- Test - lists.nanog.org

Re: Mark Tinka ping request
by Mark Tinka 13 Jul '18

13 Jul '18

On 12/Jul/18 16:40, Kevin A. McGrail wrote: > Thanks Eric as well. Mark, my interest is less in the data really. > > What I want to do is improve the use of OSS in Africa in general. The > data request was a response about the ClamAV usage worldwide. I'm > always interested in more data but in general, I see the lack of use > of OSS in Africa as a bad sign that will put them behind more and more > over the next few years. I want to use some of the shining spots like > Ghana and South Africa to leverage working with local groups to > improve their use of OSS. My sister in law is from Ghana so I noted > that Accra was a big hotspot on a map for Africa and the rest of the > map had vast portions and countries with virtually no heat. That was > one of my initial contact points finding out more about what was going > on in Ghana that made it look better. > > I have some people who I think can help fund a conference , interest > from the ASF, and another angle as well with financial literacy that > I've been working on with Quicken for Teens and Elderly that I think > will translate over to Apache Fineract and some of the financial > sectors in Africa as well. Just so I'm clear, are you referring to Operations Support Systems or Open Source Software? I was assuming the latter, but when you speak of ClamAV, I suspect the latter. Mark.

1 0

Looking for Amazon Network Engineer
by Mark Spring 12 Jul '18

12 Jul '18

I am having some issues getting some traffic to Amazon and I was curious if there were any Amazon network engineers that might be able to chat with me for a few minutes to discuss my troubles. Shoot me an email and we will set something up. Thanks in advance! Mark Spring Information Systems Manager -- NKTelco 301 W. South St.New Knoxville, OH 45871 Phone: 1-888-NKTELCO Fax: 419-753-2950 This message and the file(s) attached are confidential and proprietary information of NKTelco for the sole use of the intended recipient. Any unauthorized review, distribution, disclosure, copying, use, or dissemination, either whole or in part, is strictly prohibited. Do not transmit these documents, in any form, to any third party without the expressed written permission of NKTelco.

1 1

Mark Tinka ping request
by Eric Tykwinski 12 Jul '18

12 Jul '18

Mark, Kevin does work for Apache and was asking about OSS usage rates in Africa/other places as well. Since I know you are very involved in SAFNOG, et al, I figured you’d be a good resource for contacts over there for data. I’m CCing Kevin McGrail, so more of an intro if you know of anyone. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

2 1

Looking for Incapsula contact
by Frank Bulk 11 Jul '18

11 Jul '18

Emails to NOC have gone unanswered (I did have success with that a year or two ago). Have had a handful of business customers in the last week contact us about B2B web sites they can't reach anymore ... of the eight documented websites, five are using Incapusla address space and others might be using Incapusla's service. Packet traces are showing the remote (web) site is issuing a TCP RST. Frank CTO, Premier Communications

1 1

Verizon/Azure communication issue
by Ross Tajvar 11 Jul '18

11 Jul '18

We have a customer on Fios who (as far as I can tell) can't reach any IP announced by Microsoft. I tried calling both NOCs listed on PeeringDB but Verizon's number didn't work and the Microsoft guy hung up on me. Is there anyone here who has a better contact at either group? Note: It's not a Fios-wide problem, as my office is also on Fios and can reach the IPs fine. It's just 0.ae13.gw9.iad8.alter.net [140.222.236.139] that seems to be having a problem. Thanks, Ross

1 0

SE Mediacom reporting complete internet outage FL GA AL
by Kraig Beahn 10 Jul '18

10 Jul '18

SE Mediacom reporting complete internet outage FL GA AL 114800 EDT 07/10/2018 —————— FROM MEDIACOM: big issue in GA, AL, FL atm - currently under investigation... sounds like a major fiber cut

1 1

AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3
by Ronald F. Guilmette 10 Jul '18

