Re: IGP protocol

2018-11-12 Thread Garrett Skjelstad
To be fair, Microsoft only just recently added BGP support to RRAS in 2012... On Mon, Nov 12, 2018, 21:50 Scott Weeks > > --- valdis.kletni...@vt.edu wrote: > On Mon, 12 Nov 2018 20:21:26 +, "Naslund, Steve" > said: > > > 2. Most corporate networks will be running OSPF > and/or EIGRP as

Re: IGP protocol

2018-11-12 Thread Brandon Martin
On 11/12/18 3:21 PM, Naslund, Steve wrote: 1. Most large networks (service providers) supporting MPLS will be using ISIS as their IGP. Some will have islands of OSPF because not everything speaks ISIS. Notably, support for OSPF is somewhat common on "layer 3 switch" products while IS-IS

Re: IGP protocol

2018-11-12 Thread Scott Weeks
--- valdis.kletni...@vt.edu wrote: On Mon, 12 Nov 2018 20:21:26 +, "Naslund, Steve" said: > 2. Most corporate networks will be running OSPF and/or EIGRP as an IGP. And I'm sure there's still some crazies out there using RIPv2. :) -- Yes,

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Mark Andrews
Which just shows content providers and tunnel end point problems. * load balancers that don’t properly handle ICMP{v6} * stupid firewalls that block PTB * tunnel end points that don’t generate PTB for EVERY oversize packet (you wouldn’t drop TCP ACKS and PTBs are just as important) PMTD

Re: Zayo vs Coent

2018-11-12 Thread Nick W
I actually went through this exercise recently with Cogent, Zayo, and two other providers. The requests were all made via email at roughly the same time. HE was by far the quickest (I think under an hour), with Cogent being about half a day initially (but they did miss a BGP session, which was

Re: Escalation point at Google

2018-11-12 Thread Jared Mauch
Are they getting an error similar to: Websites prove their identity via certificates, which are issued by certificate authorities. Most browsers no longer trust certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign. www.example.com uses a certificate from one of these

Re: Zayo vs Coent

2018-11-12 Thread Rob Foehl
On Fri, 9 Nov 2018, Ca By wrote: Zayo will provide you all of the internet Only the parts for which someone has remembered to call in updates and/or which Zayo has remembered to apply to every manually maintained per-session prefix list, or for which someone has badgered them enough to

Re: Escalation point at Google

2018-11-12 Thread George Herbert
If this is re os33.com where Alex emailed from, the front page is Lets Encrypt. Which is a strange choice for a financial SAAS?... Alex, if your internal app site certs are Symantec that could well explain it; check your cert locations. On Mon, Nov 12, 2018 at 12:30 PM Guillaume Tournat wrote:

RE: IGP protocol

2018-11-12 Thread Naslund, Steve
Yeah there are those. Steve -Original Message- From: Valdis Kletnieks On Behalf Of valdis.kletni...@vt.edu Sent: Monday, November 12, 2018 2:29 PM To: Naslund, Steve Cc: nanog@nanog.org Subject: Re: IGP protocol On Mon, 12 Nov 2018 20:21:26 +, "Naslund, Steve" said: > 2. Most

Re: IGP protocol

2018-11-12 Thread Job Snijders
The war is over. In IETF the OSPF and ISIS working groups merged. Now all of it is “link-state routing”. https://datatracker.ietf.org/group/lsr/about/

Re: IGP protocol

2018-11-12 Thread valdis . kletnieks
On Mon, 12 Nov 2018 20:21:26 +, "Naslund, Steve" said: > 2. Most corporate networks will be running OSPF and/or EIGRP as an IGP. And I'm sure there's still some crazies out there using RIPv2. :) pgpPMFjssCptV.pgp Description: PGP signature

Re: Escalation point at Google

2018-11-12 Thread Guillaume Tournat
Hello Problem with blacklisted CA of Symantec, that issued SSL certificates ? > Le 9 nov. 2018 à 02:57, Alex Osipov a écrit : > > Hello – > > Does anyone have an escalation point or a human to speak to on the Google > escalations or Google Safe Browsing team? Our entire SaaS business,

