- Test - lists.nanog.org

Re: DoD IP Space
by Randy Bush 27 Apr '21

27 Apr '21

>> what i hope is that they publish the results of their experiment. a >> bit more depth in discussion in ripe community. > > https://bgp.he.net/AS8003#_prefixes those are not results of an experiment. those are some visible artifacts of (possibly part of) an experimental setup. what i meant was the *results* of their measurements and the insights gained. < snark > ( and when i wanted to know what prefixes were being announced, i looked at my own router(s). neither cisco, juniper, nor arcos seemed to have the equivalent of `show ip bgp regexp _8003$ insight` though i have been asking for years :) randy --- randy(a)psg.com `gpg --locate-external-keys --auto-key-locate wkd randy(a)psg.com` signatures are back, thanks to dmarc header butchery

1 0

DoD IP Space
by Chris Knipe 27 Apr '21

27 Apr '21

Hi Guys, Except for the email on ARIN's details, does anyone else have a contact for the DoD? We are experiencing a situation with a 3rd party (direct peer), wanting to advertise DoD address space to us, and we need to confirm whether they are allowed to do so or not. Range in question is the 22.0.0.0/8 network, which according to ARIN is actively assigned to the DoD (US). -- Regards, Chris Knipe

60 178

Re: EMail server gets blocked by Microsoft
by Richard 27 Apr '21

27 Apr '21

> Date: Tuesday, April 27, 2021 09:35:35 +0200 > From: Dominque Roux <dominique.roux(a)ungleich.ch> > > is there anyone out there who has some experience with the blocking > mechanism of Microsofts mail server? We're running a mail server at > our company which ends up on their blacklist from time to time and > we're wondering if there are some steps we could take in order to > prevent this. You may want to join the mailop mailing list: List-Archive: <https://list.mailop.org/private/mailop/> List-Post: <mailto:mailop@mailop.org> List-Subscribe: <https://list.mailop.org/listinfo/mailop>, <mailto:mailop-request@mailop.org?subject=subscribe> and ask there as it seems more applicable to that list, and is a common topic of discussion there.

1 0

Peering/Google
by Ahmed Dala Ali 27 Apr '21

27 Apr '21

Hi, Could someone from Google peering team ping me off-list? We have an open ticket, and the last response that we got was on Feb 23th. Regards, Ahmed

1 1

Twitter routing contact
by bobp＠purdon.id.au 26 Apr '21

26 Apr '21

Hi All, Is there anyone out there from the routing team at Twitter that could get in touch to look at some sub-optimal routing we're seeing? We've tried the Peeringdb contacts with no success. Cheers, Bob. (AS38195)

1 0

DOD prefixes and AS8003 / GRSCORP
by Siyuan Miao 26 Apr '21

26 Apr '21

Hi Folks, Just noticed that almost all DOD prefixes (7.0.0.0/8,11.0.0.0/8,22.0.0.0/8 and bunch of /22s) are now announced under AS8003 (GRSCORP) which was just formed a few months ago. It looks so suspicious. Does anyone know if it's authorized? Regards, Siyuan

17 32

Cogent RPKI invalid filtering
by Robert Blayzor 26 Apr '21

26 Apr '21

According to Cloudflares isbgpsafeyet.com, Cogent has been considered "safe" and is filtering invalids. But I have found that to be untrue (mostly). It appears that some days they filter IPv4, sometimes not, and IPv6 invalids are always coming through. I know it's Cogent, but curious as to what others are seeing. invalid.rpki.cloudflare.com has address 103.21.244.15 invalid.rpki.cloudflare.com has address 103.21.244.14 invalid.rpki.cloudflare.com has IPv6 address 2606:4700:7000::6715:f40e invalid.rpki.cloudflare.com has IPv6 address 2606:4700:7000::6715:f40f BGP routing table entry for 103.21.244.0/24 174 13335, (aggregated by 13335 172.69.172.1) Origin IGP, metric 83040, localpref 100, valid, external, best, group-best, import-candidate Community: 174:21101 174:22012 BGP routing table entry for 2606:4700:7000::/48 174 13335, (aggregated by 13335 172.69.172.1) 2001:550:2f01:: from 2001:550:2f01:: (66.28.1.115) Origin IGP, metric 83040, localpref 100, valid, external, best, group-best, import-candidate Received Path ID 0, Local Path ID 1, version 1272502628 Community: 174:21101 174:22012 -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

2 1

RE: BGP and The zero window edge
by Jakob Heitz (jheitz) 25 Apr '21

25 Apr '21

Ben's blog details an experiment in which he advertises routes and then withdraws them, but some of them remain stuck for days. I'd like to get to the bottom of this problem. Has anyone else seen this before or can provide data to analyze? On or off list. Regards, Jakob. -----Original Message----- Date: Wed, 21 Apr 2021 07:31:10 -0400 From: "Jean St-Laurent" <jean(a)ddostest.me> Nice article explaining a specific BGP corner case not removing routes when TCP window reaches 0. https://blog.benjojo.co.uk/post/bgp-stuck-routes-tcp-zero-window The proposed solution is a new RFC for BGP with the suggestion to introduce a new timer. Fascinating! Jean St-Laurent /CISSP ddosTest me security inc site:? https://ddostest.me

8 10

OOB management options @ 60 Hudson & 1 Summer
by Matthew Crocker 25 Apr '21

25 Apr '21

I have routers in both 60 Hudson St & 1 Summer St and I’m looking for some low cost bandwidth options for out of band management. Currently I have Opengear boxes at each site with cell modems but they don’t work too well. I either need to replace them with new cell based devices or find a wireless/ethernet bandwidth option. I only need a couple serial ports and ethernet for when everything breaks. I’m in DR space @ 60 Hudson and the Markeley MMR @ 1 Summer I’m surprised OOB bandwidth isn’t a feature for colocation providers. Thanks

18 21

RIP Dan Kaminsky
by George Herbert 24 Apr '21

24 Apr '21

Reported widely on Twitter by his personal friends, Dan Kaminsky passed away yesterday. The DNS community has lost an immense contributor. -George Sent from my iPhone

5 4