- Test - lists.nanog.org

Akamai minimum prefix length issue
by Chuck Church 13 May '15

13 May '15

Anyone from Akamai (or who might know), Having an issue with AS 20940 either not seeing or ignoring a /23 we're announcing, and following a /22 to another path. Other ISPs our upstream peers with see the /23. I didn't see a looking glass for Akamai to verify. Anyone from Akamai able to help? Prefix in question is 162.220.232.0/23. Thanks, Chuck

4 4

Network Solutions blacklisted mail
by Chris Garrett 13 May '15

13 May '15

Has anyone had any luck in getting a clued individual from NS to contact them concerning blacklist removal? I am going on four days and still spinning my wheels despite multiple contacts claiming it would be handled.

1 0

Recommended 10GE ISCSI SAN switch
by Paul S. 13 May '15

13 May '15

Hi guys, We're shortly going to be getting some 10G SANs, and I was wondering what people were using as SAN switches for 10G SANs. It is my understanding that low buffer sizes make most 'normal' 10G ethernet switches unsuitable for the job. We're pretty much an exclusive Juniper shop, but are not biased in any way -- best tool for the job is what I've been tasked with to find. Keeping that in mind, how would something like a EX4550 fare in the role? Are there better devices in the same price range? Thanks!

8 7

Seeing odd behaviour loading site over AT&T
by Paul Lam 13 May '15

13 May '15

Hello all, Wondering if anyone has encountered an issue where a website will load over https, but will only partially load over http using the same WAN connection. We are currently experiencing this behavior loading up a website hosted in AWS over an AT&T Flex reach service in So Cal. fuel YOUTH ENGAGEMENT Paul Lam | Network Administrator T: +1(613) 224-6738 x257 | M: www.fuelyouth.com<http://www.fuelyouth.com>

3 3

RPKI Validator 2.19; export ROAs as RPSL route: objects
by Alex Band 12 May '15

12 May '15

Hello, We've been getting a lot of requests to make processed RPKI data easily available in existing (RPSL based) workflows. This is why we added the ability to export all ROAs as route: objects in the latest release, version 2.19. Practically, this means that running an RPSL export will give you almost 450,000 highly reliable, cryptographically validated route: objects. This functionality should be considered beta for now, because we would like to get your feedback on the notation and the way we de-aggregate ROAs into route: objects based on the specified maximum prefix length. The format looks like this: route: 193.0.12.0/23 origin: AS3333 descr: exported from ripe ncc validator mnt-by: NA created: 2015-05-07T10:01:56Z last-modified: 2015-05-07T10:01:56Z source: ROA-RIPE-NCC-RPKI-ROOT For details on the implementation, please refer to the README: https://github.com/RIPE-NCC/rpki-validator/blob/master/rpki-validator-app/R… Here's a link to a snapshot I just made: https://alexband.nl/temp/export-20150512.rpsl.zip You can download the RPKI Validator here: https://ripe.net/certification/tools-and-resources We look forward to your feedback. Pull requests are welcome too. :) Cheers, Alex Band Product Manager RIPE NCC

1 0

yahoo email contact offlist please
by Ken Chase 11 May '15

11 May '15

Client seeing repeated yahoo DNS resolve failures against multiple domains for email, despite all other recursive resolvers having no issue. Please contact me off list. /kc -- Ken Chase - ken(a)heavycomputing.ca Toronto Canada Heavy Computing - Clued bandwidth, colocation and managed linux VPS @151 Front St. W.

1 0

Updated prefix filtering
by Chaim Rieger 10 May '15

10 May '15

Best example I’ve found is located at http://jonsblog.lewis.org/ <http://jonsblog.lewis.org/> I too ran out of space, Brocade, not Cisco though, and am looking to filter prefixes. did anybody do a more recent or updated filter list since 2008 ? Offlist is fine. Oh and happy friday to all.

5 5

Thousands of hosts on a gigabit LAN, maybe not
by John Levine 10 May '15

10 May '15

Some people I know (yes really) are building a system that will have several thousand little computers in some racks. Each of the computers runs Linux and has a gigabit ethernet interface. It occurs to me that it is unlikely that I can buy an ethernet switch with thousands of ports, and even if I could, would I want a Linux system to have 10,000 entries or more in its ARP table. Most of the traffic will be from one node to another, with considerably less to the outside. Physical distance shouldn't be a problem since everything's in the same room, maybe the same rack. What's the rule of thumb for number of hosts per switch, cascaded switches vs. routers, and whatever else one needs to design a dense network like this? TIA R's, John

25 34

Re: [probably spam, from "NANOG" <nanog-bounces@nanog.org>]
by Larry Sheldon 10 May '15

10 May '15

On 5/9/2015 18:10, Keith Medcalf wrote: > ...making the Web unusable unless you disable all security (or just > refuse to deal with the schmucks that do that). The only reasonable path for people who do not want to be invaded. It really is easier in the long run--and I find that it is the only the medical community who refuses to be sensible--so they spend the money to US-Mail the attachments to me. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

None
by Mark Andrews 09 May '15

09 May '15

In message <mailman.3786.1431050203.12477.nanog(a)nanog.org>, Paul Ferguson via N ANOG writes: > > Does anyone any else find it weird that the last dozen or so messages > from the list have been .eml attachments? Nanog is encapsulating messages that are DKIM signed. Your mailer may not be properly handling Content-Type: message/rfc822 Content-Disposition: inline Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

5 5