- Test - lists.nanog.org

routing at IXPs privacy survey
by Marco Chiesa 31 Aug '16

31 Aug '16

Hi all, as part of our academic effort to devise more powerful routing services at Internet eXchange Points (IXPs), we aim to understand the privacy considerations of network operators in the context of peering with other networks, in general, and at IXPs in particular. We created a short survey for gathering some real-world operational information and we need help from you - network operators - to fill it. The survey will take less than 5 minutes. Link to the survey: http://goo.gl/1e7cDG The survey is fully anonymized (unless you explicitly choose to reveal your identity) and the resulting data analysis will only be presented via aggregate statistics and in an anonymized format. We look forward to receiving your responses! You can find more information, including a short paper about our current research work, on our website: http://six-pack.bitbucket.org/ Thanks for your help, Marco Chiesa (UC Louvain), Marco Canini (UC Louvain), Daniel Demmler (TU Darmstadt), Michael Schapira (Hebrew University of Jerusalem) & Thomas Schneider (TU Darmstadt)

1 0

Need abuse/postmaster contact for AT&T to resolve IP block
by Webhosting.net Admin 31 Aug '16

31 Aug '16

A few of our exchange IPs get blocked intermittently, but only by ATT. Ips are clean, no issues, we’re diligent about finding and fixing these types of issues as it has a large impact. It would be very helpful to know why the IP below got blocked so we can find and fix the problem to prevent further listing. We have a few ips in rotation and some have no issue. It’s a “blind” listing, so we only find out about it when customers complain that they getting blocked. ff-ip4-mx-vip1.prodigy.net #<ff-ip4-mx-vip1.prodigy.net #5.3.0 smtp; 553 5.3.0 flph399 DNSBL:ATTRBL 521< 67.215.167.170 >_is_blocked.__For_information_see_http://att.net/blocks> #SMTP# Any info/help would be most helpful. Many thanks, Webhosting.net Postmaster

4 3

Cloudflare reverse DNS SERVFAIL, normal?
by Jeremy 31 Aug '16

31 Aug '16

We're seeing a huge uptick in reverse dns lookup failures across an app, 99% are all for Cloudflare ip addresses. Instead of seeing a PTR or NXDOMAIN we're getting back SERVFAIL. Does anyone know if this is a standard response from them? Do they not have reverse DNS setup for their networks? Trying to narrow this down to see if it's a result in a change in how our application handles these errors or if there's an issue going on with cloudflare's DNS setup. Thanks! Jeremy

8 13

Looking for Spamhaus contact
by Hristo Dimitrov 30 Aug '16

30 Aug '16

Hi, Could somebody from Spamhaus contact me offlist? I've run in the case "[CIDR] conflicts with other PBL master records" where the whole range previously seems to have belonged to another ISP who has returned the range to RIPE. However they still have it listed in a PBL and it is not possible to contact them. As per Spamhaus FAQ "...contact Spamhaus directly to obtain control of those Master Ranges. There is a contact address in your PBL Account." The issue is that I do not see a Spamhaus contact address in our PBL account. And there doesn't seem to be any other conventional way to contact Spamhaus... Best regards, Hristo D.

1 1

Handling of Abuse Complaints
by Jason Lee 30 Aug '16

30 Aug '16

NANOG Community, I was curious how various players in this industry handle abuse complaints. I'm drafting a policy for the service provider I'm working for about handing of complaints registered against customer IP space. In this example I have a customer who is running an open resolver and have received a few complaints now regarding it being used as part of a DDoS attack. My initial response was to inform the customer and ask them to fix it. Now that its still ongoing over a month later, I'd like to take action to remediate the issue myself with ACLs but our customer facing team is pushing back and without an idea of what the industry best practice is, management isn't sure which way to go. I'm hoping to get an idea of how others handle these cases so I can develop our formal policy on this and have management sign off and be able to take quicker action in the future. Thanks, Jason

