- Test - lists.nanog.org

Re: Vendors spamming NANOG attendees
by Anne P. Mitchell Esq. 15 Jun '17

15 Jun '17

> You make a good point. But I wonder how often spammers are so obvious, and I wonder if his "leveraging" falls amiss of CAN-SPAM's specific prohibition: > > > (I) harvesting electronic mail addresses of the users of a website, proprietary service, or other online public forum operated by another person, without the authorization of such person; and > Unfortunately, the actual language of that provision requires that the website from which it was scraped must also include a notice stating that the website will not "give, sell, or otherwise transfer addresses maintained by such website". Here is the actual language: "(i) the electronic mail address of the recipient was obtained using an automated means from an Internet website or proprietary online service operated by another person, and such website or online service included, at the time the address was obtained, a notice stating that the operator of such website or online service will not give, sell, or otherwise transfer addresses maintained by such website or online service to any other party for the purposes of initiating, or enabling others to initiate, electronic mail messages;" It would be interesting* if people had language printed right on their business cards along the lines of: "The presence of my email address on this card does not constitute permission for you to email me absent a prior agreement, or to put my email address on a mailing list." *And by interesting, I mean legally interesting. ;-) Anne* *Dictated due to broken wrist, please forgive top-posting and any weird grammar or typos Anne P. Mitchell, Attorney at Law Legislative Consultant CEO/President, Institute for Social Internet Public Policy Member, Cal. Bar Cyberspace Law Committee Member, Colorado Cyber Committee Member, Elevations Credit Union Member Council Member, Board of Directors, Asilomar Microcomputer Workshop Member, Board of Directors, Greenwood Wildlife Rehabilitation Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal anti-spam law) Ret. Professor of Law, Lincoln Law School of San Jose Ret. Chair, Asilomar Microcomputer Workshop

1 0

Re: Templating/automating configuration
by Brian Knight 15 Jun '17

15 Jun '17

Because we had different sources of truth which were written in-house, we wound up rolling our own template engine in Python. It took about 3 weeks to write the engine and adapt existing templates. Given a circuit ID, it generates the full config for copy and paste into a terminal session. It also hooks into a configuration parser tool, written in-house, that tracks configured interfaces, so it is easy to see whether the template would overwrite an existing interface. I used the Jinja2 template engine, along with pyodbc/unixODBC/FreeTDS for access to a Microsoft SQL backend. The keys for us are: * extracting information from a source of truth * validating the information for correctness * making sure you don't overwrite existing config * outputting the right templates for the circuit features It made more sense to write a tool than it did to try to adapt something for our environment. If I had a free hand and unlimited budget, I would find a single app that functions as a source of truth for all circuits and products, which includes a templating engine that hooks in easily. -Brian ---- On Tue, 06 Jun 2017 08:22:59 -0500 Graham Johnston <johnstong(a)westmancom.com> wrote ---- Short of complete SDN, for those of you that have some degree of configuration templating and/or automation tools what is it that you run? I'm envisioning some sort of tool that let's me define template snippets of configuration and aids in their deployment to devices. I'm okay doing the heaving lifting in defining everything, I'm just looking for the tool that stitches it together and hopefully makes things a little less error prone for those who aren't as adept. Graham Johnston Network Planner Westman Communications Group 204.717.2829 johnstong@westmancom.com<mailto:johnstong@westmancom.com>

9 10

Re: Vendors spamming NANOG attendees
by Scott Weeks 14 Jun '17

14 Jun '17

:: What do you suggest? Shoot them at Dawn? :-) Not all of them. Just shoot the first one and the rest will pay attention! ;-) :: We don't have a runaway spamming problem on the list. A lot of it has to do with naming-n-shaming, which he did. Instead of a firing squad, it's a financial punishment squad. That's the only place it hurts them and if made public it's even more effective. :: And your proposed solution is? Let the naming-n-shaming continue, rather than supporting the slimy spammer's position! There's not a naming-n-shaming problem here, either. :: Prohibit NANOG members from buying their products? No, we will do that ourselves. scott ps. I feel like I'm in a different universe when NANOG folks are supporting the spammer's side on the list!

