- Test - lists.nanog.org

Re: Dealing with ARIN.. my experiences & tips
by Jeff McAdams 14 Apr '03

14 Apr '03

Also Sprach Andrea Abrahamsen >1) Keep records of your IP allocations and assignments (and not just >with SWIP, you need utilization numbers). I know this is a royal pain >in the rear end, and it's not always easy to do with customers. Nah...our ticketing/provisioning/billing system does it. We've got this covered. Maybe not quite as complete as the information in yours was...but pretty darn close. >3) You have to request every three months or so. I'm sorry Jeff M., >but there's really no way around this, no matter how inefficient it may >seem. In other words, "Common sense is dead at ARIN." Which is basically about all I've been saying all along. I understand that they have their policies, and that they abide by them (that they aren't the same policies that are posted on their website is a seperate issue), my main points is that the policies are hideously, horribly broken, that they aren't published and are only learned through repeated dealings with them, and that ARIN's communication flat out sucks...to the point of flat out lieing. >Jeff, you've demonstrated that you are doing the Right Thing. Your >utilization is good and your practices seem well in-line with best >practices. ARIN will recognize this. Perhaps you don't think they do >right now, but if you were not in-line, they wouldn't have given you >any allocation at all. If my practices are in line with best practices, and its clear that I'm doing the Right Thing...then it shouldn't be nearly this onerous to deal with ARIN. This is demonstration that ARIN needs reforming with the cluebat...which is basically all I've said all along. >4) DO NOT TRY TO BEND THEIR RULES. Bend them? Shoot...I've been trying my darndest to even abide by them in the first place. It'd just be alot easier if they were accurately published, and it'd also be easier if they actually made any semblance of common sense. >If you want to protest them, the person who is doing your allocation >isn't the right person to protest to. I disagree with you here. The person to protest the rules to is anyone and everyone that's involved. ARIN makes the big bucks (apparently, I'm still scared to look)...they need to put up with me b****ing at them if they have inane policies like this. I can't believe those of you that meekly put up with this. ARIN's policies are inane, utterly lacking in common sense, and (even with the best of record keeping) ridiculously onerous for business (as you yourself basically even admitted). IgLou has experienced significant cost in interacting with ARIN, and our records are in quite good shape...I can only imagine what larger and/or less organized ISPs must experience in dealing with them. How much of the cable companies time was taken up by you having to deal with ARIN? How much did that cost them? Even with your systems? ARIN is a drain on the technical community, and nothing more considering that their policies don't accomplish what they're intended to accomplish. >5) See Rule #4. If they give you an allocation that you don't agree >with, and they won't budge, accept it. I've had to accept it...but you know what...every time it happens, they're going to hear about, and, if the forum is right (yes, its tangential here on nanog, but more on-topic than most convo's here) then I'm going to make a stink about it in public forums. The solution to corruption and beaurocracy is to shed light on it and embarrass those involved. I find it interest that there has been absolutely no official response =66rom ARIN concerning these issues here. I can only imagine that they're embarrased to confront their inadequacies. >Jeff M., I see your point that going back to ARIN after renumbering >half of the network is a tad on the ridiculous side. That's an understatement. >7) And finally.. ARIN are nice people. Really ! They're not big red >devils with flaming pitchforks just waiting to stab you in the hiney at >every chance they get. Work with them and they will work with you. I >actually started to *enjoy* my tri-montly interactions with them after >a while, if you can believe that. :) In general, the people that I've dealt with at ARIN have been fairly pleasent to deal with. My beef is not with them. Its with the (non-published) policies, and flat out lies (well...I guess an individual somewhere along the way is responsible for the lies, but that's long enough in the past that I don't know who it is, and it seems to be an institutionalized thing from what I can tell). ARIN needs to be reformed. -- Jeff McAdams Email: jeffm(a)iglou.com Head Network Administrator Voice: (502) 966-3848 IgLou Internet Services (800) 436-4456

