Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Willy Manga
. On 11/10/2023 03:52, Delong.com wrote: [...] RPKI only asserts that a specific ASN must originate a prefix. It does nothing to validate the authenticity of the origination. Nope… It ALSO asserts (or can assert) an attribute of “Maximum allowed prefix length”. E.g. if I have a ROA for

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
> On Oct 11, 2023, at 18:53, Willy Manga wrote: > > > . > On 11/10/2023 22:29, Delong.com wrote: >> [...] >>> Yes, but in that scenario any advertisements between /32 and /36 from that >>> prefix originated by AS65500 are *valid* . That's why "ROAs should be as >>> precise as possible,

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Willy Manga
. On 11/10/2023 22:29, Delong.com wrote: [...] Yes, but in that scenario any advertisements between /32 and /36 from that prefix originated by AS65500 are *valid* . That's why "ROAs should be as precise as possible, meaning they should match prefixes as announced in BGP" [1] You completely

Re: ARIN whois contact abuse from ipv4depot aka Silicon Desert International Inc

2023-10-11 Thread Peter Potvin via NANOG
Definitely have received this same spam multiple times and so have a few others I know. It's ridiculous that they resort to scraping public lists and DBs to try and achieve what they're attempting to do. Regards, Peter Potvin | Executive Director

ARIN whois contact abuse from ipv4depot aka Silicon Desert International Inc

2023-10-11 Thread Eric Kuhnke
Is anyone else receiving spam from this organization? Based on the contents of the cold solicitations they are sending us, and the addresses being sent to, they have scraped ARIN WHOIS data for noc and abuse POC contact info and recent ipv4 block transfers. It's trivially easy to block their

Re: constraining RPKI Trust Anchors

2023-10-11 Thread Randy Bush
> So while each RP should be able to make policy decisions based on its > own local criteria, managing a default set of constraints is something > that is best done centralized. Who do you envision should manage these > lists? RP software maintainers? RIRs? Others? and how will this

Re: xfinity not working

2023-10-11 Thread Delong.com via NANOG
XFINITY will send you bursts of other peoples data constantly. That’s the nature of CMTS, it’s a broadcast network, acts like one giant ethernet. Owen > On Oct 11, 2023, at 15:00, William Herrin wrote: > > On Wed, Oct 11, 2023 at 12:32 PM Delong.com wrote: >> Nope… My Surfboard 8611 has

Re: xfinity not working

2023-10-11 Thread William Herrin
On Wed, Oct 11, 2023 at 12:32 PM Delong.com wrote: > Nope… My Surfboard 8611 has that (just Cable<->single ethernet port). Cool. The models I have only bridge. > The SRX-340 provides a backup simple network (SRX LAN ->NAT->$CABLECO) in > case things go wrong with the (usually more reliable

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
>> The point here is that at some point, even with translation, we run out of >> IPv4 addresses to use for this purpose. What then? > > You deliver the Internet over IPv6. A really large functional Internet > exists today if you only have IPv6. It is only getting bigger. Lots of (the >

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Mark Andrews
> On 12 Oct 2023, at 06:51, Delong.com wrote: > > > >> On Oct 11, 2023, at 12:47, Mark Andrews wrote: >> >> It is no different to deploying PNAT44 in every CPE box in the world to >> allow you to connect to the global IPv4 internet today. Virtually no home >> network on the planet has

Re: constraining RPKI Trust Anchors

2023-10-11 Thread Job Snijders via NANOG
Dear Martin, On Wed, Oct 11, 2023 at 10:01:53AM +0200, Martin Pels wrote: > I think this is important work. Thanks! > As you indicated in your mail you have spent quite some time compiling > the constraints files in the appendix. Keeping them up to date > requires tracking allocations and

Re: Lumen Seattle Contact

2023-10-11 Thread Brendan Carlson
Hey All, I got an escalation contact. All set here. Thanks! On Wed, Oct 11, 2023, 10:54 Brendan Carlson wrote: > Hello All, > > I have a client in Seattle, they've been hard down since Sunday due to a > replaced CL/Lumen switch in the building telephone room. They never got > hooked up after

Re: Lumen Seattle Contact

2023-10-11 Thread TJ Trout
Seems like a quick call to the noc with a ticket number they could get somebody dispatched in half a day or less On Wed, Oct 11, 2023, 10:57 AM Brendan Carlson wrote: > Hello All, > > I have a client in Seattle, they've been hard down since Sunday due to a > replaced CL/Lumen switch in the

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
> On Oct 11, 2023, at 12:47, Mark Andrews wrote: > > It is no different to deploying PNAT44 in every CPE box in the world to allow > you to connect to the global IPv4 internet today. Virtually no home network > on the planet has fully functional IPv4 available to it. Many businesses >

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Mark Andrews
It is no different to deploying PNAT44 in every CPE box in the world to allow you to connect to the global IPv4 internet today. Virtually no home network on the planet has fully functional IPv4 available to it. Many businesses networks don’t have fully functional IPv4 networks. We have

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
> On Oct 11, 2023, at 11:50, Dale W. Carder wrote: > > Thus spake Delong.com via NANOG (nanog@nanog.org) on Tue, Oct 10, 2023 at > 04:52:07PM -0700: >> However, IF YY is paying attention, and YY wants to advertise 2001:db8::/32 >> as well as allow 2001:db8:8000::/36 and 2001:db8:f000::/36,

