- Test - lists.nanog.org

cogent outage
by Mills, Charles 24 Jul '07

24 Jul '07

>From Cogent's Website: Welcome to Cogent Communications' Network Status Message. Today is 7/24/07 at 14:11 ET. At this time, some customers may be experiencing a service outage in Pittsburgh, PA. This is being caused by a possible fiber cut outside Pittsburgh. Cogent Network Operations is working with our vendor to restore as soon as possible. At this time, there is no estimated time of repair. Chuck Charles L. Mills Senior Network Engineer Access Data Corporation / Pittsburgh, PA 15238 (412) 968-4024 FAX: (412) 967-9504 cmills(a)accessdc.com / http://www.accessdc.com Hosting, Colocation, D-R and Managed Services This e-mail message and any files transmitted with it contain confidential information intended only for the person(s) to whom this email message is addressed. If you have received this e-mail message in error, please notify the sender immediately by telephone or e-mail and destroy the original message without making a copy. Thank you. Neither this information block, the typed name of the sender, nor anything else in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message.

1 0

iPhone and Network Disruptions ...
by Prof. Robert Mathews (OSIA) 24 Jul '07

24 Jul '07

Fellow Nanogers: Reports have floated across my desk in the past week, which have suggested that iPhones owned by faculty, staff and students have been flooding university campus Wi-Fi networks in parts of the country. For example, see: *"Duke Wi-Fi Crippled by Apple iPhones" *at http://www.sci-tech-today.com/story.xhtml?story_id=10200AG9NMHU Since that story first aired, and by applying a patch that was subsequently provided by Cisco, Duke has now come to see the elimination of the problem, see: "*Duke Resolves iPhone, Wi-Fi Outage Problems"* at http://www.eweek.com/article2/0,1895,2161065,00.asp There are certain aspects of this story in which I have the most interest, and the following questions (if I may be permitted to list them) detail my concern - adequately. I wish to ask you: 1) is the iPhone an extra-ordinary device when comparing it with devices of a comparable nature, which also request ties to a Wi-Fi network, (there are many that use Wi-Fi enabled Smart-phones and PDAs on campuses -- so, why do 'they' not pose a similar problem) 2) is this problem a result of poor planning and services implementation at certain campuses, 3) is this story - a product of great exaggerations? 4) if there are technical issues indeed that permit iPhones in particular to DoS Wi-Fi nets, what can these storms be attributed to, and what can/should be done about it? If you are in a position to respond, I would like to hear from you, either publicly or privately. If there is enough group interest in the matter, I would be most happy to summarize. All the best, Robert. --

10 10

Question on Unrecognized BGP Path Attribute
by Xin Liu 24 Jul '07

24 Jul '07

Hi, I have a question about unrecognized BGP path attribute. According to RFC4271, when a BGP router sees an UPDATE with an unrecognized optional and transitive path attribute, it should retain the attribute, and if the path is selected, it should propagate the attribute to its neighbors. My question is, if later the router sees an update to the path in which only the unrecognized attribute has changed, should it immediately propagate the change to its neighbors? My guess is a yes, but I'm not sure because it's not explicitly written down in the RFC. Another question is, in such a case, what will the current routers from different vendors do? Anyone has any experience on this? Best Regards, Xin Liu

