- Test - lists.nanog.org

in-addr.arpa zone generation process to change
by ARIN IN-ADDR Role 17 May '01

17 May '01

When ARIN began operations, one of the tasks that it took over from the InterNIC was the generation of the zone file for the in-addr.arpa domain. In order to correct long-standing issues with the data in the zone file, new software is being deployed. ARIN policy states that allocation subscribers with networks of /16 or shorter prefix are responsible for maintaining all in-addr.arpa domain records for reassignments within the block. They must also provide to ARIN the host names of the nameservers hosting any delegations. ARIN will continue to host domain records for delegations of networks with prefixes longer than /16. The in-addr.arpa zone will contain delegations for any /8 containing nameservers within ARIN's database. For address space not covered via these delegations, the in-addr.arpa domain will contain delegations for /16's with nameservers. For address space still not delegated and as mentioned above, the in-addr.arpa domain will contain delegations of /24's for networks longer than a /16 containing in-addr nameservers. In all cases, the most specific reassignment with nameservers at each octet boundary will prevail. ARIN is making every effort to ensure that any impact from these changes will not disrupt in-addr.arpa name services. If you have concerns whether in-addr.arpa name services will be impacted for your networks, please review examples of the changes to occur at: http://www.arin.net/inaddr/inaddr-examples.txt If you still have concerns after reviewing these examples, please direct specific questions about your networks to inaddr(a)arin.net. We have tentatively scheduled implementation of the new process for late May or early June. A specific date will be announced several days prior to the cut-over on both the arin-announce and nanog mailing lists. Regards, Ginny Listman Director of Engineering ARIN

1 0

ARIN, and reservations?
by Alex Rubenstein 17 May '01

17 May '01

An interesting note; has anyone else been assigned non-contiguous space when the contiguous block had been 'reserved' for you? For instance, we were assigned 64.21/17 about a year ago, with 64.21/16 reserved (we were told). It was then extended to a /17 + /18. We went to get more, and now we've got some other /19 (they haven't actually assigned it). The point is, if 64.21/16 had been reserved, as they had said was done, today we'd only be making one announcement; 64.21/16; instead, we have to announce a /17, /18, and a new /19, or three times the announcements. On a grand scale, or even a moderate scale, three times the announcements is a significant amount. Any comments? PS: as an aside, as anyone else noticed ARIN continually, over the last year or so, making the allocations smaller and smaller? Our first allocation ever was a /17; now we get them in chunks of /19's. Does ARIN have any interest or care in the size of the global routing tree?

4 6

Re: heads up on 80/8 [actually operational, so don't read this!!!]
by Philip Smith 17 May '01

17 May '01

TBH, a new /7 or /8, whatever, going in to production anywhere on the planet should be announced to the regional operators lists (NANOG, APOPS, EOF and AfNOG). Hopefully the registry folks can add that little chore to the long list of other things they have to think of... Or maybe IANA could widen the announcement next time? This was the original from John: >From: "John Crain" <crain(a)icann.org> >To: <routing-wg(a)ripe.net>, <lir(a)ripe.net> >Subject: 80/8 and 81/8 allocated to the RIPE NCC >Date: Mon, 9 Apr 2001 13:47:21 -0700 Message-ID: <EDEBKALLMADOHECDLBLIOEBBCAAA.crain(a)icann.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal > >FYI: > >This is just a quick heads up, my apologies if you recieve duplicate copies. > >IANA has recently allocated the following address ranges to the RIPE NCC >Regional Internet Registry. > >80.0.0.0 - 81.255.255.255 > >These will start to be allocated to ISPs shortly. > >You may wish to adjust any filters you have in place accordingly. > >John Crain >ICANN philip -- At 17:42 17/05/2001 +1000, Bruce Campbell wrote: >On Wed, 16 May 2001, John M . Brown wrote: > > > While I could agree that its not a problem till someone tries to use it, > > I point out that ARIN does make an announcement when they are going > > to start issuing from a new IANA block. > >And I'll counter-point out that ARIN is notifying relevant groups in its >Region. Why would you expect the RIPE NCC to formally notify a group >(nanog) that is not in its region (Europe) ? > >To keep this operational, this lists the various /8s and who is >(nominally) in charge of 'em; it may be of interest to people who haven't >reviewed their filters in ages: > > http://www.iana.org/assignments/ipv4-address-space > > > We, The Net Operators, should have this information so that we can update > > our filters, should we see fit to, and thus cause as little negative impact > > as possible. > >s/The Net/The North American Network/ >s/possible/possible to traffic that transists North America/ > >--==-- >Bruce. > >currently not in North America, and certainly speaking for myself ;)

2 1

To CAIS Engineers - WAKE UP AND TAKE CARE OF YOUR CUSTOMERS
by John Palmer (NANOG Acct) 17 May '01

