- Test - lists.nanog.org

Re: GoDaddy : DoS :: Contact
by Jason LeBlanc 03 Aug '15

03 Aug '15

Thanks Mel. You are not being difficult, I meant DoS. The network I inherited doesn’t have BGP yet so I have asked our upstream to blackhole it and I emailed abuse neither have happened yet. I do block it but that’s after it hits our side. //Jason From: Mel Beckman <mel(a)beckman.org<mailto:mel@beckman.org>> Date: Sunday, August 2, 2015 at 4:20 PM To: Jason LeBlanc <jason.leblanc(a)infusionsoft.com<mailto:jason.leblanc@infusionsoft.com>> Cc: NANOG <nanog(a)nanog.org<mailto:nanog@nanog.org>> Subject: Re: GoDaddy : DDoS :: Contact Not to be difficult, but how can it be a DDoS attack if it’s coming from a single IP? Normally you would just block this IP at your borders or ask your upstreams to do so before it consumes your bandwidth. You still want to get GoDaddy to address the problem, of course, but you should do that via their abuse(a)godaddy.com<mailto:abuse@godaddy.com> contact, or their abuse page at https://supportcenter.godaddy.com/AbuseReport/Index (submit via the “malware” button). -mel On Aug 2, 2015, at 12:59 PM, Jason LeBlanc <jason.leblanc(a)infusionsoft.com<mailto:jason.leblanc@infusionsoft.com>> wrote: My company is being DDoS'd by a single IP from a GoDaddy customer. I havent had success with the abuse(a)godaddy.com<mailto:abuse@godaddy.com> email. Was hoping someone that could help might be watching the list and could contact me off-list. //Jason

4 8

DE-CIX vs Equinix
by Colton Conor 03 Aug '15

03 Aug '15

What are the main difference between these two peering companies, exchanges, and overall operating model? The market in question would be Dallas Texas where Equinix already has the only established peering exchange with over 100 members, and DE-CIX just announced today that that would also be building one in Dallas. It will take time for DE-CIX to establish their exchange in Dallas and get members, but they better question is why would people switch? For a 10G port with a cross connect to the exchange included Equinix charges $1000 per month. According to DE-CIX it looks like they charge $1250 per month for a 10G port in NYC, so I asusme the same would be true in Dallas. https://nyc.de-cix.net/products-services/pricing/ Looks like DE-CIX will offer a promo to entice new members to join, and their exchange will be in the carrier neatural meet me room operated by the infomart that will have little to no cross connect fees. Why would people pay more to connect to an exchange with less members? What is the european exchange that is a non-profit and basically only covers the cost of operating the exchange?

6 10

GoDaddy : DDoS :: Contact
by Jason LeBlanc 03 Aug '15

03 Aug '15

My company is being DDoS'd by a single IP from a GoDaddy customer. I havent had success with the abuse(a)godaddy.com email. Was hoping someone that could help might be watching the list and could contact me off-list. //Jason

10 20

Windows 10 Release
by Nick Olsen 02 Aug '15

02 Aug '15

Anyone anxious to see what kind of traffic comes from Windows 10 releasing tomorrow? Being a 3-4GB download. Each device is moving more data than any Apple update ever did. Wonder if they'll stage the release as apple appeared to have learned after IOS7 hammered a bunch of networks. Nick Olsen Network Operations (855) FLSPEED x106