14 14

ARIN 2016 Election - Nominations and Voter Eligibility
by John Curran 29 Aug '16

29 Aug '16

Folks - For those of you associated with ARIN member organizations, please note two important deadlines fast approaching - 31 August<x-apple-data-detectors://11> is the last day for ARIN Members to nominate candidates to serve on the ARIN Board of Trustees and/or Advisory Council. Note that 31 August is also the last day to nominate candidates to represent the ARIN region on the NRO Number Council (and anyone in the community may make such a nomination.) Submit your nomination(s) at https://www.surveymonkey.com/r/ARIN2016 and find more information about ARIN elections at: https://www.arin.net/participate/elections/ Each ARIN member organization may cast one ballot in the ARIN elections and voting is done by their Voting Contact on record. New this year, all Voting Contacts must be linked to an ARIN Online account in order to cast their ballot. 6 September<x-apple-data-detectors://14> is the deadline to have that account linked and otherwise ensure that your organization is eligible to vote. Information is available at: https://www.arin.net/about_us/membership/votingcontacts.html or please reach out to members(a)arin.net<mailto:members@arin.net> today with questions or requests for assistance. Thanks for your time and interest in the governance of ARIN! /John John Curran President and CEO American Registry for Internet Numbers (ARIN)

1 0

Re: Don't press the big red buttom on the wall!
by Scott Weeks 29 Aug '16

29 Aug '16

--- sean(a)donelan.com wrote: From: Sean Donelan <sean(a)donelan.com> See that big red button on the wall under the sign "Do Not Push This Button!".... DC 911 outage caused by contractor error http://wtop.com/dc/2016/08/dc-911-outage-caused-by-contractor-who-pulled-wr… ---------------------------------------------------- That was caused by more than just contractor error. It is FAIL on many, many levels including design, testing and much more! There're a large number of folks responsible for this failure. scott

1 0

Level 3 voice outage?
by David Hubbard 29 Aug '16

29 Aug '16

Curious if anyone else is having issues with Level 3 (legacy Twtelecom specifically) enterprise SIP? I’m at minute 45 of being on hold with them, so I suspect they are having known issues. Our sales rep mentioned a toll free outage being tracked under master ticket 11377637 but I don’t have the details of that yet. We’re seeing our toll free numbers completely down, since what I believe to be 4a EST time frame. Most of our toll numbers have an unusual 25 second delay before we get any SIP traffic from their equipment, but the call does ultimately connect. David

2 1

Brocade 6910 password recovery
by Kaiser, Erich 28 Aug '16

28 Aug '16

Anyone know how to do a password recovery on the BR6910 Metro E Switches, I know standard procedure for 99% of their gear, but it does not work on these. I have searched high and low online and also submitted ticket, with no answer yet. Thanks in advance. Erich Kaiser The Fusion Network

1 0

Charter HFC Engineer?
by Gabriel Kuri 26 Aug '16

26 Aug '16

Any Charter HFC engineers on the list? I've been hitting my head on the wall with first tier support that involves the Ubee DDW365 cable modem Charter deploys that reboots when IP space sitting behind the cable modem is port scanned on port 161 (snmp). This all started when my original cable modem (SMC) was swapped out with the Ubee and I noticed the Internet would randomly go out during the day for about a minute or two and tracked it down to the Ubee modem rebooting throughout the day (lights flashing on the modem indicating boot up). A tech came out and swapped it with another Ubee, and the same issue, random reboots. After researching this issue, I found a post from April 2016 ( http://www.dslreports.com/forum/r30695574-Remote-triggered-modem-reboot) by someone posting about port scanning through the Ubee cable modem and the port scan causing the Ubee to reboot when it hit port 161. Apparently this person wasn't able to get through to Charter tech support about the problem either and gave up. After reading this post, I was able to confirm my Ubee was susceptible to this bug and would reboot by simply telneting to IP space on port 161 behind the modem. I figured my random reboots were related to random people port scanning my IP space throughout the day. I called support to let them know and got them to bump it up to their manager, who then referred it to a "technical specialist" that ended up blocking port 161 on my cable modem. That fixed the problem with the random reboots and my connection is now stable! However support seems to think blocking the port on my modem is a long term fix :( They don't seem to understand that the long term fix should be escalating this up the chain so an appropriate engineer can work with Ubee to get the firmware fixed in the modem or the tens of thousands (or millions?) of other Charter customers with this modem currently suffering through unstable Internet. And what's to stop someone from continuously port scanning all of the Charter IP space and essentially DOSing those customers with this Ubee modem? I'd appreciate if someone from Charter would contact me off list please, I have zero confidence this is actually going to get fixed the right way for myself or at all for all the other Charter customers with the Ubee modem deployed. Thanks ...

5 5