Re: Friday Reminder: Web Site Security

2020-05-15 Thread Matt Palmer
On Fri, May 15, 2020 at 07:24:51PM -0400, Valdis Klētnieks wrote: > And yes, I know that automated systems can't use passphrases.. so remember to > check to see if you can use 'force-command=' in the known hosts file so that > the > key can only issue one command. (yes, this means that if the

Re: Friday Reminder: Web Site Security

2020-05-15 Thread Mike Hale
Big plus 1 to Bill's point. On Fri, May 15, 2020, 6:37 PM William Herrin wrote: > On Fri, May 15, 2020 at 4:25 PM Valdis Klētnieks > wrote: > > On Fri, 15 May 2020 12:15:13 -0700, "Ronald F. Guilmette" said: > > > This is your helpful Friday reminder to always pay close attention to > > > the

Re: Friday Reminder: Web Site Security

2020-05-15 Thread William Herrin
On Fri, May 15, 2020 at 4:25 PM Valdis Klētnieks wrote: > On Fri, 15 May 2020 12:15:13 -0700, "Ronald F. Guilmette" said: > > This is your helpful Friday reminder to always pay close attention to > > the security settings of all of the web sites under your administration. > > Otherwise, anonymous

Re: Friday Reminder: Web Site Security

2020-05-15 Thread Valdis Klētnieks
On Fri, 15 May 2020 12:15:13 -0700, "Ronald F. Guilmette" said: > This is your helpful Friday reminder to always pay close attention to > the security settings of all of the web sites under your administration. > Otherwise, anonymous skript kiddiez could show up at any moment and > deface one or

Re: Don't forget RFG (was: Re: RIPE NCC Executive Board election)

2020-05-15 Thread Large Hadron Collider
I feel as though I am reading an amalgamation of the sundry opinions rendered by US judges and Justices against such irreputable characters as Prenda Law and its shell companies. Bravo Ron. Bravo. But what do I know? I'm just a 20 year old 9th-grader. On Fri, 15 May 2020 12:10:49 -0700

Re: Rogue BGP Routes

2020-05-15 Thread Mark Tinka
On 15/May/20 21:14, Gary Godard wrote: > We had an eBGP session with them at that time but it was very > problematic. It is strange that the IP blocks that had the issue were > the same blocks that we advertised with them and the ones that we were > using with Level 3 at the time were

Re: Rogue BGP Routes

2020-05-15 Thread Gary Godard via NANOG
We had an eBGP session with them at that time but it was very problematic. It is strange that the IP blocks that had the issue were the same blocks that we advertised with them and the ones that we were using with Level 3 at the time were unaffected. Once this message posted to the group, I got

Friday Reminder: Web Site Security

2020-05-15 Thread Ronald F. Guilmette
This is your helpful Friday reminder to always pay close attention to the security settings of all of the web sites under your administration. Otherwise, anonymous skript kiddiez could show up at any moment and deface one or more of your web sites. (It happens a lot.) https://ipv4.plus/

Re: Don't forget RFG (was: Re: RIPE NCC Executive Board election)

2020-05-15 Thread Ronald F. Guilmette
I want to thank Joe Greco for his kind and generous comments. That having been said, I'm not sure that I either should, or even want to take credit for having kicked off *with a single message* "a 100+-message flamefest on NANOG". That was not my intent, and it is quite clear that those NANOG

Re: Rogue BGP Routes

2020-05-15 Thread Christopher Morrow
On Fri, May 15, 2020 at 2:05 PM Gary Godard via NANOG wrote: > The affected prefixes were 208.79.8.0/24 and 208.79.10.0/24 > > i do see a /22 ROA for this set of prefixes, hurray! :) > We did previously have a relationship with 10 years ago in the > Thibodaux/Hammond area. > > Around 8 pm CST

Re: Switch for SFP+

2020-05-15 Thread Mauro Gasparini
This works well on my CRSs: /interface bonding add mode=802.3ad name=bond-inet slaves=ether9,ether10,ether8 transmit-hash-policy=layer-2-and-3 /interface bridge port add bridge=br-cabase interface=bond-inet add bridge=br-cabase interface=sfp1 But if I want to bridge vlans behind some bonding

Re: Rogue BGP Routes

2020-05-15 Thread Gary Godard via NANOG
The affected prefixes were 208.79.8.0/24 and 208.79.10.0/24 We did previously have a relationship with 10 years ago in the Thibodaux/Hammond area. Around 8 pm CST last night service to the customers was restored. Not sure who resolved the issue or if RPKI that I set up yesterday afternoon was

Re: Switch for SFP+

2020-05-15 Thread Mauro Gasparini
Yes, cpu loads a little more only when you are logged. The rest of the time is the same. El 15/5/20 a las 12:05, Mike Hammett escribió: It doesn't matter whether you use Winbox, web interface, or CLI, the same configuration capabilities exist. The determination is how you configure it, what