Re: xfinity not working

2023-10-11 Thread Delong.com via NANOG
> On Oct 11, 2023, at 11:34, William Herrin wrote: > > On Wed, Oct 11, 2023 at 11:12 AM Delong.com wrote: >> There are still some knobs… >> >> e.g. bridge mode or not (usually) > > I'm guessing that's only if there's a built-in wifi router. My grand > experience with cable modems counts to

Re: constraining RPKI Trust Anchors

2023-10-11 Thread Delong.com via NANOG
Isn’t this sort of related to the AS-0 ROA effort a while back (except some of the RIRs rejected it, unfortunately)? I suspect that the same reasons behind rejection of AS-0 will also apply to RIR implementation of something like this, so plans to address that (and revive AS-0 perhaps) might

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
> On Oct 10, 2023, at 17:20, Mark Andrews wrote: > > > >> On 11 Oct 2023, at 09:43, Delong.com via NANOG wrote: >> >>> As a community, we have failed, because we never acknowledged and addressed >>> the need for backward compatibility between IPv6 and IPv4, and instead >>> counted on

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Dale W. Carder
Thus spake Delong.com via NANOG (nanog@nanog.org) on Tue, Oct 10, 2023 at 04:52:07PM -0700: > However, IF YY is paying attention, and YY wants to advertise 2001:db8::/32 > as well as allow 2001:db8:8000::/36 and 2001:db8:f000::/36, I would expect AS > YY would generate ROAs for >

Re: xfinity not working

2023-10-11 Thread Michael Thomas
On 10/11/23 11:34 AM, William Herrin wrote: On Wed, Oct 11, 2023 at 11:12 AM Delong.com wrote: There are still some knobs… e.g. bridge mode or not (usually) I'm guessing that's only if there's a built-in wifi router. My grand experience with cable modems counts to exactly two brands and

Re: xfinity not working

2023-10-11 Thread William Herrin
On Wed, Oct 11, 2023 at 11:12 AM Delong.com wrote: > There are still some knobs… > > e.g. bridge mode or not (usually) I'm guessing that's only if there's a built-in wifi router. My grand experience with cable modems counts to exactly two brands and four models, but in each case the model

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Delong.com via NANOG
> On Oct 10, 2023, at 22:44, Willy Manga wrote: > > > > > On 11/10/2023 03:52, Delong.com wrote: >> >>> On Oct 10, 2023, at 13:36, Matthew Petach wrote: >>> [...] >>> Owen, >>> >>> RPKI only addresses accidental hijackings. >>> It does not help prevent intentional hijackings. >> OK, but

Re: xfinity not working

2023-10-11 Thread Delong.com via NANOG
There are still some knobs… e.g. bridge mode or not (usually) Owen > On Oct 10, 2023, at 23:01, William Herrin wrote: > > On Tue, Oct 10, 2023 at 6:07 PM Al Whaley wrote: >> My understanding is that the internal web page in the consumer modems is >> gone. App or nothing. > > With xfinity,

Lumen Seattle Contact

2023-10-11 Thread Brendan Carlson
Hello All, I have a client in Seattle, they've been hard down since Sunday due to a replaced CL/Lumen switch in the building telephone room. They never got hooked up after the switch was replaced. Can someone please contact me off list about this? Thanks!

NANOG 89 Socials + More - There is Still Time to Register! Join Us Virtually!

2023-10-11 Thread Nanog News
*NANOG 89 Socials * *Network + Meet Community Members * NANOG Socials are an incredible opportunity to get to know your peers in the industry + foster important relationships in a relaxed, casual environment. They are also a lot of FUN!  Check out full details below. *MORE INFO *

[NANOG-announce] NANOG 89 Socials + More - There is Still Time to Register! Join Us Virtually!

2023-10-11 Thread Nanog News
*NANOG 89 Socials * *Network + Meet Community Members * NANOG Socials are an incredible opportunity to get to know your peers in the industry + foster important relationships in a relaxed, casual environment. They are also a lot of FUN!  Check out full details below. *MORE INFO *

Re: U.S. test of national alerts on Oct. 4 at 2:20pm EDT (1820 UTC)

2023-10-11 Thread Jay R. Ashworth
I'm not disabled (any more than being 58 years old makes you), but I know lots of people who are. And procmail still works just fine, I'm told. Cheers, -- jra - Original Message - > From: "Fred Baker" > To: "Warren Kumari" > Cc: nanog@nanog.org > Sent: Friday, October 6, 2023 4:28:43

Re: constraining RPKI Trust Anchors

2023-10-11 Thread Martin Pels
Hi Job, I think this is important work. As you indicated in your mail you have spent quite some time compiling the constraints files in the appendix. Keeping them up to date requires tracking allocations and policy developments in all RIRs. It reminds me of bogon filters for unallocated IP

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread borg
Well, I think the sane solution would be to push customers/clients into IPv6 and keep services IPv4. Then start moving services to dualstack. Most of todays customers/clients are consumers. They just connect to server to get data, watch movies, listen to music. Gaming is similar. That way, ISPs

Re: xfinity not working

2023-10-11 Thread William Herrin
On Tue, Oct 10, 2023 at 6:07 PM Al Whaley wrote: > My understanding is that the internal web page in the consumer modems is > gone. App or nothing. With xfinity, when you plug it a "non-activated" modem, you get a walled garden where you can connect to some of their web servers for the purpose

Re: xfinity not working

2023-10-11 Thread William Herrin
On Tue, Oct 10, 2023 at 6:36 PM Crist Clark wrote: > I had a forced modem upgrade with them earlier this year. I vaguely recall it > was not without some frustration, but I managed to get it done. > > I don’t seem to have a problem logging in at > https://login.xfinity.com/login > Is it