- Test - lists.nanog.org

New IPv4 blocks allocated to RIPE NCC
by leo vegoda 31 Aug '06

31 Aug '06

[Apologies for duplicate mails] Dear Colleagues, The RIPE NCC received the IPv4 address ranges 77.0.0.0/8 and 78.0.0.0/7 from the IANA in August 2006. We will begin allocating from these ranges in the near future. The minimum allocation size for these four /8s has been set at /21. You may wish to adjust any filters you have in place accordingly. More information on the IP space administered by the RIPE NCC can be found on our web site at: https://www.ripe.net/ripe/docs/ripe-ncc-managed-address-space.html Additionally, please note that two "pilot" prefixes are being announced from each /8. Details of the prefixes, 'pingable' target names and addresses for each prefix can be found on our web site at: http://www.ris.ripe.net/debogon/debogon.html Best regards, -- leo vegoda Registration Services Manager RIPE NCC

1 1

Re: Spain was offline
by Fergie 30 Aug '06

30 Aug '06

Netcraft: [snip] A botched software update at Spain's central domain registry knocked as many as 400,000 sites offline for several hours Tuesday, according to the Esnic registry. The error left Internet users unable to access domains using .es, the country code top-level domain for Spain. [snip] More: http://news.netcraft.com/archives/2006/08/30/thousands_of_spanish_web_sites… - ferg -- "Gunther Stammwitz" <gstammw(a)gmx.net> wrote: He colleagues, Spain (at least the .es-part) was offline nobody reported it...? What's going on? In the past you were faster... Gunther -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

RE: Fiber cut in Albany?
by Wallace Keith 30 Aug '06

30 Aug '06

have had a ciruit down since 4:25 EDT, supposedly due to a cut south of Springfield MA, in CT. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of J. Oquendo Sent: Wednesday, August 30, 2006 9:17 AM To: nanog(a)merit.edu Subject: Fiber cut in Albany? Anyone know of a fiber cut in Albany? ==================================================== SIG REMOVED TO CONFORM TO NANOG's "ON TOPIC POLICE"

1 0

Fiber cut in Albany?
by J. Oquendo 30 Aug '06

30 Aug '06

Anyone know of a fiber cut in Albany? ==================================================== SIG REMOVED TO CONFORM TO NANOG's "ON TOPIC POLICE"

1 0

Reuters Contact Security issue
by andrew matthews 30 Aug '06

30 Aug '06

I'm looking for someone who works for Reuters I currently have a security problem with one of their core routers to MCI. Please contact me off list.. either here, or drew(a)vel.net Thank you. Andrew p.s. i couldn't find another way to contact as their corporate will not help me unless i have a name. Thanks again

1 0

ICANN to remove fee restrictions on .INFO, .ORG, .BIZ?
by Michael Loftis 30 Aug '06

30 Aug '06

<http://www.icann.org/announcements/announcement-2-28jul06.htm> A bunch of people are calling the sky is falling, the sky is falling. I'm not so sure this is the case. What I'm interested in is if anyone is actually worried about this, or has heard about this, from within this community. For those three TLDs it seems like there is little/less competition than for .COM so price increases could be significant. However I'm not sure this will result in the 'per domain auction' pricing that some people seem to be afraid will happen. -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler

2 1

Experiences with DDoS platforms...
by Fergie 29 Aug '06

29 Aug '06

So, it would appear to me that simply analyzing netflow data, etc., at the time of a (D)DoS attack, and then black-holing (by hand) the offending source addresses may not be the most scalable and efficient way of dealing/coping/mitigating/staying-on-the-air during an attack. Of course, depending where you are on the food chain, the resources one is trying to protect, the volume of DDoS traffic, etc, plays into the equation, etc. I was looking to see what opinions folks on the list may have on the DDoS "appliance" vendor products available -- I'm particularly looking for a stand-alone (or in conjunction with a 'traffic analysis' box) to off-load DoS "mitigation" -- real-world experiences welcome. Please direct responses to me off-list, or not... Thanks, - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

3 2

HTTP issues between TWC and Cogent
by David Coulson 29 Aug '06

29 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Someone pointed out a weird issue to me tonight, which I'm still trying to figure out. It's one of those thing where you run a test, and you just look at it totally confused. Adelphia recently started to move their network over to TWC's, in that, peering between carriers was done with TWC rather than direct with Adelphia - When I traceroute out now, I see TWC in there, where as when I did it a week ago, it wasn't. No big deal, happens all the time. No idea if it has anything useful to do with this problem, other than that I have the problem when using Adelphia/TWC. At least since 11pm EDT tonight, HTTP across TWC is spotty. I've got a network on Cogent & XO (traceroutes seem to indicate that TWC likes Cogent better). If I run a wget from a server on Qwest (Gets to me via COgent), I get ~5Mb/sec, which is about what I'd expect (Qwest box is maxed by a DS-3). From TWC at home, I get 9k/sec. Whacky thing is, if I tunnel across IPSec via TWC, I get 400k/sec. Logic would therefore dictate that I'm able to max my cable modem when using TWC, but something is playing with HTTP traffic along the way. Now I've got Cogent turned down, and I get 400k/sec normally via TWC across XO. I've seen Cogent do some crazy stuff, but I've never seen IPSec have full throughput and HTTP being lame. I've only been able to replicate the issue using TWC, and I've confirmed another network has the same issues (although, they use XO and Cogent too out of the same POPs, so it doesn't help much, other than tell me it's nothing I screwed up :-) My thinking is that Cogent have a confused peering location somewhere that is causing traffic issues, but So, while I'm sitting on hold with Cogent on one phone, and having Adelphia tell me they're unable to take my call on another, is anyone else seeing wacky stuff going on with either network tonight? David -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE88PkTIgPQWnLowkRAmYyAKCyWd7m03s64UnitdtFmAza/T47hwCgx286 3IdVManRmwLwIpqFC7jY2/k= =QXOw -----END PGP SIGNATURE-----

1 1

Re: ICANN to remove fee restrictions on .INFO, .ORG, .BIZ?
by Michael Loftis 29 Aug '06

29 Aug '06

--On August 28, 2006 9:52:30 PM +0000 John Levine <nanog(a)johnlevine.com> wrote: > You're confusing registrars and registries. Every TLD has a single > monopoly registry to which all registrars funnel the registrations. > Switching registrars wouldn't help. AH! That's what I was missing now it makes sense. I wasn't thinking about it carefully enough. So yeah, decidedly bad juju. :/ > > I have a longer blog entry on this at http://weblog.johnlevine.com. > > R's, > John > -- "Genius might be described as a supreme capacity for getting its possessors into trouble of all kinds." -- Samuel Butler

1 0

Calling Volunteers to Download (Out Brazil Performance Tests)
by Eduardo Ascenco Reis 28 Aug '06

28 Aug '06

Dear Fellows, We need help from volunteers outside Brazil with an Internet connection >= 2Mbps that could do just a few downloads and report the expense time (and attach a traceroute). The main idea is to analyse the upload performance to international (out Brazil) sites because some customers are reporting a significative difference in comparison to others ISP. Anyone that can help please contact me in private. Thanks in advance. Regards, Eduardo Ascenço Reis

1 0