Weekly Routing Table Report

2020-05-15 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to

Re: Rogue BGP Routes

2020-05-15 Thread Mark Tinka
On 15/May/20 19:13, Gary Godard wrote: > > We did previously have a relationship with 10 years ago in the > Thibodaux/Hammond area. Do you recall whether you had an eBGP session with them, or if they originated your prefixes on your behalf behind their own AS? >   > Not sure who resolved

Canadian Tire/AS396367 netops contact

2020-05-15 Thread Eric Dugas via NANOG
Hello, Canadian Tire has a routing loop in their network. We tried the public contact in their ARIN and none of them are reachable externally. The loop is inside 205.210.17.0/24, (205.210.17.0/24) announced by AS396367 Thanks Eric Dugas

Re: Rogue BGP Routes

2020-05-15 Thread Mark Tinka
On 14/May/20 22:53, Gary Godard via NANOG wrote: > Hi, >       We are having an issue with Charter Communications advertising 2 > of our IP ranges.  > We are in the process of implementing RPKI now, but does anyone have a > suggestion on how to get them to stop? We have tried contacting them >

Re: Switch for SFP+

2020-05-15 Thread Mike Hammett
https://wiki.mikrotik.com/wiki/Manual:CRS3xx_series_switches#Bonding - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Mauro Gasparini" To: nanog@nanog.org Sent: Friday, May 15, 2020 8:55:22 AM

Re: Switch for SFP+

2020-05-15 Thread Mike Hammett
It doesn't matter whether you use Winbox, web interface, or CLI, the same configuration capabilities exist. The determination is how you configure it, what version of RouterOS you have, and what the hardware you have is capable of. The CRS3xx series are the easiest to configure, with the

Re: Rogue BGP Routes

2020-05-15 Thread Seth Mattinen
On 5/14/20 1:53 PM, Gary Godard via NANOG wrote: Hi,       We are having an issue with Charter Communications advertising 2 of our IP ranges. We are in the process of implementing RPKI now, but does anyone have a suggestion on how to get them to stop? We have tried contacting them via email

Re: Rogue BGP Routes

2020-05-15 Thread Christopher Morrow
On Fri, May 15, 2020 at 10:46 AM Gary Godard via NANOG wrote: > Hi, > We are having an issue with Charter Communications advertising 2 of > our IP ranges. > ... and these routes are: and so you kind folk can filter them from your Charter peerings... what are the prefixes? > We are in

Rogue BGP Routes

2020-05-15 Thread Gary Godard via NANOG
Hi, We are having an issue with Charter Communications advertising 2 of our IP ranges. We are in the process of implementing RPKI now, but does anyone have a suggestion on how to get them to stop? We have tried contacting them via email and via and phone through numerous channels with no

Re: Switch for SFP+

2020-05-15 Thread Mauro Gasparini
I have no experience with Ubiquiti EdgeSwitch. I know its wireless product very wel, but I have no knowledge of how switches behave. El 14/5/20 a las 16:13, Kevin Shymkiw escribió: While I am not sure on the optics support - what about a Ubiquiti EdgeSwitch 16XG? 12x SFP+ ports 4x RJ-45

Re: Switch for SFP+

2020-05-15 Thread Mauro Gasparini
Thanks. I am currently using CRS326-24G-2S+ (with routerOS) for this, but when I want to do vlan trunking through the bonding, cpu load grows from 3% to more than 90%. I'm consulting Mikrotik's support in the meantime, because routerOS probably doesn't take advantage of the switch hardware as

Don't forget RFG (was: Re: RIPE NCC Executive Board election)

2020-05-15 Thread Joe Greco
On Fri, May 15, 2020 at 11:23:28AM +0200, Terrence Koeman via NANOG wrote: > FYI, the voting results for the three positions on the RIPE exec > board were just announced and Elad was NOT elected. https://www.ripe.net/participate/meetings/gm/meetings/may-2020 Congratulations to Maria H??ll,

Re: Switch for SFP+

2020-05-15 Thread Alain Hebert
    Hi,     Mikrotik is a decent product and I'm always amazed at their features set, but...     Using the UI to configuring the switch will punt too much traffic toward the CPU.  However, it is possible to configure the switch fabric with the cli and attain the desired results.     It

Re: RIPE NCC Executive Board election

2020-05-15 Thread Töma Gavrichenkov
Peace, On Fri, May 15, 2020, 12:25 PM Terrence Koeman via NANOG wrote: > FYI, the voting results for the three positions on the RIPE exec board > were just announced and Elad was NOT elected. > A funny moment: Raymond Jetten was elected to the board, and he's the RIPE IPv6 working group chair.

Re: RIPE NCC Executive Board election

2020-05-15 Thread Terrence Koeman via NANOG
FYI, the voting results for the three positions on the RIPE exec board were just announced and Elad was NOT elected. No doubt we should thank the super illegal, criminal and anonymous Spamhaus cabal as well as the super shady and corrupt IPv6 lobby for manipulating this election from the