27 38

best practice for number of RR
by marco da pieve 02 Aug '15

02 Aug '15

Hi all, this is my first time in asking for advices here and I hope not to bother you with this topic (if it has been already covered in the past, would you please please point me to that discussion?). Anyway, I need to decide whether to go for a BGP topology with a single cluster of 3 Route Reflectors (to overcome a dual point of failure issue) or maybe to two standalone clusters each with two RR (sacrificing half of the network in case two RR of the same cluster fail). To give you some input data: - 8000 actual VPNV4 prefixes - 180 BGP neighbors In case of the 3 RRs option, prefixes will become 24000 on the clients (24k received routes in total but 1/3 installed. No BGP multipath will be used). In this scenario considering network growth up to doubling the current number of VPNV4 prefixes, I would end up to have 16k actual vpnv4 prefixes and 48k vpnv4 prefixes received by the clients, which is almost the limit for the HW used. In the case of two standalone clusters each with two RRs, BGP neighborships will be halved among the two clusters and vpnv4 prefixes too. In case of network growth up to doubling the number of prefixes, the clients will receive up to 24k vpnv4 prefixes and this is still far below the HW limits. Of course this option will not prevent a dual failure in the single cluster and half of the network would end up in outage. My choice would be to go for the two clusters assuming that each RR has supervisor/controlling card protection capabilities. However I'd like to have a feedback on the pros and cons on the design itself if any. I know that design is planned on the resources available but just for discussing and abstracting from the HW, would there be any drawbacks in having an odd number of RR in the network? is one of the two option a no to go choice? what was your experience? thanks a lot for your time and patience to go through this email, M.

3 5

Re: best practice for number of era que
by Alejandro Acosta 01 Aug '15

01 Aug '15

A El ago 1, 2015 12:05, "marco da pieve" <mdapieve(a)gmail.com> escribió: > > Hi Shane, > for the boxes that are currently installed in the network, this is not a > valid option (politically/commercially speaking). > > thanks, > Marco > > On 1 August 2015 at 18:16, Shane Ronan <shane(a)ronan-online.com> wrote: > > > Have you considered a virtual route reflector rather than physical > > hardware? > > On Aug 1, 2015 11:39 AM, "marco da pieve" <mdapieve(a)gmail.com> wrote: > > > >> Hi all, > >> this is my first time in asking for advices here and I hope not to bother > >> you with this topic (if it has been already covered in the past, would you > >> please please point me to that discussion?). > >> > >> Anyway, I need to decide whether to go for a BGP topology with a single > >> cluster of 3 Route Reflectors (to overcome a dual point of failure issue) > >> or maybe to two standalone clusters each with two RR (sacrificing half of > >> the network in case two RR of the same cluster fail). > >> > >> To give you some input data: > >> > >> - 8000 actual VPNV4 prefixes > >> - 180 BGP neighbors > >> > >> In case of the 3 RRs option, prefixes will become 24000 on the clients > >> (24k > >> received routes in total but 1/3 installed. No BGP multipath will be > >> used). > >> In this scenario considering network growth up to doubling the current > >> number of VPNV4 prefixes, I would end up to have 16k actual vpnv4 prefixes > >> and 48k vpnv4 prefixes received by the clients, which is almost the limit > >> for the HW used. > >> > >> In the case of two standalone clusters each with two RRs, BGP > >> neighborships > >> will be halved among the two clusters and vpnv4 prefixes too. In case of > >> network growth up to doubling the number of prefixes, the clients will > >> receive up to 24k vpnv4 prefixes and this is still far below the HW > >> limits. > >> Of course this option will not prevent a dual failure in the single > >> cluster > >> and half of the network would end up in outage. > >> > >> My choice would be to go for the two clusters assuming that each RR has > >> supervisor/controlling card protection capabilities. > >> > >> However I'd like to have a feedback on the pros and cons on the design > >> itself if any. I know that design is planned on the resources available > >> but > >> just for discussing and abstracting from the HW, would there be any > >> drawbacks in having an odd number of RR in the network? is one of the two > >> option a no to go choice? what was your experience? > >> > >> thanks a lot for your time and patience to go through this email, > >> > >> M. > >> > > > > > -- > Marco Da Pieve

1 0

Comcast IPv6 issues
by Tom Paseka 01 Aug '15

01 Aug '15

Can someone from Comcast please reach out? Looks like you're black holing some prefixes. -Tom

2 1

NANOG isn't for desktop OS licensing support, was: Windows 10 Release
by Chuck Church 01 Aug '15

