- Test - lists.nanog.org

v4 and v6 BOGON list
by Gabriel Terry 22 Mar '24

22 Mar '24

All, I was researching BOGON prefixes and found a reference from IANA listing special-purpose addresses, URLs listed below. Based on my understanding of the list I think I should be able to block all of the entries from my upstream peerings without affecting normal internet traffic. I assume that there would only be special scenarios that the addresses listed in the special-purpose entry would be used. I am interested to hear what others are doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. If anyone has any insight into this please let me know your thoughts, I would love to discuss more on the topic. URLs: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-speci… https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-speci… Thanks, Gabriel L. Terry

5 4

Snapchat CDN/network contact
by Clinton Work 22 Mar '24

22 Mar '24

I'm looking for a Snapchat CDN/network contact to discuss some non-optimal traffic delivery into our network. I couldn't find a peerindb entry for their AS395291. -- Clinton Work

2 1

AWS Web Application Firewall blocks ISP ranges?
by Jonathan Kalbfeld 21 Mar '24

21 Mar '24

Hi All, I just became aware that AWS has a list of hosting IP providers and that list is blocked by their WAF? (!?!?). None of my VM or colo customers can reach anything in AWS, such as Docker, Twilio, etc. I confirmed through source routing that when I access it using one of my peering partners as a source IP it is reachable, but using one of my net blocks, it is not reachable and times out. Checked all of my routing tables and those AWS blocks are definitely visible. Also confirmed from looking glass that my IP ranges are showing up. Has anyone else encountered that? If so, is there a way to get removed from that list? I have a very curated list of clients and I know all of them personally and none of them have been abusing AWS, so I was wondering if it was some kind of blanket ban? If you're internal to AWS, my ASN is 54380, IP ranges affected are 199.33.244.0/24, 199.79.202.0/24, 199.188.96.0/22, 45.59.144.0/22 and 206.197.110.0/24 Feel free to reach out off-list. Thanks, Jonathan Kalbfeld Jonathan Kalbfeld office: +1 310 317 7933 <tel:%28310%29%20317-7933> fax: +1 310 317 7901 <tel:%28310%29%20317-7901> home: +1 310 317 7909 <tel:%28310%29%20317-7909> mobile: +1 310 227 1662 <tel:%28310%29%20227-1662> ThoughtWave Technologies, Inc. Studio City, CA 91604 https://thoughtwave.com <https://thoughtwave.com/> View our network at https://bgp.he.net/AS54380 <https://bgp.he.net/AS54380> +1 844 42-LINUX

3 2

Akamai contact
by Liviu Danicel 20 Mar '24

20 Mar '24

Hello, Anyone from Akamai on the list ? I have a banned /24 subnet and would like to discuss it. Liviu

2 1

Re: Best TAC Services from Equipment Vendors
by Lyden, John C 20 Mar '24

20 Mar '24

> when a TAC engineer wanted to bounce our Voice VLAN SVI in the middle of an *airport* production day. > I about turned over my desk trying to wrest the remote control session back from him before he hit enter > on the shut. Since then, I have had to go through a not insignificant evaluation period of TAC engineers > before I let them take control of a remote session, and it is now simply pure instinct to log SSH sessions. Picture it, Cisco TAC, on a troubleshooting call, runs 'no ip routing' and hits enter before our engineer could scream "NO" at 11:30AM on a core L3 on a college campus. RCA afterwards: 1. "Always log all terminals (we prefer SecureCRT) from Windows bastion host to OneDrive or Google Drive" 2. New CiscoTAC TACACS login created allowing Enable but Denying "configure" as a command. When you troubleshoot, you log in as CiscoTAC. The CiscoTAC tacacs profile description in Clearpass makes it clear why it's there. I left the curse words out. -J John C. Lyden Associate Director, Network Operations Division of Information Resources & Technology Rowan University

7 6

registry for onmicrosoft[dot]com
by Nicholas Warren 19 Mar '24

19 Mar '24

Is there a registry we can search to find the company behind a certain $domain [dot]onmicrosoft[dot] com domain? Thanks, Nich Warren

11 15

VIDEO: NANOG 90 Recap + More
by Nanog News 19 Mar '24

19 Mar '24

*VIDEO: NANOG 90 Recap * Watch Highlight Reel of our Most Recent Meeting Our last meeting may have come and gone— but the memories will last forever! Check out some familiar faces + learn what makes a NANOG meeting special by watching the NANOG 90 Recap! Make memories of your own at our next meeting. Registration is now open for NANOG 91! Watch Now https://nanog.org/stories/nanog-tv/nanog-90-recap/ *What’s it Like to Sponsor NANOG?* Q + A with Sponsor IPv4.Global's Lee Howard Why it's worth your time: Have you ever been curious about or interested in sponsoring a NANOG event? IPv4.Global by Hilco Streambank has been sponsoring NANOG events consecutively since 2015. We caught up with IPv4.Global Senior V.P. Lee Howard to learn more about his experience. Read More https://www.nanog.org/stories/articles/whats-it-like-to-sponsor-nanog/ *NANOG Talk of the Week * Keynote: Abstract Ponderings: A Ten-Year Retrospective w/ Google's Rob Shakir With almost 1k views since our last meeting in February, this talk is worth watching. This discussion is part retrospective/introspective, a candid look at where we've been and what we need to think about as we evolve the next generation of our management (and control) planes. What should we be thinking about as network engineers who write software? Watch Now https://m.youtube.com/watch?v=uOWxogW5Ubg&list=PLO8DR5ZGla8g3h-cGLCF1ywQ7jZ… *Take Advantage of Early Bird Discounted Pricing * Register Now for NANOG 91! Registration is now open for our next meeting, NANOG 91 (10 - 12 June), in Kansas City, MO. Register early to receive discounted pricing. Register Now https://nanog.org/events/nanog-91/

1 0

Google's security.txt
by Marco Davids (Private) 19 Mar '24

19 Mar '24

Anyone from Google, You might want to fix a tiny typo in your security.txt. RFC9116 uses American spelling, not British spelling, like you did. Check here: https://www.uriports.com/tools?method=securitytxt&domain=google.com It's only a small issue, but it might spread when people start using Google's security.txt for inspiration. -- 𝓜𝓪𝓻𝓬𝓸

1 0

Consolidated Communications contact?
by Bryan Holloway 18 Mar '24

18 Mar '24

If anyone from Consolidated Communications is lurking, could you please contact me off-list? We have a mutual customer with a strange routing issue between our two networks. Thanks! - bryan

1 2

Claro Brazil contact
by Scott Q. 15 Mar '24

15 Mar '24

Anyone knows a direct contact for Claro Brazil ? The phone number for their NOC on PeeringDB doesn't work or make sense and e-mails are ignored. Thank you

3 5