Re: SMTP-friendly VPS provider where I can also get a BGP feed

[Christopher Munz-Michielin]

My company Free Range Cloud (freerangecloud.com) offers BGP sessions.  
Port 25 is blocked by default, but can be unblocked by opening a support 
ticket and previsioning justification for the request.


On 2023-09-26 03:09, Daniel Corbe wrote:

Hey all,

I apologize if this isn't the right place to post this; however, I 
thought maybe the NANOG community would be able to point me in the 
right direction.


I'm looking for a place that I can host a mailer.  My primary use case 
is a Mailman-style technical discussion list; much like NANOG but 
software related instead of network related: READ: non-commercial in 
nature.


I'm currently a vultr customer, but they're refusing to unblock port 
25 on my account.  I've tried explaining my use case but no matter who 
I talk to over there they just keep pointing me to their spam policy.


Thanks!
-Daniel

Re: Shaw peering contact

[Christopher Munz-Michielin]

I don't have any one to offer, but if you do manage to get in touch with 
someone and you can, please pass it on.


A year or so back I was trying to get in touch with the Shaw NOC 
regarding some routing weirdness with our Anycast DNS network and never 
got anywhere.


On 2023-06-16 07:27, Chris McDonald wrote:

Anybody have a responsive peering contact at Shaw?  I need to resolve a routing 
problem. Thx!

Re: Is malicious asymmetrical routing still a thing?

[Christopher Munz-Michielin]

Not this exact scenario, but what we see a lot of in my VPS company is 
people sending spam by using our VPS' source addresses, but routing 
outbound via some kind of tunnel to a VPN provider or similar in order 
to bypass our port 25 blocks.


We've had to start blocking source port 25 to catch the replies from the 
recipient mail servers in order to prevent this kind of abuse.


Chris

On 2023-03-09 12:02, John Levine wrote:

Back in the olden days, a spammer would set up a server with a fast
broadband connection and a dialup connection, and send out lots of
spam over the broadband connection using the dialup's IP address.  Since
mail traffic is quite asymmetric, this got them most of the broadband
speed, and when the dialup provider cancelled their service, they could
just dial into someone else.  Or maybe work through that giant pile of
AOL CD-ROMs we all had.  The broadband provider often wouldn't notice
since it wasn't their IP and they didn't get the complaints.

Is this still a thing? Broadband providers fixed this by some
combination of filtering port 25 traffic both ways, and BCP38 so you
can only send packets with your own address. Do providers do both of
these? More of one than the other? TIA.

R's,
John

Re: ARIN ORG ID for non-ARIN region company

[Christopher Munz-Michielin]

I would be interested in an answer here as well.  We are a company based 
out of Canada and as such have resources allocated by ARIN.  We have a 
number of customers who are not within the ARIN region that we would 
like to be able to SWIP IP space to.  I would much rather do a 
re-allocation and have our customer maintain their own contact records 
rather then needing to do a simple re-assignment and having to get them 
to ticket us if email addresses or phone numbers change.


Chris

On 2022-10-13 15:40, George Toma wrote:

Hello,

Does anybody know if it possible to create ARIN ORG ID for non-ARIN 
region company?


We are LACNIC region based. In LACNIC as well as RIPE regions the RIRs 
allow creation of ORG IDs for non-region companies for purposes of IP 
reallocations, etc. (e.g. IPv4 lease, etc.).


I have gone to ARIN ORG ID registration page but it says only ARIN 
region companies can register in ARIN. We need this for purposes of 
IPv4 reallocation of our IPv4 leased subnets so also the contact 
handles are reallocated to us.


ARIN asks me to pay for creation of ORG ID, but I would lose the 
payment if the request is denied.


We do not plan to request any resources, no ASN or IP resources will 
be requested through that ORG ID, it's only to allow for full IPv4 
reallocation (including contact handles).


Thank you for any input.

Regards,
George

Re: Contact info for Level 3 CDN GeoIP

[Christopher Munz-Michielin]

Thanks for the link, I did actually check out the links on that page and 
they all seem to return the correct geoip.  I didn't see any specific 
contacts for Level3, unless I missed it?


Someone did reach out to me off-list, so fingers crossed they can get it 
resolved.



