- Test - lists.nanog.org

BCP38 and Red Hat
by Stephen Satchell 15 Dec '16

15 Dec '16

https://bugzilla.redhat.com/show_bug.cgi?id=1370963 Just a reminder that I have a feature request outstanding with Red Hat to add support for BCP38, as well as measures for certain protocol-based amplification reflection attacks. My intent for making the suggestion is to stiffen firewalld(8) in Red Hat Enterprise and clones, particularly when an RHEL-based box is used as an edge router or firewall box. I've looked at firewalld, and it would be easy to add *some* of BCP38 into it rather quickly...assuming that the developers step up to the plate. There are parts of BCP38 that won't be so easy to do, given the architecture of the package. In my spare time, by the way, I'm working on a BCP-compilant firewall generator for IPTABLES. Spare time? Well, that *is* a bit of a laugh...

2 1

DOS for hire issues
by ping murder 15 Dec '16

15 Dec '16

Hello, One of the hosting brands we recently acquired is overrun with DOS for hire providers and individuals. We kill them as they alert however I'm curious if there's a discussion group or location, contacts, etc we might be able to coordinate in about the actors behind these accounts (assuming this isn't the right place for that, however has a lot of the right people). If I'm out of my lane, forgive me. Thanks, pm

2 1

DTAG / AS 3320 needed some contacts.
by Xavier Beaudouin 14 Dec '16

14 Dec '16

Hello there, My company has some issue with probably null routed IP that is maybe used or related to mirai issues. Is some network operator can contact me in private, I have an issue to check with an DTAG / AS 3320 operator. Kind regards from France, Xavier

1 0

Re: Build an anycast network on a shoestring
by chris 13 Dec '16

13 Dec '16

@natmorris did something similar 18 months to 2 years or so ago too video below from uknof 30 .. https://youtu.be/itEtjsauwFQ Sent from Samsung Mobile on O2 -------- Original message --------From: Franck Martin via NANOG <nanog(a)nanog.org> Date: 12/12/2016 18:39 (GMT+00:00) To: NANOG <nanog(a)nanog.org> Subject: Build an anycast network on a shoestring This is quite a nice write up by a colleague of mine: https://www.linkedin.com/pulse/build-your-own-anycast-network-9-steps-samir…

5 4

Build an anycast network on a shoestring
by Franck Martin 12 Dec '16

12 Dec '16

This is quite a nice write up by a colleague of mine: https://www.linkedin.com/pulse/build-your-own-anycast-network-9-steps-samir…

1 0

RE: SNMP syslocation field for GPS coordinates, and use with automation tools
by Alan Buxey 12 Dec '16

12 Dec '16

Yes. But don’t just put in coordinates... Put in other details and use a standard separator 😊 alan

4 5

SNMP syslocation field for GPS coordinates, and use with automation tools
by Eric Kuhnke 11 Dec '16

11 Dec '16

Hello list, I'm wondering if anyone out there has been doing something like this, and what the results were like... Assuming a network with routed carrier-class CPEs for singlehomed last mile business customers, or carrier-ethernet L2 transport services for the same sort of customers. Each CPE has a full set of SNMP monitoring features and the standard syslocation field where many ISPs put the street address of the device. Has anyone out there standardized on putting GPS coordinates in this field, in decimal degrees, such as this example: 45.563694,-122.528015 (a randomly chosen location in Portland OR) Using this, it seems that one could use automation tools and scripting to populate CPE statuses and locations on a huge map, or feed into a GIS system backend (ESRI or Autodesk), which would in turn feed an interactive mapping display. Has anyone used a system such as this for NOCs to quickly identify county-sized power outages or other anomalies that affect CPEs together in specific geographic regions? Or any other examples of the use of live SNMP location data on a large scale with thousands of CPEs.

2 1

Talk extract: Submarine cable systems 101 for AWS partners
by Simon Leinen 10 Dec '16

10 Dec '16

Amazon held their "re:Invent" event two weeks ago. Wasn't there, but I'm a James Hamilton fan so I started watching the recordings of his talks. In one, he talks about fiber optic cables under the oceans. Here's the start of that section: https://youtu.be/AyOAjFNPAbA?t=672 Even though this is presented at a suitable level for a large event (32'000 attendees total, holy cow) of mostly non-network specialists, I learned a few interesting things, e.g. about dealing with shunt faults. If you rewind to a few minutes before that section, he also talks about Amazon's private inter-DC network and how it is all (N*) 100G now. -- Simon.

1 0

Re: Avalanche botnet takedown
by Scott Weeks 10 Dec '16

10 Dec '16

I did some snippage, but I believe I kept to the idea. :: you seem to want various laws made to control it. > Yes. It's a global network. I want to say what country's laws, but see below. Also, if you want something to be broken beyond recognition get a government to regulate it. It'll be a major FAIL. :: you seem to want the masses to uprise against the :: "tier 1" folks and force it there. > Actually, I'm not 100% sure even that would do it. One the masses of the world will not rise up together for anything, much less that this. :: you seem to want various governments to band :: together to form a "law of cyber" coalition > Yes. This will never happen. Even if some did band together others will not and that would create a haven for the bad people. :: and for a "you must be this tall to ride the internet" :: measurement. > No, I never said that. I don't care how tall you are, > or how young or how old or how whatever you are. You > should be able to use the Internet. I should've been more clear. You didn't understand what I meant. > But with privledges should come some accountability, > and that is entirely lacking at present. How will you get a two year kid in Kaaawa, Oahu to obtain accountability before 'riding' the internet. :: no one can get a list of everyone on this planet that :: is allowed to 'play' on the internet. > Correct. And that is a major part of the problem. indeed...

1 0

Canadian Legacy Subnets & ARIN - Looking for feedback
by Alain Hebert 09 Dec '16

09 Dec '16

Hi, How easy is it to resolve? We have 4-5 subnets which where erroneously assigned to our customers when ARIN took over all the NA smaller registries like UToronto. All the paperwork refer to US legalese, which we have some difficulties meshing with Canadian resources at our disposal. ( And some level of form-phobia from my part =D ) Beside that, good friday. -- ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443

4 4