2 1

Notice - Communitech (AS12077) gone from AADS NAP
by Randy Rostie 14 Apr '03

14 Apr '03

I sent this email out to all our peers at AADS that I had contact information for, but I thought I would send out this (belated,) notice to NANOG, in case I missed anyone. I am the peering coordinator for Communitech.net, AS12077. I regret to inform you we have shut down peering at AADS effective Friday April 11, 2003. I also apoligise for the delay in sending this email, as I was away from the office when the Atlanta NOC shut down our peering. Our IP at the AADS NAP is 206.220.243.138 VPI/VCI: 2/44 Communitech.net was purchased by Interland.com on February 8th, 2002. The decision was made in January of this year to migrate all of Communitech's servers to Interland's facility in Atlanta to consolidate and reduce costs. Most of the 209.15.0.0/8 IP range has already been moved to Atlanta, except for some leased line and colo customers and a couple of dedicated customers. The move will be complete at the end of May. We are actively looking for someone to take over the leased line and colocation customers in the Kansas City area, or else find an alternate facility to place them in until we do find someone to take over that part of Communitech's business. Randy Rostie Network Operations CommuniTech.Net, Inc.

1 0

nph-traceroute
by Karyn Ulriksen 14 Apr '03

14 Apr '03

Hi All, I know that there are quite a few of you out there that are using the nph-traceroute scripts on your servers. A script kiddie has discovered that it's a vulnerable script and is actively search through Google for sites that are using this. It's kind of stupid because he just has www priveleges, but it has proved to be annoying. I know I should have plugged mine a while back and had planned to, but you know... the cobbler's children are barefoot and the shrink's wife is crazy. If you need a handy regex for checking if your perl based nph-traceroute or nph-ping is getting a domain or IP, let me know, I'll be happy to send it your way. The guy didn't think twice about doing a rm -rf / on all the website user/group content. Check your logs for quiet.unixman.org. Karyn

1 0

whois for just prefix list
by Randy Bush 14 Apr '03

14 Apr '03

irr whois servers seem to vary a bit. is there one simple query that, given an as-macro or aut-num, produces the list of prefixes one should accept? randy

9 16

Covad contact?
by Leo Bicknell 14 Apr '03

14 Apr '03

Could someone from Covad please contact me off list? -- Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - tmbg-list-request(a)tmbg.org, www.tmbg.org

1 0

Re: whois for just prefix list
by Kevin Oberman 14 Apr '03

14 Apr '03

> From: Randy Bush <randy(a)psg.com> > Date: Mon, 14 Apr 2003 06:01:07 -0700 > Sender: owner-nanog(a)merit.edu > > > irr whois servers seem to vary a bit. is there one simple > query that, given an as-macro or aut-num, produces the list > of prefixes one should accept? Randy, A part of the IIRToolSet is peval(1) which does exactly what you ask. It can expand an as-set or an aut-num object in a single call. For the RADB servers it works fine. For the current RIPE software just add "-protocol bird" to the command. % peval -h whois.ripe.net -protocol bird AS-CERN ({194.12.128.0/21, 193.110.95.0/24, 192.91.246.0/24, 192.91.244.0/23, 192.91.245.0/24, 192.91.240.0/22, 192.91.236.0/22, 192.91.236.0/24, 192.91.237.0/24, 192.91.238.0/24, 192.91.239.0/24, 192.65.196.0/23, 192.65.192.0/22, 192.65.184.0/21, 192.65.183.0/24, 192.16.166.0/24, 192.16.164.0/23, 192.16.160.0/22, 192.16.156.0/22, 192.16.155.0/24, 158.232.0.0/16, 137.138.0.0/16, 128.142.0.0/16, 128.141.0.0/16}) IRRToolSet is a part of the FreeBSD ports collection and is currently at version 4.7.2. I maintain the port (but not the actual software), so please let me know if there are any problems. R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman(a)es.net Phone: +1 510 486-8634