On 2022-09-15 14:19, Josh Luthman wrote:

Did you check these services?

https://thebrotherswisp.com/index.php/geo-and-vpn/

On Wed, Sep 14, 2022 at 6:34 PM Christopher Munz-Michielin 
 wrote:


Hey All,

For my dayjob I help run an Anycast DNS network and we've recently
had
complaints from our users in the APAC region that sites using
Level 3's
CDN have poor performance.  Upon looking into this, it seems that
they
(Level 3) have incorrect geolocation data for some of our Singapore
servers and are returning IPs for CDN servers in Australia. I've
validated the WHOIS information for the blocks in question is
correct,
and every GeoIP site I check against comes back as Singapore, so this
must be some internal database.

I've tried emailing the whois contact, as well as the technical
contact
for the domain footprint.net <http://footprint.net> but have yet
to receive a response.  Wonder
if anyone else has been able to get in touch with the CDN people
at Level 3?

Cheers!
Chris

Contact info for Level 3 CDN GeoIP

[Christopher Munz-Michielin]

Hey All,

For my dayjob I help run an Anycast DNS network and we've recently had 
complaints from our users in the APAC region that sites using Level 3's 
CDN have poor performance.  Upon looking into this, it seems that they 
(Level 3) have incorrect geolocation data for some of our Singapore 
servers and are returning IPs for CDN servers in Australia.  I've 
validated the WHOIS information for the blocks in question is correct, 
and every GeoIP site I check against comes back as Singapore, so this 
must be some internal database.


I've tried emailing the whois contact, as well as the technical contact 
for the domain footprint.net but have yet to receive a response.  Wonder 
if anyone else has been able to get in touch with the CDN people at Level 3?


Cheers!
Chris

Re: Providing geofeed info to Google

[Christopher Munz-Michielin]

For what it's worth I attempted to get access by filling out the same 
portal and was told to go pound sand, so your results may very.


On 2022-08-30 12:40, Benjamin Hatton wrote:
I was able to get access without peering with 15169 by getting access 
to the ISP portal (isp.google.com ) which does 
have Geofeed processing for my AS, but I am unsure if you will get 
access without being an eyeball network.


On Tue, Aug 30, 2022 at 3:37 PM Hugo Slabbert  wrote:

Google folks:

I see historical reference to needing to use the Google Peering
Portal (http://peering.google.com) if you need to provide Google
with geofeed info for GeoIP info on network blocks, ref
https://mailman.nanog.org/pipermail/nanog/2015-May/075229.html.

Is that still the case?  Are there any avenues to provide Google
with geofeed info if you're *not* currently peering with 15169? Or
to get access to just the geofeed update portion of the Peering
Portal?

-- 
Hugo Slabbert

Re: Issues with AS 1239

[Christopher Munz-Michielin]

We observed routing issues to our prefixes from Europe to Toronto via 
AS1239 at around 8AM Pacific Time.  Needed to remove AS1239 from our 
transit blend to mitigate.


On 2022-07-22 09:46, Lou D wrote:
Anyone else seeing sub optimal route issues with AS 1239? Anyone from 
there contact me off list please ? 

Re: Quadranet Abuse Contacts

[Christopher Munz-Michielin]

Thanks to those who reached out off list.  Managed to get this resolved.

On 2022-06-26 08:42, Christopher Munz-Michielin wrote:

Hey nanog,

Does anyone have a good contact for Quadranet's abuse department? They 
are announcing one of our prefixes and it's been a week after emailing 
their abuse@ email address and creating a ticket but no movement calls 
to their support line have been less then helpful as well.


Replies on list or off list are fine.

Thanks!

Quadranet Abuse Contacts

[Christopher Munz-Michielin]

Hey nanog,

Does anyone have a good contact for Quadranet's abuse department?  They 
are announcing one of our prefixes and it's been a week after emailing 
their abuse@ email address and creating a ticket but no movement calls 
to their support line have been less then helpful as well.


Replies on list or off list are fine.

Thanks!

Anyone have contacts for Akamai GeoIP

[Christopher Munz-Michielin]

Hey All,

Hoping someone has a contact at Akamai who can assist.

As part of my day job I run a DNS network and we've been having issues 
with Akamai mis-locating the geolocation of some of our revolvers.  The 
most egregious example is our resolver in Frankfurt being classified as 
Australian, but there are some other instances as well.