1 0

More Critical Microsoft Patches including XP/2003
by Keith Medcalf 14 Jun '17

14 Jun '17

Microsoft has released "critical patches" for "recently disclosed vulnerabilities which may be used for imminent attacks". Main page is here: https://technet.microsoft.com/en-us/library/security/4025685.aspx and that has links to the appropriate articles and places where you can actually download the patches. --- Life should not be a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming "Wow! What a Ride!" -- Hunter S. Thompson

2 1

Troubleshooting most encountered BGP issues
by i mawsog 13 Jun '17

13 Jun '17

Trying to make a check list for troubleshooting common BGP issues . The list is as follows. Configuration issues : 1. Incorrect MD52. Incorrect peer ASN, IP Runtime issues : 1. Path flap 2. Path hijack Would like to grow this list with appropriate pointers and details. Or, if anyone is aware of such such a list's existence , would be glad to added to that .

1 0

Survey on Internet agreement ecosystem
by Pedro de Botelho Marcos 13 Jun '17

13 Jun '17

Dear NANOG community, We are conducting a survey about Internet agreements, with a focus on dynamism, economics, and service level agreements aspects. Can you please help us by answering a set of objective questions reflecting your views (<10min)? Feel free to drop any comment on how to improve the survey in the future. Survey URL: http://bit.ly/2rfoQ3E Thank you very much, Cheers, -- Pedro de Botelho Marcos PhD Student Computer Networks Research Group Federal University of Rio Grande do Sul - UFRGS

1 1

AT&T DNS Contact
by Councilman, John 12 Jun '17

12 Jun '17

Is there anyone on-list who can help me (off list) with AT&T DNS? I’m looking for some information about caching DNS servers. Thanks. John Councilman Enterprise Architect / Media [ttps://www.akamai.com/us/en/multimedia/images/custom/akamai-logo.png] Cell: +1.770.625.6393 Desk: +1.404.442.6362 Extension: 66362 Akamai Technologies 3715 Northside Parkway , N.W. Building 200, Suite 300 Atlanta, GA 30327 Connect with Us: [ttps://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://community.akamai.com/> [ttps://www.akamai.com/us/en/multimedia/images/custom/rss.png] <http://blogs.akamai.com/> [ttps://www.akamai.com/us/en/multimedia/images/custom/twitter.png] <https://twitter.com/akamai> [ttps://www.akamai.com/us/en/multimedia/images/custom/fb.png] <http://www.facebook.com/AkamaiTechnologies> [ttps://www.akamai.com/us/en/multimedia/images/custom/in.png] <http://www.linkedin.com/company/akamai-technologies> [ttps://www.akamai.com/us/en/multimedia/images/custom/youtube.png] <http://www.youtube.com/user/akamaitechnologies?feature=results_main>

1 0

Templating/automating configuration
by Graham Johnston 12 Jun '17

12 Jun '17

Short of complete SDN, for those of you that have some degree of configuration templating and/or automation tools what is it that you run? I'm envisioning some sort of tool that let's me define template snippets of configuration and aids in their deployment to devices. I'm okay doing the heaving lifting in defining everything, I'm just looking for the tool that stitches it together and hopefully makes things a little less error prone for those who aren't as adept. Graham Johnston Network Planner Westman Communications Group 204.717.2829 johnstong(a)westmancom.com<mailto:johnstong@westmancom.com>

11 11

Russian diplomats lingering near fiber optic cables
by Sean Donelan 11 Jun '17

11 Jun '17

There must be a perfectly logical explanation.... Yes, people in the industry know where the choke points are. But the choke points aren't always the most obvious places. Its kinda a weird for diplomats to show up there. On the other hand, I've been a fiber optic tourist. I've visited many critical choke points in the USA and other countries, and even took selfies :-) http://www.politico.com/story/2017/06/01/russia-spies-espionage-trump-239003 In the throes of the 2016 campaign, the FBI found itself with an escalating problem: Russian diplomats, whose travel was supposed to be tracked by the State Department, were going missing. The diplomats, widely assumed to be intelligence operatives, would eventually turn up in odd places, often in middle-of-nowhere USA. One was found on a beach, nowhere near where he was supposed to be. In one particularly bizarre case, relayed by a U.S. intelligence official, another turned up wandering around in the middle of the desert. Interestingly, both seemed to be lingering where underground fiber-optic cables tend to run. According to another U.S. intelligence official, “They find these guys driving around in circles in Kansas. It’s a pretty aggressive effort.” It’s a trend that has led intelligence officials to conclude that the Kremlin is waging a quiet effort to map the United States’ telecommunications infrastructure, perhaps preparing for an opportunity to disrupt it.

