- Test - lists.nanog.org

verizon.net abuse/support contacts?
by Bill 10 Jul '08

10 Jul '08

I need to report something about an IP belonging to them: pool-xxxxxxxx.ny325.east.verizon.net I've looked at their website and the whois record...and sent email to abuse(a)verizon.net, abuse(a)GNILINK.NET, abuse(a)verizon.com Are these the right addresses? If someone works for verizon.net please let me know here or offline. Thanks a bunch! Bill

1 0

Cogent problems in Chicago area?
by Brandon Galbraith 10 Jul '08

10 Jul '08

Is anyone seeing Cogent issues in the Chicago area? We have several racks with them, and our connectivity just dropped off. -brandon

3 3

Cogent problems in Chicago area? (updated with info)
by Brandon Galbraith 10 Jul '08

10 Jul '08

Cogent is indeed having a problem in the Chicago area. No ETR. Master ticket # 759401. -brandon

1 0

Linkedin Contacts
by Felix Bako 10 Jul '08

10 Jul '08

Guyz. Anyone from Linkedin here? please contact me offlist. We have not been able to open www.linkedin.com from Our Ip space for close to 2 months now!!. Any Help will be highly apreciated Regards -- Felix Bako *Team Leader - Networks* Africa Online (K) LTD Tel: + 254 (20) 2792246 Fax: + 254 (20) 2710010 Email: _fbako(a)africaonline.co.ke <mailto:fbako@africaonline.co.ke>_ AIM: felixbako *OFFICIAL CO – SPONSOR OF THE 2008 TUSKER SAFARI SEVENS * A MEMBER OF TELKOM SOUTH AFRICA GROUP *Africa Online Disclaimer and Confidentiality Note* This e-mail, its attachments and any rights attaching hereto are, unless the context clearly indicates otherwise, the property of Africa Online Holdings (Kenya) Limited and / or its subsidiaries ("the Group"). It is confidential and intended for the addressee only. Should you not be the addressee and have received this e-mail by mistake, kindly notify the sender, delete this e-mail immediately and do not disclose or use the same in any manner whatsoever. Views and opinions expressed in this e-mail are those of the sender unless clearly stated as those of the Group. The Group accepts no liability whatsoever for any loss or damages, however incurred, resulting from the use of this e-mail or its attachments. The Group does not warrant the integrity of this e-mail, nor that it is free of errors, viruses, interception or interference. For more information about Africa Online, please visit our website at _http://www.africaonline.com <http://www.africaonline.com/>_

3 2

Re: Multiple DNS implementations vulnerable to cache poisoning
by Christopher Morrow 10 Jul '08

10 Jul '08

On Thu, Jul 10, 2008 at 10:22 AM, Wes Hardaker <wjhns61(a)hardakers.net> wrote: >>>>>> On Wed, 9 Jul 2008 22:55:05 -0400, "Christopher Morrow" <morrowc.lists(a)gmail.com> said: > >>>> aside from just getting some cctlds signed, i will be interested in the >>>> tools, usability, work flow, ... i.e. what is it like for a poor >>>> innocent cctld which wants to sign their zone? >>> >>> If there is sufficient interest, we could do a bar bof to describe some of >>> the tools IANA has... >>> > > CM> I think Sandy Murphy or other Sparta folks have presented some of the > CM> work they've done on this... Perhaps finding one/some of them and > CM> having a more operations focused presentation in LAX or ... is a good > CM> idea as well? > > The tools that Sparta developed (and made freely available via an open > source packaged that is BSD licensed) can be found at > http://www.dnssec-tools.org/ . In particular, signing a zone is yup, and that's helpful stuff. > intended to be easy using "zonesigner" (requires bind tools): > > zonesigner -genkeys db.example.com > great... what about a zone that's getting slaved off of a silent master at the customer site? how does that get integrated? (customer does the dns-sec magic, my server validates the updates... config examples help here) > Then next time, just leave off the -genkeys argument. > > (there is also a daemon called "rollerd" that can auto-sign on a regular > basis and help automate key-rollever timing) > nice, extra load induced on server? impact on the number of zones I can serve? tinydns compatible? db-backended NS daemon support? > The full list of tools and tutorials sectioned into different needs can > be found here: > > http://www.dnssec-tools.org/wiki/index.php/Tutorials > great :) > > All for free. Don't you hate those ??biased??, freely-available, > source-code-supplied-so-you-can-change-it, BSD-licensed open source > packages? > -- I like free... as long as it's the hammer I need for the nails I have. -Chris