RE: IGP protocol

2018-11-12 Thread Naslund, Steve
I don't know where you heard that but it is probably incorrect. Here is what I think you will find. 1. Most large networks (service providers) supporting MPLS will be using ISIS as their IGP. Some will have islands of OSPF because not everything speaks ISIS. 2. Most corporate networks will

Re: Oracle abuse contact

2018-11-12 Thread Dan Hollis
Contact some DNSBLs? Sometimes it takes 550 responses to all their smtp connections for them to wake up from their slumber. -Dan On Fri, 9 Nov 2018, David Shaw wrote: Hi, I could really use some help reaching someone at Oracle for a spam problem coming from 129.145.16.122. I've sent

Re: IGP protocol

2018-11-12 Thread Ryan Kearney via NANOG
1. IS-IS for loopbacks and iBGP on the loopbacks for everything else. 2. It was much easier to use than OSPF and seems to scale better. On Mon, Nov 12, 2018 at 1:46 PM im wrote: > > goodmorning nanog, > > I heard that OSPF is only famous in asia region... > So that, please could you explain me >

Re: IGP protocol

2018-11-12 Thread Jared Mauch
> On Nov 9, 2018, at 10:03 AM, im wrote: > > goodmorning nanog, > > I heard that OSPF is only famous in asia region... > So that, please could you explain me > > 1. what is your backbone's IGP protocol? IS-IS > 2. why you choose it? Single topology, supported by everything for IPv6 and

Re: IGP protocol

2018-11-12 Thread Mikael Abrahamsson
On Sat, 10 Nov 2018, im wrote: goodmorning nanog, I heard that OSPF is only famous in asia region... So that, please could you explain me 1. what is your backbone's IGP protocol? 2. why you choose it? This is a 20+ year old discussion. There are lots of comparisons.

RWHOIS

2018-11-12 Thread Rodenhuis, John
Greetings list! We are testing implementation of an RWHOIS server to eliminating having to send SWIP emails to ARIN. Looking to see if anyone else is (successfully) using RWHOIS 1.5, and can hopefully provide any lessons-learned. Any other feedback would be welcomed. Thanks, John John

Re: Zayo vs Coent

2018-11-12 Thread John Von Essen
Zayo is probably a tad better in the network quality, but… Zayo’s NCC is awful when it comes to fixing or resolving anything, even something as simply as add a default route to my BGP session. And its takes forever, like a whole day waiting in queue. Cogent, you can call, and 15 minutes your

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread John Von Essen
I recently go a Linksys home wifi router, by default it enables ipv6 on the LAN. If there is no native IPv6 on the WAN side (which is my case since FiOS doesnt do v6 yet) the Linksys defaults to a v6 tunnel. For the first few weeks of using the router, I had no idea alot of my traffic was

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Morgan A. Miskell
Not to beat a dead horse, but could the problem be so simple? I have tons of dual-stacked machines that have updated forever without issue, so I assume they update via IPV4. That being said, I've not packet sniffed any of the update stuff in a while but if the DNS is any indication then

Re: Windows sometimes lets temporary IPv6 addresses expire without renewing

2018-11-12 Thread fireballiso via NANOG
On 11/11/2018 9:54 PM, fireballiso wrote: > Hi! I'm experiencing an IPv6 issue with Windows that I wanted to ask if > others are seeing, and get an idea of how widespread it might be. > > For background, I've been using a /64 tunnel from Hurricane for a few > years to test IPv6 connectivity until

Windows sometimes lets temporary IPv6 addresses expire without renewing

2018-11-12 Thread fireballiso via NANOG
Hi! I'm experiencing an IPv6 issue with Windows that I wanted to ask if others are seeing, and get an idea of how widespread it might be. For background, I've been using a /64 tunnel from Hurricane for a few years to test IPv6 connectivity until my ISP offers native service. Linux works well

Re: Zayo vs Coent

2018-11-12 Thread joe mcguckin
Zayo is not merely Above.net . Zayo is a massive rollup of many fiber providers. It has acquired over 30 other networks. Joe McGuckin ViaNet Communications j...@via.net 650-207-0372 cell 650-213-1302 office 650-969-2124 fax

Re: Zayo vs Coent

2018-11-12 Thread Mehmet Akcin
Using www.networkatlas.org and Zayo KMZs loaded, i can't see neither on this location (maybe they forgot to update the kmzs) [image: Screen Shot 2018-11-09 at 11.38.08 AM.png] You can join our Slack Channel , there are many people who has regional dark fibre knowledge (100+ people) across the