21 44

IP Hijacking For Dummies
by Ronald F. Guilmette 11 Jun '17

11 Jun '17

Late last night, I put together the following simple annotated listing of the routes being announced by AS34991. Beyond the quite apparent fact that this "Bulgarian" network is announcing a bunch of routes for blocks of IPv4 space allocated to various parties within the nation of Columbia (including the National University thereof) the other thing that struck me about this was the apparent relevance of a company called "host-offshore.com". Looking at the web site for that, it provides only a single contact phone number which is unambiguously a -Pakistani- phone number. But of course, that makes perfect sense, because Pakistan is just down the street from Bulgaria (NOT!) It did also strike me as passing strange that this company has apparently elected to not actually put its own web server, name servers, or mail server anywhere within its own duly allocated IPv4 blocks. Things got even a bit more interesting when I tried to actually order a server from this company. Apparently, all of their virtual servers are "sold out". However... and please, somebody check me on this... I guess that all of the browsers on all of the platforms I have ready access to are broken or something, because try as I might, I could never quite succeed at reaching any page on this company's web site where I could order up -any- kind of server, virtual, dedicated, or otherwise. So, you know, this hosting company appears somewhat unique and unusual, at least from where I am sitting, in the sense that it is perhaps the only such "hosting" company that I've ever run across in my travels that doesn't actually have -anything- for sale. Personally, I don't really give a rat's ass if this site is just a cover for some inept criminals, or for Panstani ISI, or for the FSB, or for some of Putin's patriots, or even if it belongs to the NSA. But I cannot help but bemoan the fact that here we are, and it is 2017 already, and yet, whichever bunch of lame-ass jerks are in fact behind this thing, apparently aren't even capable of slapping together a cover web site that is more than just some entirely shallow and not very effective false front. As a researcher and student of such things, I just think that by now, in 2017, we should have a somewhat more skilled class of frauds, rogues, criminals and spies on the Internet. I mean this is just baby stuff, and it only takes a couple of minutes and few clicks to see past such transparent gibberish. So c'mon all ye criminals, rogues and spys! You need to up your game fer cryin' out loud! At least present us with something a bit more challenging than -this- kind of very superflous crap. I mean, have you no self-respect? Geeeessshhh! Regards, rfg ======================================================================= 79.124.77.0/24 -- Bulgaria -- host-offshore.com 82.118.233.0/24 -- Blugaria -- wirelessnetbg.info 91.92.144.0/24 -- Bulgaria -- host-offshore.com 130.185.254.0/24 -- Belize? -- host-offshore.com - formerly routed by Verdina) 152.204.132.0/24 -- Columbia 152.204.133.0/24 -- Columbia 152.231.25.0/24 -- Columbia 152.231.28.0/24 -- Columbia 168.176.187.0/24 -- Columbia, National University of 168.176.192.0/24 -- Columbia, National University of 168.176.194.0/24 -- Columbia, National University of 168.176.218.0/24 -- Columbia, National University of 168.176.219.0/24 -- Columbia, National University of 179.1.71.0/24 -- Columbia 181.57.40.0/24 -- Columbia 186.113.13.0/24 -- Columbia 186.113.15.0/24 -- Columbia 186.147.230.0/24 -- Columbia 190.90.31.0/24 -- Columbia 190.90.88.0/24 -- Columbia 200.1.65.0/24 -- Columbia 200.14.44.0/24 -- Columbia 200.24.3.0/24 -- Columbia 200.24.5.0/24 -- Columbia

5 6