1 0

Re: Remote hands ANYWHERE?
by k. scott bethke 14 Apr '03

14 Apr '03

Tuc, Good point, I would think we could take the approach that eBay does and have a sort of comments or feedback system so that we could at least have some idea of the level of work someone would do.. Someone does something for you, you pay them, and you post feedback about what they did. The other idea is public flogging at the nog... while extremely satisfying in nature, personally Id rather have something tangable that I can reference online before I ask someone to do something in my cage. Seriously though I see this risk in general with any remote hands you decide to use. There will always be unlabeled servers, and people who hit the wrong switch, pull the wrong cable or read the wrong port. While we hate to see it happen, the fact is we were not there to see it happen right ourselves. -Scotty ----- Original Message ----- From: "Tuc" <tuc(a)ttsg.com> To: "k. scott bethke" <kbethke(a)thruport.com> Cc: "Kevin Day" <toasty(a)dragondata.com>; <nanog(a)merit.edu>; "James Deibele" <jamesd(a)scn.rain.com> Sent: Sunday, April 13, 2003 8:19 PM Subject: Re: Remote hands ANYWHERE? > > > > Combine that with a list of people in each area to contact willing to come > > in and do stuff no matter where they are or what they are doing and you may > > have 90% of your solution. I don't think we are talking about a free > > service here either. I bet lots of people would be willing to help if they > > were in the area and were going to get some booty cash. > > > Hi, > > Sorry to throw a damper on this. There are alot of issues that while > we don't like to think about them, have to. What happens if they power off > the wrong machine? Drop something on their foot? Suddenly have their own > emergency and HAVE to get back to their problems? > > We've done alot of work for people at 25B Telehouse. Luckily all > of it ended up getting worked out properly. But its something I always am > concerned about. > > Tuc/TTSG Internet Services, Inc. >

2 1

Remote hands for One Wilshire?
by James Deibele 14 Apr '03

14 Apr '03

We're looking for someone (ideally a company) to be our emergency hands for equipment located in the ELI space at One Wilshire in LA. We would also have need for occasional non-emergency upgrades and additions. The reason we'd like a company is that we don't want someone on vacation at exactly the time we need those hands on our boxes. With the amount of internet equipment scattered around the US (and the world) it seems like there's a business here for somebody. Just not us. Thanks! jamesd(a)scn.rain.com

4 5

Datacenter Genset Summary
by Dan Lockwood 14 Apr '03

14 Apr '03

Everyone, I have finished compiling all of your responses into a summary document. I included all of the concerns that were surfaced and discuss why, for our particular situation, we will be using one technology vs another. I anticipate some controversy, so try to keep your criticism constructive in nature and I will revise the document to include those points as well. Thanks again to the operator community! http://www.danlockwood.com Dan Lockwood Microsoft Certified Professional CompTIA Network+ Certified Cisco Certified Network Associate

2 1

RE: Hijacking of address blocks assigned to Trafalgar House Group , London UK
by Temkin, David 13 Apr '03

13 Apr '03

Maybe they should do everyone a favor and return the hijacked blocks to ARIN.... I mean hell, does anyone really think that they have 6 /16's worth of machines directly accessible via the 'net? Obviously if they have been hijacked and the admins had the time to post here about it, it's not the end of the world for them... Just a little something to fuel a Sunday flamewar :-) -Dave -----Original Message----- From: bdragon(a)gweep.net [mailto:bdragon@gweep.net] Sent: Saturday, April 12, 2003 7:19 PM To: richard(a)mandarin.com Cc: nanog(a)merit.edu Subject: Re: Hijacking of address blocks assigned to Trafalgar House Group, London UK > Hello! > > I've been asked to draw the attention of Network administrators to the > recent hijacking of various large blocks of ARIN IP-space: > particularly six /16 blocks allocated to the London-based Trafalgar > House Group. > > Trafalgar House Group (THG): > Trafalgar House Group TRAF (NET-144-176-0-0-1) 144.176.0.0/16 > Trafalgar House Group THIN1 (NET-144-177-0-0-1) 144.177.0.0/16 > Trafalgar House Group THIN3 (NET-144-179-0-0-1) 144.179.0.0/16 > Trafalgar House Group THIN4 (NET-144-180-0-0-1) 144.180.0.0/16 > Trafalgar House Group THIN5 (NET-144-181-0-0-1) 144.181.0.0/16 > Trafalgar House Group THIN2 (NET-158-181-0-0-1) 158.181.0.0/16 An example of why allocation boundary based prefix-filters are a good thing. IMPORTANT:The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

4 7