- Test - lists.nanog.org

IGP/BGP design question
by ML 18 Jun '09

18 Jun '09

We have three main cities wherein eyeballs live. Currently we have San Jose and San Francisco traffic egressing in SF, and Los Angeles egressing in LA. There is one private 2x1gig long haul linking SJC to LA and a 1x 10gig linking SJC to SF. i.e SF <-10gig-> SJC <-2gig-> LA Each area is a separate OSPF domain. Static routes define how to reach the RFC1918 space defined for each area. Currently SF and SJC exchange their public blocks in iBGP. There isn't an iBGP session between SF and SJC to LA. We would would like to place our public IP blocks into iBGP with LA and use the 2gig long haul as a backup path for critical traffic destined for the Internet.(Only certain prefixes originated from each egress point will be announced out the opposite egress point; Appropriately locally-pref down inside our common transit ASN) Using only one assigned ASN is this a good idea? Is our IGP setup foobared (I've been mulling around possible changing the IGP design)? I can think of a problem or two this IGP design might cause us but it's a huge change on our part if we do it. The egress points are not DFZs, so if either the 10gig or 2gig link go down the default route can be taken to reach the public blocks in either of the three regions. Thanks

1 0

RE: spamhaus drop list
by Michiel Klaver 18 Jun '09

18 Jun '09

Well, there is always the bogon-list from Team Cymru http://www.cymru.com/Documents/bogon-bn-agg.txt And the bogon-list from BGPmon http://bgpmon.net/showbogons.php?inet=4&global=yes&private=yes Both containing prefixes that should not be announced on the internet, but often used by spammers trying to deliver their content. -------- Original message -------- Subject: RE: spamhaus drop list Date: Tue, 16 Jun 2009 14:00:51 -0400 From: Quinn Mahoney <quinn(a)activehost.com> To: <nanog(a)nanog.org> > Is there a competing droplist, that can be compared against > Spamhaus's droplist? That seems like an extraordinary claim, > so I'm not satisfied with the evidence provided. Is this not > the best droplist? -- With kind regards, Michiel Klaver BA.ict GrafiX Internet B.V. Stationsplein 20 2907 MJ Capelle aan den IJssel The Netherlands Web: http://grafix.nl/ Tel: +31-(0)10-2640210 Fax: +31-(0)10-2640211 Providing high-end professional internet services at our privately owned net-neutral in-house Data Center Facilities in Capelle aan den IJssel and Alphen aan den Rijn. Connected at TeleCityRedbus2 (Amsterdam) and Spaanse Kubus (Rotterdam).

4 4

Verio taking twitter down during Iran Election Riots?
by Erik Fichtner 17 Jun '09

17 Jun '09

http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-p… Am I reading that right? Is someone at Verio seriously going to take twitter out for 90 minutes at 9am in Tehran?

15 19

Hotmail Postmaster
by Bill Blackford 17 Jun '09

17 Jun '09

Can someone from Hotmail contact me off list? Sorry for the SPAM posting, we've tried other methods. Thanks -b -- Bill Blackford Senior Network Engineer Technology Systems Group Northwest Regional ESD my /home away from home

1 0

[NANOG-announce] change in roles on the program committee
by Todd Underwood 16 Jun '09

16 Jun '09

today, at our lunchtime meeting, the nanog program committee selected a new chair, david meyer of cisco and university of oregon, and a new vice-chair, tom daly of dynamic network services. please join me in cogratulating them in person if you're here at nanog. for the past two years, ren provo has served as vice-chair of the program committee, a role that was basically created specifically for her. she has been critical in the development of the program committee into the open, active, and even somewhat-organized group that it is today. i'm proud to have worked with her on this project for the past two years and am extremely grateful for everything she has done. ren and i decided to resign our positions prior to the october meeting to ensure a smooth transition. we will both continue to serve as members of the program committee through the end of our current terms in october. NANOG has been getting better and better for the last several years. we're announcing locations much earlier and we're continuing to develop and experiment with the content to make it more relevant and more interesting for attendees. credit for these efforts certainly go to members of the steering and mailing list committees and to merit staff, but they also go to the program committee. the nanog program committee is full of some of the smartest, best people that i've ever worked with. it's a pleasure to be associated with them. eight (8) of the slots on the program committee will be opening up this october. if you'd like to work with other interesting people to make the nanog conference better, please consider submitting your name to be considered for one of these slots. the steering committee will announce details, or you can come see almost any member of the PC for more information. again, congratulations to dave and tom. cheers, todd underwood, outgoing chair for the program committee spots opening up in october _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