10 Jul '18

Sometimes I see stuff that just makes me shake my head in disbelief. Here is a good example: https://bgp.he.net/AS3266#_prefixes I mean seriously, WTF? As should be blatantly self-evident to pretty much everyone who has ever looked at any of the Internet's innumeriable prior incidents of very deliberately engineered IP space hijackings, all of the routes currently being announced by AS3266 (Bitcanal, Portugal) except for the ones in 213/8 are bloody obvious hijacks. (And to their credit, even Spamhaus has a couple of the U.S. legacy /16 blocks explicitly listed as such.) That's 39 deliberately hijacked routes, at least going by the data visible on bgp.he.net. But even that data from bgp.he.net dramatically understates the case, I'm sorry to say. According to the more complete and up-to-the-minute data that I just now fetched from RIPEstat, the real number of hijacked routes is more on the order of 130 separate hijacked routes for a total of 224,512 IPv4 addresses: https://pastebin.com/raw/Jw1my9Bb In simpler terms, Bitcanal has made off with the rough equivalent of an entire /14 block of IPv4 addresses that never belonged to them. (And of course, they haven't paid a dime to anyone for any of that space.) Of couse we could all be shocked (Shocked!) at this turn of events if it were not for the fact that Bitcanal already has a rich, longstanding, and sordid history of involvement with IP space hijacks. All one has to do is google for "Bitcanal" and "hijack" to find that out. This isn't exactly a state secret. In fact if you lookup "IP space hijacking" in any modern Internet dictionary you'll find Mr. Joao Silveira's picture next to the definition: https://twitter.com/bitcanal :-) This guy Silveira has obviously decided that he is a law unto himself, and can grab whatever IP space happens to be lying around for his own purposes... and no need to fill out any tedious forms -or- pay any fees for using any of this space to any of those annoying Regional Internet Registries. As usual, and as I have said here previously, I generally don't mind too much when these kinds of greedy idiots decide to color outside the lines. As long as they just confine themselves to hijacking abandoned IP blocks belonging to banks and/or government agencies, well then it's no skin off my nose. But when they start reselling their stolen IP space to spammers, as Mr. Silveira is apparently in the habit of doing, then I get ticked off. And actually, Mr. Silveira must be *exceptionally* greedy in that he is apparently not satisfied to just sub-lease his own legitimate IP space to snowshoe spammers, as he is clearly doing: https://pastebin.com/raw/5P5rnQ2y Obviously, merely hosting snowshoe spammers in his own IP space isn't enough to keep Mr. Silveira in the style to which he has become accustomned, so he has to go out and rip off other people's IP space and then resell that to spammers also. The fact that there exists a jerk like this on the Internet isn't really all that surprising. What I personally -do- find rather surprising is that three companies that each outght to know better, namely Cogent, GTT, and Level3 are collectively supplying more than 3/4ths of this guy's IPv4 connectivity, at least according to the graph displayed here: https://bgp.he.net/AS197426 Without the generous support of Cogent, GTT, and Level3 this dumbass lowlife IP address space thief would be largely if not entirely toast. So what are they waiting for? Why don't their turf this jackass? Are they waiting for an engraved invitation or what? As I always ask, retorically, in cases like this: Where are the grownups? I would like everyone reading this who is a customer of Cogent, GTT, or Level3 to try to contact these companies and ask them why they are providing connectivity/peering to a hijacking jerk like this Silveira character. Ask them why -you- have to endure more spam in your inbox just so that -they- can make another one tenth of one percent profit by peering with this hijacking, spammer-loving miscreant. I would ask them myself, but I personally am not a direct customer of any of them, so they would all, most probably, just tell me to go pound sand. If you do manage to make contact, please be sure to mention all three of Mr. Silveira's ASNs, i.e. AS42229, AS197426, and AS3266. And don't let whoever you talk to try to weasel out of responsibility for this travesty, e.g. by claiming that they don't know anything about what's been going on with all those hijacks announced by AS3266, and/or that they only provide peering for AS197426. The hijacks may all be originating from Mr. Silveira's AS3266, but bgp.he.net makes clear that AS3266 has one, and only one peer, i.e. Mr. Silveira's AS197426: https://bgp.he.net/AS3266 So basically, Cogent, GTT, and Level3 are the prime enablers of this massive theft of IP space. (They might try to claim that BitCanal's historical propensity to engage in hijacks is sonmething "brand new" or at least that -they- may not have been aware of it until now, in which case you should ask them if they have anybody on staff who is paying attention. As noted above, it isn't as if Bitcanal just started pulling this crap yesterday. Far from it.) Oh! And you might also mention the fact that Spamhaus, and, I would guess, at least a few of the oether public blacklists already have most or all of Mr. Silveira's IP space... hijacked or otherwise... blacklisted, presumably for good and ample cause. As long as Cogent, GTT, and Level3 are willing to go along with this nonsense, i.e. by selling peering to this Silveira thief, crime on the Internet -does- pay, and the theft of other people's IP space will continue to be rewarded rather than punished, as it should be. If that becomes the new normal for Internet behavior, then god help us all. Regards, rfg

20 29

A.W.S. Product / Services Inquiry...
by Michael Bullut 10 Jul '18

10 Jul '18

Greetings Team, Anyone from the Amazon Web Services Team here? I have an inquiry regarding your virtual server offerings. Warm regards, Michael Bullut. --- *Cell:* *+254 723 393 114.**Skype Name:* *Michael Bullut.* *Twitter:* * @Kipsang <http://twitter.com/Kipsang/>* *Blog: http://www.kipsang.com/ <http://www.kipsang.com/>* *E-mail:* *main(a)kipsang.com <main(a)kipsang.com>* *---*