01 Aug '15

I hate to be that guy, but this is getting really outside the scope of NANOG. Chuck -----Original Message----- From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Joe Greco Sent: Thursday, July 30, 2015 12:58 PM To: Scott Helms <khelms(a)zcorum.com> Cc: NANOG <nanog(a)nanog.org> Subject: Re: Windows 10 Release > I was just thinking about my remaining Win 7 box _after_ I hit send > and I believe you're correct (I have one still to upgrade). Which > means users upgrading from 7 to 10 will need to create an ID, but > users of 8 and 8.1 will use the one they already have. This is incorrect. While the Win 8{,.1} install process makes it appear as though you need a Microsoft ID, you can actually go into the "create a new Microsoft ID" option and there's a way to proceed without creating a Microsoft ID, which leaves you with all local accounts. It does appear to be designed to make you THINK you need a Microsoft account however. I have a freshly installed Windows 8.1 box here (no Microsoft ID) that I then upgraded to Windows 10, and it also does not have any Microsoft ID attached to it. Activation shows as "Windows 10 Home" and "Windows is activated." There's a beggy-screen on the user account page saying something like "Windows is better when your settings and files automatically sync. Switch to a Microsoft Account now!" So, again, totally optional, but admittedly the path of least resistance has users creating a Microsoft Account or linking to their existing one. You have to trawl around a little to get the better (IMHO) behaviour. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We call it the 'one bite at the apple' rule. Give me one chance [and] then I won't contact you again." - Direct Marketing Ass'n position on e-mail spam(CNN) With 24 million small businesses in the US alone, that's way too many apples.

2 1

Leak or legit ? 11/8
by Jérôme Nicolle 01 Aug '15

01 Aug '15

Hello, Just saw something suprising : 11/8 just came live from AS23352 (ServerCentral) http://lg.ring.nlnog.net/prefix_detail/lg01/ipv4?q=11.0.0.0 . ARIN's registry didn't change : Net Range 11.0.0.0 - 11.255.255.255 CIDR 11.0.0.0/8 Name DODIIS Handle NET-11-0-0-0-1 Parent Net Type Direct Allocation Origin AS Organization DoD Network Information Center (DNIC) Registration Date 1984-01-19 Last Updated 2007-08-22 But on ALTDB it's declared as legit : http://www.altdb.net/whois.cgi?query=11.0.0.0%2F8 So it's unlikely a mistake. What do you think happened here ? Best regards, -- Jérôme Nicolle

5 8

Re: Working with Spamhaus
by Michael O Holstein 01 Aug '15

01 Aug '15

Le sigh .. Hotmail/Outlook/Live https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&w… Google/Gmail https://support.google.com/mail/contact/bulk_send_new?rd=1 AOL https://postmaster.aol.com/trouble-ticket Yahoo https://io.help.yahoo.com/contact/index?page=contact&locale=en_US&y=PROD_MA… As for SORBS, I'm not aware of anyone that uses it these days because of the extortion thing and the rather ..ahem .. "eccentric" nature of it's owner. Regards, Michael Holstein Cleveland State University ________________________________________ From: Ricky Beam <jfbeam(a)gmail.com> Sent: Thursday, July 30, 2015 6:41 PM To: Michael O Holstein Subject: Re: Working with Spamhaus On Thu, 30 Jul 2015 09:59:55 -0400, Michael O Holstein <michael.holstein(a)csuohio.edu> wrote: > 100 spammy messages isn't enough to get you in trouble, as long as it > stops there. I see you've never had the pleasure of dealing with SORBS. All it takes is *ONE* message - EVER - to be instantly, and forever, listed in their spamtraps list. Getting on the list is automatic and immediate. There are no thresholds or limits; and there's expiration. The only way off that list is to PAY them to remove you. (which makes it illegal in most places. The corporate sharks flipped when I pointed them to that "policy".) > as were the other major players (MS, Google, AOL, Yahoo) by just filling > out their postmaster forms. What "postmaster forms"? Those 4 are the most *impossible* companies with whom I've ever tried to interact. I *know* there are people at Google but I'll be damned if there's a way to reach any of them.

9 9