providers. Rumor is the fire may have ORIGINated in the Peer1 suite. Seems a bad weekend for fires given what happened in Seattle as well. Drive Slow

5 5

Soooo... (Was Re: Using twitter as an outage notification)
by jamie rishaw 05 Jul '09

05 Jul '09

How do I configure my router for that? Router(config)# no ML jibber-jabber ^ % Invalid input detected at 'twitter' marker. -j -- Jamie Rishaw // .com.arpa@j <- reverse it. ish. [Impressive C-level Title Here], arpa / arpa labs

1 0

RE: Fire, Power loss at Fisher Plaza in Seattle
by David Hubbard 05 Jul '09

05 Jul '09

From: Seth Mattinen [mailto:sethm@rollernet.us] > > Apparently it took authorize.net with it, too: > http://twitter.com/authorizenet > > ~Seth No technical explanation of course but it also took down their 'backup facility' according to them on twitter; I assume some bad routing/DNS if they do actually have a backup facility. Lots of online stores are offline right now because of this, and the holiday is unfortunately keeping those store owners from knowing they are not making sales right now. Life in ecommerce... David

32 66

RE: Using twitter as an outage notification
by Skywing 05 Jul '09

05 Jul '09

Hmm... doesn't that kind of defeat the point of using Twitter instead of your own infrastructure to begin with, aside from adding another (Posterous) single point of failure for all your communication mechanisms? Perhaps it is not so important for snow days vs. outage situations, but it seems to me like it would be simpler and more reliable to go directly to the source and not use Posterous. (Besides, I suspect the chances are reasonable that between mail/www/Twitter, you're going to have a low set of users in the other social networking sites crowd who don't have any overlap to begin with. Diminishing returns?) - S -----Original Message----- From: JC Dill <jcdill.lists(a)gmail.com> Sent: Sunday, July 05, 2009 08:18 Cc: nanog(a)merit.edu <nanog(a)merit.edu> Subject: Re: Using twitter as an outage notification Roland Perry wrote: >> There's the temptation by some of companies to leverage the latest >> technology to appear "cool" and "in tune" with customers, but by far and >> large, when something goes down customers either do no nothing, wait, or >> call in. I think the best use of everyone's time is to make sure >> their call >> center/support desk has the capability to post an announcement to >> those that >> call in. > > It's a High School. They don't have a "support desk" (or more than > handful of phone lines [1]). Even the local radio station can't cope > with one call per school asking them to broadcast the news that they > have closed due to bad weather. > >> And then make sure something gets posted to the website. > > Unfortunately, the number of students polling the website for news > means it can't cope with the traffic. Really? Um, wow. How big is this school? Is the webserver on an ISDN line? > I don't believe they can justify paying more for better web hosting, > just to manage this once-a-year half hour event. This is a case where it makes *perfect* sense to offload emergency notifications to another, larger system such as twitter, *as well as* post to the school website (ideally via a blog, so you can use posterus to do both actions in one email). There's no fee, the cost to "set up"[1] is your time to securely configure a posterus account and a list to send to posterus (see below) and then to send an announcement post to posterus (and thus post on the school blog and on twitter) and to send an email to all students and parents notifying them so they can follow the school's announcement feed on twitter. jc [1] To setup: create an announcement mailing list with a name like post72045gh(a)school.edu - the name is kept private. The mailing list will send to posterus (and yourself - do NOT use this list to send to regular users - if you want to do that make a different list, a public list). This prevents students from sending out snow day emails by forging the school's secretary's email address and sending to posterus themselves - they would need to guess the name of the mailing list and send "from" that name to posterus to forge a snow day email. For even more security, set the list to no approved posters. The people who are authorized to send out the announcement will be authorized to *approve* posts from non-members (who are everyone). Anyone on the school staff can post (but still, keep the address private, only distribute it to those who need to know!). The posts are held for moderation and are sent to the people who can approve, and they have to click on the approval link and approve the post before it gets distributed. Test this system with the people who will use it, so that they understand what happens if they are the first one to click on the approval link, and what happens if someone else is first (no messages left to approve). Also, make sure they can remember the password for moderating the private email list - the whole thing grinds to a halt if none of them can remember their password at 4 am when they try to send a snowday announcement and it remains stuck in the distribution list and never gets out and posted. The usual system people use to remember an infrequently used password (of having a password on a note by the computer in the office) doesn't work at 4 am when everyone is at home. jc

2 1

sniffing x.25 on SUN/Solaris
by Kasper Adel 05 Jul '09

05 Jul '09

Hello, I am trying to capture x.25 traffic from a Sun Machine and i wonder if snoop supports it because i asked my customer to capture it and send it over but the trace doesnt include anything x/25 related. Regards, Kas

3 2