17 May '01

<FLAME ON> It has been a trying time at CAIS in the last few days, I'm sure. PSINet dumped all of their DSL customers onto CAIS. Covad is the backhaul provider for them both. Need I say more? Bottom line, I dont know how many thousands of people were without service for more than a day because the whole transfer was botched. We have a situation where we had a DSL connection from PSI and were using our own IP addresses. Problem is that no one changed the routing tables and the packets dead-ended at PSI. Getting CAIS to fix this problem has been a nightmare. At first, PSI didnt stop announcing the routes and now that they have, it seems that CAIS will not announce the routes till Monday becuase "no one at our NOC knows how to do this and the one guy (ONE GUY IN THE WHOLE COMPANY - AND THEY ARE A NATIONWIDE PROVIDER????) who knows how doesn't work weekends." Bottom line from CAIS:" S***W the customers, we dont work weekends. We don't care that your entire business has been dead in the water since Wednesday, you can go to H**L, we'll get to it Monday, if we feel like it." Our lawyers are looking at what actions we can take against them. It may be trickey, but we will try. Needless to say, we will be moving our connection. I have some choice words for them when they send us our first monthly bill, which I'm certain, they will do on weekends just fine. IF SOMEONE IS THERE AT CAIS - GET OFF OF YOUR LAZY A** AND PUT THOSE ANNOUNCEMENTS INTO YOUR BGP4 TABLES TODAY (NOT MONDAY, NOT LATER IN THE WEEK)- THERE ARE ABOUT 6 OF YOUR CUSTOMERS (NOT JUST US) WHO ARE DEAD IN THE WATER BECAUSE YOU ARE TOO LAZY TO DO A 20 SECOND JOB. <flame off - sorry to the list for being so loud> John

28 55

MPLScon - Fall 2001
by Irwin Lazar 17 May '01

17 May '01

NANOG Folks, The Call for Presentations for MPLScon 2001, October 1-4 in Reston, VA is now available at http://www.mplscon.com/call_for_presentations_fall.htm <http://www.mplscon.com/call_for_presentations_fall.htm> The theme of this conference is "The MPLS State of the Union." We are especially interested in having presentations and panel discussions focused on current MPLS implementations. These sessions will cover best practices, lessons learned, reality vs. hype, etc. The conference kicks off with a one day tutorial, followed by individual days covering MPLS Integration/Traffic Engineering/QoS/Optical Networking, MPLS-VPNs, and MPLS Network Management. If you are interested in presenting, or participating in a panel discussion, please visit the above URL and contact me privately. Thanks, Irwin --- Irwin Lazar - ilazar(a)tbg.com <mailto:ilazar@tbg.com> Conference Director, MPLScon 2001 October 1-4, Reston, VA http://www.mplscon.com/ <http://www.mplscon.com/>

1 0

Re: heads up on 80/8 [actually operational, so don't read this!!!]
by Travis Pugh 17 May '01

17 May '01

Ah yes ... I was hoping for some email notification that is sent out when RIPE breaks open a new block, since I really don't check the iana.org assignments page on a regular basis ... something akin to what ARIN does w/north american allocations. -travis On Thu, 17 May 2001, Antony wrote: > > This info is there hidden on ripe ncc website > a complete source of info can be found at. > > http://www.ripe.net/ripencc/mem-services/general/allocs.html > Yes google will find this if you search specifically. > > I assume apnic should update their page soon. > http://www.apnic.net/db/RIRs.html > > RIR allocations can also be found at, > http://www.iana.org/assignments/ipv4-address-space > > > -antony > > > On Thu, May 17, 2001 at 10:49:28AM -0400, Travis Pugh wrote: > > > > > > I can't for the life of me find anything on the web about RIPE recieving > > or allocating from 80/7 ... google has failed me. Can someone in RIPEland > > let some of us north americans know where announcements of new RIPE > > allocations are made? I'll happily forward any email notification to > > NANOG, as I'm sure many others would, but where does the initial > > announcement get sent? I'm sure many of us would like to update our > > prefix filters in a timely fashion. > > > > Cheers. > > >

1 0

Re: heads up on 80/8 [actually operational, so don't read this!!!]
by smd＠clock.org 17 May '01

17 May '01

| Several weeks old info. I am suprised that ICANN and or RIPE haven't made | the operational announcement to the NANOG or other lists. Not to invite a flamewar or anything, but it's not really an operational issue until some operator tries to route whatever they are allocated by the IRRs (RIPE, ARIN, APNIC). None of the IRRs (or ICANN) can really make ANY promise whatsoever that their allocations are globally routable. (This will be particularly true of ever-longer prefixes as they are allocated by various IRRs. IOW, who cares if the IRRs hand out /32s or /128s - just so long as people understand that the odds of global reachability in both steady state and during convergence [*] decrease roughly proportionally to the length of the prefix). So, this could well have been the first time an operator has found an operational issue with 80/8 that is relevant to the NANOG audience. :-) | Thanks for posting it to NANOG You're very welcome - hey, first public-act-of-smd in many days. Sean. - -- Sean Doran <smd(a)use.net> / <smd(a)ebone.net> - -- [*] http://www.ripe.net/docs/ripe-210.html