1 0

Re: Time to add 2002::/16 to bogon filters?
by Gary McArtor 09 Jul '18

09 Jul '18

Hi Youssef, My original reply wasn't sent to the Nanog list. Team Cymru considers 2002::/16 and 192.88.99.0/24 to be legitimate prefixes at this time, and will be not be adding them to our bogon filters. Our interpretation of the 6to4 anycast rfc is that while these are encouraged to be made obsolete, in practice they may still be in use, excluding them from being universally defined as a bogon in our feed. The RFC in question: https://tools.ietf.org/html/rfc7526 The rule, as it always should be, is to know your network, and know what is best for it. As noted in the RFC you are encouraged to review any current deployments and any existing filtering and adjust based on your own discretion. Regards, Gary McArtor Team Cymru On 6/28/18 2:32 PM, Rabbi Rob Thomas wrote: > FYI, the question has been raised. I'm not sure if this is wise or not. > Gary, what are your thoughts? > > > -------- Forwarded Message -------- > Subject: Re: Time to add 2002::/16 to bogon filters? > Date: Thu, 28 Jun 2018 21:11:22 +0200 > From: Youssef Bengelloun-Zahr <bengelly(a)gmail.com> > To: Job Snijders <job(a)ntt.net> > CC: NANOG [nanog(a)nanog.org] <nanog(a)nanog.org> > > Hello Job, > > Thank you for this feedback. I guess that NTT adopting this as a best > practice will ring some bells around. > > Do you know if Team Cymru has updated their filters accordingly ? > > Best regards. > > > >> Le 28 juin 2018 à 20:58, Job Snijders <job(a)ntt.net> a écrit : >> >> Dear alll, >> >> Thank you all for your input. Just a heads-up - we deployed a few days ago. >> >> NTT / AS 2914 now considers “2002::/16 le 128” and “192.88.99.0/24 le 32” >> to be bogon prefixes, and no longer accepts announcements for these >> destinations from any EBGP neighbor. >> >> Kind regards, >> >> Job >

4 4

NANOG 74 Call for Presentations is open
by Ryan Woolley 09 Jul '18

09 Jul '18

NANOG Community, The NANOG Program Committee is excited to announce that we are now accepting proposals for all sessions at NANOG 74 in Vancouver, BC, Canada, October 1-3, 2018. Below is a summary of key details and dates from the Call For Presentations on the NANOG website, which can be found at: http://www.cvent.com/d/qgqs03/6K The NANOG Program Committee seeks proposals for presentations, panels, tutorials, and track sessions for the NANOG 74 program. We welcome suggestions of speakers or topic ideas. Presentations may cover current technologies already deployed or soon-to-be deployed in the Internet. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations must not be promotional or discuss proprietary solutions. NANOG 74 submissions can be entered on the NANOG Program Committee Tool at https://pc.nanog.org The primary speaker, moderator, or author should submit a presentation proposal and an abstract in the Program Committee Tool. - Select “Propose Talk” from the Talks menu - Select NANOG 74 from the Meeting menu - Select the appropriate *Session* the talk will be presented in (General Session 30-45 minutes; Tutorial 90-120 minutes; Track 90-120 minutes) Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in Program Committee Tool: any time following Call for Presentations and prior to CFP deadline for slide submission - PC performs initial review and assigns a “shepherd” to help develop the submission: within 2 weeks - Submitter develops draft slides of talk. Please submit initial draft slides early. Panel and Track submissions should provide topic list and intended/confirmed participants - PC reviews slides and continues to work with Submitter as needed to develop topic - Draft presentation slides should be submitted prior to published deadline for slides - PC accepts or declines submission - Agenda assembled and posted - Submitters notified If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the Program Committee, and a representative of the Program Committee will respond. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool without delay! We look forward to reviewing your submission. Key Dates for NANOG 74: Monday, 07/09/18 Registration for NANOG 74 Opens Monday, 07/09/18 Agenda Outline for NANOG 74 Posted Tuesday, 09/04/18 CFP Deadline: Presentation Slides Due Tuesday, 09/04/18 CFP Topic List and NANOG Highlights Page Monday, 09/24/18 Speaker FINAL presentation Slides to PC Tool Sunday, 09/30/18 Lightning Talk Submissions Open (Abstracts Only) Sunday, 09/30/18 On-site Registration Final slides must be submitted by Monday, September 24, 2018, and no changes will be accepted between that date and the conference. Materials received after that date will be updated on the web site after the completion of the conference. We look forward to seeing you in October in Vancouver! Sincerely, Ryan Woolley NANOG PC

1 0