2 1

Re: An Internet IPv6 Transition Plan
by Christian Kuhtz 24 Jul '07

24 Jul '07

Chris, I think those are very sane opinions and very well stated at that. There is no reason for there to be a fundamental shift here, there is nothing all that revolutionary about IPv6 that breaks existing model (policy decisions around MH, dreaming about NAT / PAT-less Internet, etc aside). Once businesses decide that it's time to adopt, this should be a normal process like any other adoption. Best Regards, Christian ------Original Message------ From: Chris L. Morrow Sender: owner-nanog(a)merit.edu To: Durand, Alain Cc: John Curran Cc: nanog Sent: Jul 24, 2007 12:11 PM Subject: RE: An Internet IPv6 Transition Plan On Tue, 24 Jul 2007, Durand, Alain wrote: > > One of the things that is missing IMHO is that there is no clear vision > of what the IPv6 Internet will/should looks like. Let me focus on the 'look like'... there are mostly ipv4 paths from each ipv4 endpoint to each other ipv4 endpoint (keeping ourselves to the 'global internet' here). I think it makes sense that the 'ipv6 internet' will look very similar (v6 connectivity from endpoint to endpoint). Now, the tricky parts are the mean time where some ipv4-only host (due to it's network infrastructure not being upgraded to dual-stack capabilities) needs to access some 'important' ipv6-only content. Or the reverse situation as well... (yes, there are firewalls and things that block some end-to-end connectivity those are mostly not important for the 'looks like' discussion) > residential > broadband for a minute, I'm fully aware there are other cases, but let's > start somewhere. > > 1) What is the IPv6 'service'? I think that in the near term 'all' dsl/cable/dial folks will have to offer dual-stack environments. There is little hope of gateways being successful in larger deployments. (imho) > > 2) What is the connectivity model in IPv6 for the residential customer? > 1 address versus prefix delegation? > what prefix size? I had thought it was 1 prefix, I had thought it was a /64 or a /56 someone keeps moving the classful boundaries :( but pick one. Maybe it'd be helpful to be able to subnet that, we ought to think about that too I suppose. > is this prefix 'stable' or 'variable' over time? (ie renumbering is > expected) renumbering is 'free' in ipv6 right? why not stick to your 7 day leases? Surely you'll want to keep the ability to move netspace around as capacity issues arise? > What types of devices are connected? PCs or appliances or sensors? what types exist today? pc's, appliances, sensors... I suspect phones as well. > What is the management model in the home? call grandson? I am probably missing your question here... > Are there 'servers' (ie things that answers connections from the > outside) in the home? my personal opinion is 'yes'... there are a number of things today that do this sort of function, in the IETF v6ops meeting slingbox was mentioned as a specific example. > 3) What is the security model of all this? > I just listened today half mistified to a presentation at IETF > that was saying that the 'recommended' deployment model in the home > is to put a NAT-like stateful firewall in the home gateway... > This would mean that IPv6 would have to inherit all the NAT-traversal > technologies from IPv4 to work... Is this really what we want? I think that NAT is coming, regardless of anyone's want to avoid it, we'll have to plan for that. I think that if we get the chance to start over, let's do it 'right' or 'righter' or 'more correctly/securely' if at all possible, eh? Less direct pc->internet more pc->firewally-thingy->internet. (imho) > > 4) What about the 'legacy' devices that cannot upgrade to IPv6? > What kind of service is expected for those? Does defining an > 80% type solution as in 1) take care of them? > won't they have ipv4 'forever'? at some point the traffic will flip (more v6 than v4) but for the near term v4 seemingly will dominate and thus remain strong. -Chris -- Sent from my BlackBerry.

1 0

Bots back to full throttle
by Sean Donelan 24 Jul '07

24 Jul '07

The DNS entries for the EFnet and other mainline IRC servers previously affected appear to have timed-out/been removed from various ISP caching DNS resolvers I checked. I didn't check if all the routing blackholes have cleared up. User-based IRC servers should back to being pummled by Bot C&C requests as normal now. As I said, false positives suck. Unfortunately there isn't an anti-abuse system that never makes a mistake; unless you do nothing. I'm skeptical of people who claim they've never made a mistake.

1 0

Current rack pricing?
by Mike Lyon 24 Jul '07

24 Jul '07

Curious as to what other companies are paying on a per-rack basis at the various tier-1 providers (L3, att, sprint) with dual 30 amp 120vac drops in them? Any input would be appreciated. Thanks, Mike

1 0

Re: How should ISPs notify customers about Bots (Was Re: DNS Hijacking
by Paul Ferguson 24 Jul '07

24 Jul '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Sean Donelan <sean(a)donelan.com> wrote: >On Mon, 23 Jul 2007, Joe Greco wrote: >> So how do you connect to the real IRC server, then? Remember that most >> end users are not nslookup-wielding shell commandos who can figure out >> whois and look up the IP. > >If those users are so technically unsophisticated, do you really expect the other users with infected computers to figure out how to disinfect their computer and remove the Bots instead? > I would imagine that if we're talking about "unsophisticated" users, the majority of them have no idea what IRC is anyway -- most of them are using AIM, or Yahoo! IM, or.... - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.2 (Build 2014) wj8DBQFGpO2Uq1pz9mNUZTMRArtXAKD/gF0YM9MYcLA6AZ2InaNBrlgaHACgngiP kzDzfUd+9BsdcbxDz1Z9xig= =OoHG -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

5 4

RE: DNS Hijacking by Cox
by Neil J. McRae 23 Jul '07

23 Jul '07

Have you tried asking a lawyer? Or even calling Cox and ask them what's going on? Could be they have been asked to do this by law enforcement or some other reason... Regards, Neil _____________________ isn't there a law against hijacking dns? What can i do to persue this?

1 0

DNS issues?
by Erik Amundson 21 Jul '07

21 Jul '07

We just lost DNS totally for a while and just got it back...XO communications also lost almost all Internet routes at the same time... Anyone else noticing weirdness? Erik Amundson

7 12

Carrier Recommendations
by Daniel 21 Jul '07

21 Jul '07

All, I am currently in the process of evaluating carriers for future expansion into international regions, primarily Asia, Europe and South America. I am comfortable with AT&T and Verizon however I would like to make sure I include all the major players and would like your direct feedback and commentary in regards to any of them. These are the key areas I am concerned with. Support Reliability Flexibility Complexity Coverage I am looking at two deployment options as well if anyone would like to comment. 1) A single carrier for global connectivity to all sites (mpls etc) 2) A single carrier for global regional connectivity, and in country/regional carriers for all local offices that funnel back to regional aggregation points. Any insight would be greatly appreciated. Thanks, Daniel

4 3