This is an issue because we run fully recursive revolvers, so when a 
customer queries our DNS server, we attempt to resolve the domain 
directly against the authoritative name servers (Akamai in this case).  
Because Akamai has mis-located our IPs, we get handed an IP in the wrong 
hemisphere and our customers experience 200+ ms latency to sites that 
should be regional.


We've tried reaching out via a couple of channels but have not gotten 
anything back, wondering if anyone on the list knows a contact address 
for Akamai GeoIP we can submit corrections to.


Cheers,

Re: Undersea cable damages in the Atlantic?

[Christopher Munz-Michielin]

Our Singapore routes currently go through France, heh.

Start: 2022-01-18T13:32:07-0500
HOST: bom-h01.int.controld.com    Loss%   Snt   Last   Avg  Best Wrst StDev
  1.|-- 103.13.115.1   0.0%    10    0.5   2.1   0.3 15.5   4.7
  2.|-- 103.149.113.69 0.0%    10    2.1   2.0   1.9 2.1   0.1
  3.|-- 203.199.133.125    0.0%    10    7.0   4.6   3.2 10.7   2.4
  4.|-- 172.28.176.254 0.0%    10    4.0   3.5   3.2 4.0   0.2
  5.|-- ix-ae-1-100.tcore2.mlv-mu  0.0%    10    3.3   3.6   3.3 4.8   0.4
  6.|-- if-ae-16-2.tcore1.svw-sin 80.0%    10  180.1 180.1 180.1 
180.1   0.0
  7.|-- if-ae-31-6.tcore1.wyn-mar 10.0%    10  179.9 180.2 179.9 
181.2   0.4
  8.|-- if-ae-2-3.tcore2.wyn-mars 40.0%    10  179.7 180.2 179.5 
181.7   0.8
  9.|-- if-ae-7-2.tcore2.fnm-fran 10.0%    10  180.3 180.3 179.8 
181.2   0.5
 10.|-- if-ae-4-2.tcore1.fr0-fran  0.0%    10  179.7 179.8 179.7 
180.0   0.1
 11.|-- 195.219.50.202 0.0%    10  309.0 310.4 308.8 
315.9   2.9
 12.|-- HundredGE0-5-0-0.br03.sin  0.0%    10  306.8 307.2 305.4 
314.3   2.7
 13.|-- HundredGE0-5-0-0.br03.sin  0.0%    10  305.4 307.4 305.3 
313.7   2.6
 14.|-- metro.tenGigE0-6-0-20.10.  0.0%    10  309.1 308.4 305.9 
314.5   2.8
 15.|-- 37.120.220.219 0.0%    10  318.9 328.0 314.7 376.2  
18.6
 16.|-- 84.247.49.130  0.0%    10  325.9 324.7 318.9 
334.4   4.8
 17.|-- 84.247.49.100  0.0%    10  317.5 311.4 309.3 
318.0   3.4


On 2022-01-18 10:17 a.m., Anurag Bhatia wrote:
Are you sure it was about poor routing to Singapore and not poor 
routing to networks in EU?


The reason I ask is that a majority of connectivity has been lost to 
EU and EU > India is mostly via US > Singapore now.
I see high latency on this route for that reason but so far haven't 
seen packet loss or routing issues with Singapore.





Thanks.

On Tue, Jan 18, 2022 at 10:46 PM Christopher Munz-Michielin 
 wrote:


For what it's worth we have a provider in India for an anycast
network
who gave us a similar answer when we ticketed them about poor
routing to
Singapore.

Chris

On 2022-01-18 9:08 a.m., Mukund Sivaraman wrote:
> We received the following email today from our upstream (in India):
>
>> Our transit traffic partners have reported multiple sub-sea cable
>> damages on the Atlantic route towards Europe and US east coast.
Users
>> might face additional latency and occasional packet loss
towards these
>> destinations.
>>
>> Our partners are working with relevant authorities and cable sea
>> companies for restoration and will take few days to address it. We
>> will inform as soon as this is resolved. Inconvenience caused is
>> highly regretted.
> I've read about cable cuts due to the Tonga volcanic eruption,
but the
> above as "multiple cable damages" is mentioned as in the
Atlantic. Does
> anyone know more about this? A news search for "cable cuts"
didn't bring
> up anything aside from the Tonga story.
>
>               Mukund



--
Anurag Bhatia
anuragbhatia.com <https://anuragbhatia.com>

Re: Undersea cable damages in the Atlantic?