Oracle abuse contact

2018-11-12 Thread David Shaw
Hi, I could really use some help reaching someone at Oracle for a spam problem coming from 129.145.16.122. I've sent countless emails to their abuse contact with no response, tried their tech support chat system and even calling several times without any reaction beyond confusion. It's been

IGP protocol

2018-11-12 Thread im
goodmorning nanog, I heard that OSPF is only famous in asia region... So that, please could you explain me 1. what is your backbone's IGP protocol? 2. why you choose it? thanks,

Re: Amazon now controls 3.0.0.0/8

2018-11-12 Thread Kenneth Finnegan
On Thu, Nov 8, 2018 at 3:58 PM Job Snijders wrote: > Seems ALTDB should delete the old AS 80 / GE IRR proxy route registration: > http://irrexplorer.nlnog.net/search/3.0.0.0 Done. For anyone else who is suffering from their prefixes malingering in ALTDB from previous users and has ultimately

Re: Amazon now controls 3.0.0.0/8

2018-11-12 Thread Dalton, Paul P [CTO]
Remember when AS 1 was Genuity? First BGP session I ever set-up was with AS 1. Get Outlook for Android From: NANOG on behalf of Ross Tajvar Sent: Thursday, November 8, 2018 6:44:45 PM To: Steve Meuse Cc: North American Network Operators'

Escalation point at Google

2018-11-12 Thread Alex Osipov
Hello – Does anyone have an escalation point or a human to speak to on the Google escalations or Google Safe Browsing team? Our entire SaaS business, 15 years in business, in a niche software industry with a good reputation has become blocked in ALL browsers. We are impacting 30k+

Spoofer Report for NANOG for Oct 2018

2018-11-12 Thread CAIDA Spoofer Project
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address.

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Mikael Abrahamsson
On Mon, 12 Nov 2018, Mark Tinka wrote: I do run 6-in-4 from my backbone to my house as my FTTH provider does not do IPv6. I can't imagine this to specifically be the issue, as all other IPv6 traffic is fine, but at this point, I'm open to suggestion. Are you doing TCP MSS adjust/clamping? If

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Mark Tinka
On 12/Nov/18 18:18, Clinton Work wrote: > I saw this issue randomly on Windows PCs due to IPV6 TCP checksum > offloading.    > > Try the following on the problem Windows machine: > - Open the Device Manager -> Network Adapters -> Network Interface > (Ethernet NIC): > - Under the Network Adapter

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Mark Tinka
On 11/Nov/18 20:35, Jared Mauch wrote: > Let me know if you see anything related to Akamai. Will do. > Looking at these threads I don’t see anything really obvious and some are > much older posts. Agreed - but those posts were never really solved, and the issue description and behaviour

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Mark Tinka
On 11/Nov/18 18:51, Lavanauts wrote: > I’m on native IPv6 via Spectrum and have no problems with Windows > Updates.  Could this be a tunneling issue? I do run 6-in-4 from my backbone to my house as my FTTH provider does not do IPv6. I can't imagine this to specifically be the issue, as all

Re: WIndows Updates Fail Via IPv6

2018-11-12 Thread Clinton Work
I saw this issue randomly on Windows PCs due to IPV6 TCP checksum offloading. Try the following on the problem Windows machine: - Open the Device Manager -> Network Adapters -> Network Interface (Ethernet NIC):- Under the Network Adapter -> Advanced Tab, disable these options if present:TCP

Re: Well Known BGP Communities

2018-11-12 Thread Jared Mauch
On Sun, Nov 11, 2018 at 11:51:35PM -0200, João Butzke wrote: > Hi, Bryce! > > Is this what you are looking for? > > https://www.iana.org/assignments/bgp-well-known-communities/bgp-well-known-communities.xhtml > > https://tools.ietf.org/html/rfc1997 You may also want to look at

Re: Amazon now controls 3.0.0.0/8

2018-11-12 Thread Tom Hill
On 09/11/2018 00:46, Eric Kuhnke wrote: > 3.4.5.6/24 could be an interesting block to put > easily memorable IP services in... My upbringing in the 90s makes '5.6.7.8' far more memorable. :) -- Tom