ADMIN: List FAQ/Monthly Post.
by NANOG Mail List Committee 16 Jun '09

16 Jun '09

This 100-line document contains 62% of what you need to know to avoid annoying 10,000 people in your email to the NANOG list. It also contains pointers to another 23%. Please take 5 minutes to read it before you post [again]. General Information =================== About NANOG: http://www.nanog.org/about/ NANOG News: http://www.nanog.org/ NANOG lists and AUP: http://www.nanog.org/mailinglist/ NANOG List FAQ: http://www.nanog.org/mailinglist/listfaqs/ To Subscribe or Unsubscribe from the list: http://mailman.nanog.org/mailman/listinfo/nanog To contact the list's admins: admins(a)nanog.org Posting Policy ============== The NANOG list has over 10,000 subscribers so it is very easy for a thread to have scores of posts while being off-topic and only of interest to only a small proportion of subscribers. Please consider before each post if your email will be of interest to the majority of members or might alternatively be emailed directly the people of interest or posted to another forum. Please read the FAQ and AUP policy before posting for more details. Especially the following are discouraged: * Is a certain site down? Other Outages not affecting half the Internet. Please use http://downforeveryoneorjustme.com/ or a similar site. Please post to the Outages mailing list: http://wiki.outages.org * Spam Please use SPAM-L - http://www.claws-and-paws.com/spam-l * Contacting People * http://puck.nether.net/netops/ * http://www.peeringdb.com * Please try other methods of contacting sites before you post to NANOG. Saying something like "I tried calling 213-555-3333 but no answer" shows you _have_ tried alternative methods first. * Political Issues * Topics such as ICANN policy, Government Policy or Law changes that do not have short term Operational impact should be avoided. * Operation topics with more specific lists * DNS - http://lists.oarci.net/mailman/listinfo/dns-operations * Email - http://www.mailop.org/ * NANOG Mailing list policy Please use the nanog-futures list or contact admins(a)nanog.org Please also avoid ================= * Sending posts to the list relevant to only one or two people on this list, such as tests or traceroutes in response to another post for comparison to those originally posted. * Jokes, Puns, amusing observations, spelling corrections. Other NANOG related lists ========================= * NANOG-futures - for discussion of the evolution of NANOG, including organizational structure, policies and procedures, and agendas for NANOG meetings. Such topics aren't appropriate for the main NANOG mailing list. http://mailman.nanog.org/mailman/listinfo/nanog-futures * nanog-attendee - For discussion of venue-specific issues relevant to attendees of the current NANOG physical meeting. http://mailman.nanog.org/mailman/listinfo/nanog-attendee * nanog-announce - For announcements of NANOG meetings an other Important NANOG related announcements. Low traffic and all posts are also sent to main list. http://mailman.nanog.org/mailman/listinfo/nanog-announce Other Mailing Lists =================== Information about related lists: http://www.nanog.org/mailinglist/listfaqs/otherlists.php

1 0

Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?
by Erik Fichtner 15 Jun '09

15 Jun '09

Brandon Galbraith wrote: >> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-p… > You sure it's their network, and not Twitter's core/edge? They're blaming it on their upstream.

2 1

Apple SSL CA cert Fail (MacOS 10.5.7)
by Robert E. Seastrom 15 Jun '09

15 Jun '09

Hi foks, Ordinarily I wouldn't send reports of operating system bugs that pose no security risk to this list, but I'm making an exception in this case due to the following conditions: 1) There are a lot of Mac users in the NANOG community. 2) There is a preponderance of folks here who run their own CAs 3) CA software, particularly OpenSSL, is byzantine enough that upon running into a problem, one is likely to think he is the faulty party. 4) I just burned three evenings last week chasing this bug. I don't have sufficient extra hair to be spending my evenings tearing it out and you might not either. Summary: MacOSX's keychain access application mishandles importing root CA certs. This only happens under 10.5.7; other versions are fine. There is a workaround using command line tools. Details at http://support.apple.com/kb/TS2747 -r

1 0

spamhaus drop list
by Quinn Mahoney 15 Jun '09

15 Jun '09

I'm looking to implement the Spamhaus drop list. http://www.spamhaus.org/drop/index.lasso On their FAQ they have a script that looks like it grabs the lists text file and connects to a given router, and tells you what has changed in the list, and what your router is null routing. I'm not sure if it then removes the null routes if a list entry has been removed. I haven't found much documentation on the net regarding this. In the future it looks like you will be able to peer with them and null route traffic from a private AS, which will be routes from the drop list. Right now though, it looks like you'd have to update an ACL manually for any changes to the list. Or use this script which null routes the traffic (I guess it's not a big deal getting the syn packets, as long as the mail won't send because of the null route). I am not sure if this script updates the null routes automatically, or how to use it, I can't find to much documentation. Any documentation on this script or another script available. What are your suggestions? thanks

3 2

GoDaddy DNS Contact
by Curtis Maurand 15 Jun '09

15 Jun '09

Would a GoDaddy DNS registration rep contact me off list, please? Thanks in advance, Curtis Maurand 207-252-7748

1 0