[Christopher Munz-Michielin]

For what it's worth we have a provider in India for an anycast network 
who gave us a similar answer when we ticketed them about poor routing to 
Singapore.


Chris

On 2022-01-18 9:08 a.m., Mukund Sivaraman wrote:

We received the following email today from our upstream (in India):


Our transit traffic partners have reported multiple sub-sea cable
damages on the Atlantic route towards Europe and US east coast. Users
might face additional latency and occasional packet loss towards these
destinations.

Our partners are working with relevant authorities and cable sea
companies for restoration and will take few days to address it. We
will inform as soon as this is resolved. Inconvenience caused is
highly regretted.

I've read about cable cuts due to the Tonga volcanic eruption, but the
above as "multiple cable damages" is mentioned as in the Atlantic. Does
anyone know more about this? A news search for "cable cuts" didn't bring
up anything aside from the Tonga story.

Mukund

Re: AS6461 issues in Montreal

[Christopher Munz-Michielin]

For what it's worth my company has a Beanfield circuit in Toronto which 
was heavily disrupted this morning that was also blamed on a fiber cut.


Chris

On 24/09/2021 13:12, None None wrote:
Zayo explained they couldn’t access their PE which I thought was odd 
since my box was still seeing 160k v4 routes since the outage started


On Fri, Sep 24, 2021 at 4:10 PM Eric Dugas via NANOG > wrote:


Traffic resumed about 30 minutes ago. They blamed a fiber cut but
the fiber cut is still ongoing between Ottawa and Kingston. Not
sure how you can blame loosing half of the Internet when you
lose half of your connectivity... Montreal is connected to Toronto
and NYC.


Eric

On Fri, Sep 24, 2021 at 3:07 PM Pascal Larivee
mailto:pascal.lari...@gmail.com>> wrote:

Yes, saw the same thing this morning, They dropped half the
internet.
No reply from them on our support ticket.

-- 
Pascal Larivée

Shaw Cable (AS6327) traffic Engineering communities

[Christopher Munz-Michielin]

Hey all,

Anyone on the list familiar with traffic engineering for Shaw (AS6327)?  
I support an anycast DNS network and one of our upstream networks has 
Shaw in their blend, which gives us great access to Shaw's customers 
(desired) but unfortunately also results in Shaw announcing our prefixes 
out all their IX links around the world, pulling a bunch of traffic 
across the continent unnecessarily.


If anyone is familiar with traffic engineering towards Shaw and could 
contact me on or off list it would be appreciated.


Regards,
Christopher Munz-Michielin

Re: favorite network troubleshooting tools (online)

[Christopher Munz-Michielin]

https://mtr.sh  is another one that I use when 
troubleshooting.


On 15/07/2020 10:37, Mehmet Akcin wrote:

hey there,

I recently have come across this http://ping.pe/ website, I have no 
association with this but it's pretty awesome. This made me wonder 
what other tools out there which I do not know about it.


what are your favorite network troubleshooting tools?

In addition to ping.pe , I like https://bgp.he.net but 
would love to hear your thought about other tool recommendations as 
especially the ones that are distributed.


Mehmet

Re: 60ms cross continent

[Christopher Munz-Michielin]

On 09/07/2020 08:00, Mark Tinka wrote:
So is there a reason why we are not seeing widespread 1080p TV via
satellite? They seem to exist where a broadcaster also supports an IPTV
platform.

Mark.
I'd assume it's a question of available bandwidth and availability of 
decoders.  From my observations most HD satellite feeds seem to sit 
between 3 and 5 mbps, a typical Ku band transponder might have a 
bandwidth of around 20-25mbps.  This means you can cram 5-8 HD feeds 
onto a single transponder.  With 4K streams the bandwidth requirements 
double, meaning you can cram a lot less in the same amount of 
transponder space and satellite bandwidth is expensive!


The other issue is on the decoder side.  Right now, the vast majority of 
satellite subscribers receive programming though dedicated decoders (set 
top boxes).  Most of these decoders only have hardware to decode MPEG2 
and H.264 video, while 4K stuff is almost exclusively H.265.   That 
means it's not a simple matter of turning on 4K, you'd have to arrange 
to send new decoders to all your subscribers wanting to receive 4K.


As time moves along, I'm sure we'll start to see more satellite feeds 
available in 4K but like the transition to HD video, it'll be a slow 
process.