5 4

Broadband security?
by Joe Blanchard 17 May '01

17 May '01

Please excuse the redundancy regarding this topic, but I can't help publisizing this. A few weeks ago I came across a rather odd opening regarding a certain ISP and its Cayman's DSL routers. Oddly enough I found 19 open routers actually telling/publisizing that there was no password set for the admin account using little more than a web browser (of course one of them being mine). A bit concerned I contacted the ISP in question, their NOC to be exact, and told them of this. During the conversation it was pretty clear that the NOC person didn't really care, and that "The customer is responsible for that security" or better said (not my job) applied within this situation. A bit concerned I contacted a sales rep from that same ISP and got this "wow, really, can you send me those IP addys and we'll look into it right away!". With some strange sense of helpfulness I sent those items to him and heard not a word. That was about 2 weeks ago, and I again checked on the nodes I had seen them open and found the same openings. I thought perhaps it was just a honey pot, but after changing two of the routers then restarting them and seeing the changes I knew nothing had been done. On a whem, and sort of a bet, I did a scan of the ISP's net and found over 100 Cayman routers open, as well some odd 20 SpeedStream routers (simple password/login just give it admin and you have the keys to the kingdom so to speak). To me, and perhaps I am missing something here, This seems a bit odd, in that a major ISP deploying these items would in fact leave routers, ok junior routers, this wide open. I really don't want to name the ISP in question openly for the obvious reasons, but has it really gotten to the point that Broadband for businesses is slapped in with no security and no education to the persons getting it? Sorry for the rant -Joe

3 2

RE: To CAIS Engineers - WAKE UP AND TAKE CARE OF YOUR CUSTOMERS
by John Murphy 16 May '01

16 May '01

I'm sorry Roeland, but your statement about SWIP'ing anything less than a /24 is just inaccurate. We SWIP /29s and /30s daily, for both our Frame and our DSL customers. -----------------------Original Message----------------------- From: Roeland Meyer To: nanog(a)nanog.org Date: 5/13/01 4:21 PM Subject: RE: To CAIS Engineers - WAKE UP AND TAKE CARE OF YOUR CUSTOMERS I've had similar problem at SpeakEasy. They still don't have a reverse-DNS clue. http://www.mhsc.com/recovery.htm None of the DSL ISPs can do larger than /27 anymore, even when they're ILECs. Anything less than a /24 can't be SWIP'd and if you don't control your in-addr.arpa entries you don't control your domain and have no security. > From: John Palmer (NANOG Acct) [mailto:nanog@adns.net] > Sent: Sunday, May 13, 2001 1:40 PM > <FLAME ON> > PSINet dumped all of their DSL customers onto CAIS. Covad is > the backhaul > provider for them both. Need I say more? > > Bottom line, I dont know how many thousands of people were > without service > for more than a day because the whole transfer was botched. > > We have a situation where we had a DSL connection from PSI > and were using > our own IP addresses. Problem is that no one changed the > routing tables and the packets dead-ended at PSI. > > Getting CAIS to fix this problem has been a nightmare. At > first, PSI didnt > stop announcing the routes and now that they have, it seems that > CAIS will not announce the routes till Monday becuase "no one > at our NOC > knows how to do this and the one guy (ONE GUY IN THE WHOLE > COMPANY - AND THEY ARE A NATIONWIDE PROVIDER????) who knows > how doesn't work > weekends." > <flame off - sorry to the list for being so loud>

7 9

RE: The DSL business model
by Roeland Meyer 16 May '01

16 May '01

According to the SBA, most small business are 30-75 employees. > From: Jared Mauch [mailto:jared@puck.Nether.net] > Sent: Wednesday, May 16, 2001 1:27 PM > > Small business, so up to 500 employees? > > ip per user plus the IS/servers related to infrastructure, > subnetting, you can easily justify some real address space. > > - jared > > On Wed, May 16, 2001 at 04:22:10PM -0400, Shawn McMahon wrote: > > On Wed, May 16, 2001 at 03:54:07PM -0400, Daniel Golding wrote: > > > > > > There is a simple solution for redundancy - buy redundant > T-1 lines, run > > > BGP, route a large enough block of space to be globally > routable. This is > > > > Who's going to give a small business a large enough block to be > > globally routable?

1 0