1 0

Big delays at Sprint or Verizon network?
by Nicolas Antoniello 10 Jul '08

10 Jul '08

Hi all, Are any of you experiencing some unusual delay at Sprint or Verizon network? From here, we are getting about 400ms, where should be around 150-180ms. Thanks, Nicolas. 2 ibb2agu1-dist.antel.net.uy (200.40.0.143) 0 msec ibb2agu2-dist.antel.net.uy (200.40.0.153) 4 msec ibb2agu1-dist.antel.net.uy (200.40.0.143) 0 msec 3 * * * 4 * * * 5 POS1-0.IG2.MIA4.ALTER.NET (157.130.75.33) 468 msec 492 msec 488 msec 6 * * * 7 0.so-7-0-0.XL1.SJC1.ALTER.NET (152.63.55.106) 576 msec 588 msec * 8 * * * 9 cisco-sjc-gw.customer.alter.net (157.130.198.78) 572 msec 592 msec 588 msec

1 0

Bell Contact
by commo dore 09 Jul '08

09 Jul '08

Can someone from Bell Canada(GT telecom) AS6539 contact me off list please Andrew Weidlich PCC Communications aweidlich(a)pcccinc.com

1 0

updating & checking DNS zone files
by travis+ml-nanog＠subspacefield.org 09 Jul '08

09 Jul '08

Apart from using Bernstein's tinydns, anyone have any scripts for looking for problems in zone files or for incrementing the serial number reliably? BTW: OpenBSD packages for djbdns & others are on my web page -- Crypto ergo sum. https://www.subspacefield.org/~travis/ Truth does not fear scrutiny or competition, only lies do. If you are a spammer, please email john(a)subspacefield.org to get blacklisted.

7 6

RE: tacid.org
by Nick Shank 09 Jul '08

09 Jul '08

After doing a bit of digging, it doesn't appear the any of the tacid.org ip-space is blacklisted (one less battle I have to fight). Fortune 100? Nope. Just a small non-profit org in Tacoma, WA, that got their exchange box rooted. I'm still trying to figure out the full extent of the damage done, but this point, I believe 99.7% of the outbound mail is legit. In-bound is another story entirely, but that's my own private hell to deal with. Thanks all for the input ~Nick -----Original Message----- >From: Frank Bulk - iNAME <frnkblk(a)iname.com> >Sent: Jul 5, 2008 1:21 PM >To: 'Nick Shank' <nick(a)laststop.net>, nanog(a)nanog.org >Subject: RE: tacid.org > >Nick: > >Leaving a domain and IP fallow for such a long time will end up looking like >my garden did this year when I did the same thing -- overrun with weeds. > >Sending a blanket e-mail to NANOG is not going to get the attention of those >who manage the e-mail flow (unless you domain belonged to a Fortune 100). > >Just like I should have with my garden, rather than replant among the weed >seeds and spend 99% of my time pulling weeds, I would recommend sowing a new >field by moving your outbound e-mail server(s) to some fresh address space >(different /24 to be sure, ideally another section of SWIPed space) and >start monitoring your outgoing servers logs. You'll need to work with each >MTA that blocks your e-mail and ask them to delist you from whatever block >(domain or domain reputation) that they have. At the same time, >systematically go to every RBL that tracks by domain name and check the >status of your domain and request delisting as necessary. > >Regards, > >Frank > >-----Original Message----- >From: Nick Shank [mailto:nick@laststop.net] >Sent: Thursday, July 03, 2008 5:51 AM >To: nanog(a)nanog.org >Subject: tacid.org > >Greetings, > My name is Nick, and I have inherited admin duties for tacid.org. For an >un-known amount of time (A month or more?) mail.tacid.org has been an >open-relay, and sending out large amounts of spam. This should now be fixed. >If anyone is having issues with this domain still, please contact me off >list. >Thank you, >Nick > > >

3 2

Re: Multiple DNS implementations vulnerable to cache poisoning
by Paul Ferguson 09 Jul '08

09 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Sean Donelan <sean(a)donelan.com> wrote: >On Wed, 9 Jul 2008, Steven M. Bellovin wrote: >> How many ISPs run DNS servers for customers? Start by signing those >> zones -- that has to be done in any event. Set up caching resolvers to >> verify signatures. "It is not your part to finish the task, yet you >> are not free to desist from it." (From the Talmud, circa 130.) >> >> No, I didn't say it would be easy, but if we don't start we're not >> going to get anywhere. > >Are these the same ISPs that haven't started implementing other >anti-spoofing controls like BCP38++? > >What is the estimated completion date to stop all spoofed IP packets, >included but only DNS spoofing? The second Tuesday of next week? ;-) - - ferg (BCP38 Protagonist) -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIdP19q1pz9mNUZTMRAjhrAKC1a0S5jPNyp3BMg932hghE8xG/xwCgzNgl wdnoEpm0aNTbg+2KHU0w94I= =Uyns -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0