Chris

Re: 60ms cross continent

[Christopher Munz-Michielin]

On 09/07/2020 05:34, Mark Tinka wrote:

Does anyone know of (m)any satellite TV services delivering 1080p or
greater? The most I've seen on our side of the rock is 1080i.

If there is an inherent commercial restriction in how many pixels we can
grab over satellite at scale, it might be tricky for some markets that
demand 1080p, 4K, or greater, for linear TV.

Mark.


There are a few 4K test streams.  NASA TV is one:

https://www.lyngsat.com/tvchannels/us/NASA-TV-UHD.html

I just piped it into ffmpeg and the NASA TV feed runs 10-15mbps, H.265 
encoding at a resolution of 3840x2160.  So definitely possible to push 
greater then 1080 video.


Chris

Re: RADB account deletions

[Christopher Munz-Michielin]

I actually ended up writing a python script to send ARIN's robot IRR updates 
because I got tired of dealing with the email templates.  An API would be a 
fantastic improvement.

On 2020-03-04 11:32 a.m., Clinton Work wrote:

The ARIN IRR doesn't support an API interface like the RADB IRR.   I hear that 
ARIN is working on an API, but I don't know the timeline.   I don't want to go 
back to email templates.

https://www.arin.net/resources/manage/irr/userguide/

--
Clinton Work

On Wed, Mar 4, 2020, at 11:27 AM, Jared Mauch wrote:

I’m curious if there’s a reason that objects are not being placed in
the ARIN IRR?  It’s free to use to ARIN members and is mirrored by all
the major players.

Re: Has Anyone managed to get Delegated RPKI working with ARIN

[Christopher Munz-Michielin]

Brilliant! Thanks for the write up Cynthia, I'll have a read through!

Chris

On 2020-02-05 1:56 a.m., Cynthia Revström wrote:

(Re-sent as I forgot to include the ML the first time, oops)
Hi Chris,

I recently figured it out and posted it on the NLNetLabs RPKI mailing list. 
https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html 
<https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html>
I hope it helps :)

- Cynthia

On Wed, Jan 29, 2020 at 6:31 PM Christopher Munz-Michielin mailto:christop...@ve7alb.ca>> wrote:

Hi Nanog,

Posting here since my Google-fu is coming up short.  I'm trying to setup delegated RPKI in 
ARIN using rpki.net <http://rpki.net>'s rpkid Python daemon and am running into an issue 
submitting the identity file to ARIN's control panel. The same file submitted to RIPE's  test 
environment at https://localcert.ripe.net/#/rpki works without issue, while submitting to ARIN 
results in "Invalid Identity.xml file."

The guide I'm following is this one: 
https://github.com/dragonresearch/rpki.net/blob/master/doc/quickstart/xenial-ca.md
 and I'm able to get as far as generating the identity file.

Wondering if anyone has gone down this road before and has any helpful 
hints to make this work?

Cheers,
Chris

Has Anyone managed to get Delegated RPKI working with ARIN

[Christopher Munz-Michielin]

Hi Nanog,

Posting here since my Google-fu is coming up short.  I'm trying to setup delegated RPKI 
in ARIN using rpki.net's rpkid Python daemon and am running into an issue submitting the 
identity file to ARIN's control panel. The same file submitted to RIPE's  test 
environment at https://localcert.ripe.net/#/rpki works without issue, while submitting to 
ARIN results in "Invalid Identity.xml file."

The guide I'm following is this one: 
https://github.com/dragonresearch/rpki.net/blob/master/doc/quickstart/xenial-ca.md
 and I'm able to get as far as generating the identity file.

Wondering if anyone has gone down this road before and has any helpful hints to 
make this work?

Cheers,
Chris

Re: routeviews.org need someone to contact me

[Christopher Munz-Michielin]

If anyone actually manages to get in touch with someone there, it would be 
awesome if they could let the list know.  I too have been trying for some time 
to get in touch with someone at Routes Views.

On 2019-12-18 8:17 p.m., Mehmet Akcin wrote:

Same here

On Wed, Dec 18, 2019 at 16:11 Kaiser, Erich mailto:er...@gotfusion.net>> wrote:

Need someone from routeviews.org  to contact me 
offlist, have reached out with no response via all emails i can find.

Sincerely,

Erich Kaiser
The Fusion Network
er...@gotfusion.net 

--
Mehmet
+1-424-298-1903