Re: AS16512 Unauthorized Announcement by Lumen

2023-01-17 Thread Alistair Mackenzie
Austin, This prefix isn't being announced by Lumen, it is merely in their IRR db. This is quite different from your accusation of "unauthorized announcement". Stale IRR entries are very common and usually cause no issue on their own. These should be cleaned up to avoid any accidents but that

Re: Longest prepend( 255 times) as path found

2022-08-25 Thread Alistair Mackenzie
There are some generally accepted and useful filters found at https://bgpfilterguide.nlnog.net/. There is one which covers excess prepends. On Thu, 25 Aug 2022 at 15:25, anonymous wrote: > Hey everyone, > > Too many hops found as below. > Usually What shoud we do ? Should we filter it ? > >

Re: akamai yesterday - what in the world was that

2020-01-25 Thread Alistair Mackenzie
Off-peak hours are on-peak somewhere else in the world. On Sat, Jan 25, 2020 at 7:37 PM Darin Steffl wrote: > Shouldn't game patches like this be released overnight during off-peak > hours? Fortnite releases their updates around 3 or 4am when most ISP's > networks are at their lowest

Re: Any info on devices that are running eBGP on the Internet?

2019-11-07 Thread Alistair Mackenzie
LINX has the mac addresses of their LANs public. https://portal.linx.net/members/list-ip-asn?columns=asn+mac_addresses+short_name+website== On Thu, Nov 7, 2019 at 7:26 PM Owen DeLong wrote: > MAC Addresses may cross into fear of disclosure of private identifying > information. > > All they

Re: Vultr contact

2018-09-07 Thread Alistair Mackenzie
Have you tried choopa? They own and/or operate vultr. On Fri, Sep 7, 2018 at 2:09 PM Mehmet Akcin wrote: > I got no response really. people were more like sharing their experience. > i guess there isn't anyone. > > On Fri, Sep 7, 2018 at 7:03 AM Niels Bakker > wrote: > >> * meh...@akcin.net

Re: Cogent ops contact

2018-01-18 Thread Alistair Mackenzie
I've had no problem dealing with their noc on these sort of issues in the past. On 18 Jan 2018 10:54, "Youssef Bengelloun-Zahr" wrote: > Dear Nanog community, > > I have an issue with a client trying to reach an IP that has been > blackholed on Cogent backbone for shady

Re: Geolocate data for allocated blocks

2017-12-19 Thread Alistair Mackenzie
Most places are using Maxmind for their GeoIP. You can ask them to update the database here: https://support.maxmind.com/geoip-data-correction-request/ It takes about a month in my experience to see results. Make sure the data in whois is also up to date for your blocks. On Tue, Dec 19, 2017 at

Re: euNetworks, DE-CIX

2017-05-24 Thread Alistair Mackenzie
Which location? On 24 May 2017 at 09:49, Michael J McCafferty wrote: > Operators, > We are a US hosting company, expanding in to Europe. In the US we > use Level 3 and AIS (AS6130) and Cogent. We planned to use Level 3 and > Cogent in EU as well, but our experience

Re: backbones filtering unsanctioned sites

2017-02-11 Thread Alistair Mackenzie
ernal, best > Community: 174:990 174:20912 174:21001 174:22013 > Originator: 66.28.1.228, Cluster list: 154.54.66.21, 66.28.1.9 > > > > On 2/10/17 1:49 PM, Alistair Mackenzie wrote: > >> Cogent also have a blackhole route-server that they will p

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Alistair Mackenzie
Cogent also have a blackhole route-server that they will provide to you to announce /32's for blackholing. The address for this is 66.28.1.228 which is the originator for the 104.31.19.30/3 2 and 104.31.18.30/32 routes. On 10 February 2017 at 18:46, Jason Rokeach

IPv6 BGP prefix filters

2017-01-16 Thread Alistair Mackenzie
Hi, So recently I've come across an issue with a large ISP announcing a /22 and /25 of IPv6 space. We are currently filtering <28 and >48 which until now has worked fine for us. What are others using as their prefix filters in the DFZ? Thanks, Alistair

Re: Providing transit to unallocated networks

2016-09-27 Thread Alistair Mackenzie
September 2016 at 01:28, William Herrin <b...@herrin.us> wrote: > On Tue, Sep 27, 2016 at 8:18 PM, Alistair Mackenzie <magics...@gmail.com> > wrote: > > I've come across a network which seem to be getting transit yet both the > > ASN and IP space is not allocat

Providing transit to unallocated networks

2016-09-27 Thread Alistair Mackenzie
Hi, I've come across a network which seem to be getting transit yet both the ASN and IP space is not allocated by the RIR. It does appear at some point that it was valid however this is no longer the case. The network is single homed and I tried asking the transit provider what their policy was

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread Alistair Mackenzie
+1 On 4 June 2016 at 01:35, Owen DeLong wrote: > I think the day that Netflix tells me to turn off IPv6 or doesn’t serve me > content > because one of my routes to the internet for IPv6 is via an HE tunnel (the > other > two are different tunnels, but all of my IPv4 also goes

Netflix IP Space

2016-05-28 Thread Alistair Mackenzie
Hi All, Does anyone on either lists have a list of Netflix's IP space that they are using for streams and "unblocker" detection? We are doing policy based VPN and Netflix needs to be excluded from this to work around their restrictions. They are on AWS so not as easy as just finding their

Re: Skype off line ??

2015-09-21 Thread Alistair Mackenzie
Seems fine on mobile in the UK for me too. On 21 Sep 2015 18:36, "Paul Rolland (ポール・ロラン)" wrote: > Hello, > > On Mon, 21 Sep 2015 18:21:40 +0200 > Marco Paesani wrote: > > > No solution > > http://heartbeat.skype.com/2015/09/skype_presence_issues.html > >

Re: IP's with jitter/packet loss and very far away

2015-09-18 Thread Alistair Mackenzie
Comcast? On 18 September 2015 at 16:42, Dovid Bender wrote: > Hi, > > I am working on a presentation and looking to create samples of what a > trace should not look like? Anyone have IP's that I can trace from the US > or UK that will show > 1) jitter > 2) packet loss > 3)

Re: BRAS sugestion

2015-08-14 Thread Alistair Mackenzie
I'm pretty sure this would get expensive for 30k+. Perhaps try Walmart? On 14 August 2015 at 17:01, Mike Lyon mike.l...@gmail.com wrote: Victoria's Secret On Aug 14, 2015 8:08 AM, Julian Eble juliane...@yahoo.com.br wrote: Hello Nanog, Our company are constantly growing and we're looking

Re: Yet Another BGP (Border Gateway Protocol) Python Implementation

2015-08-07 Thread Alistair Mackenzie
As our priority, we will do MPLS VPN, IPv6, *Flowspec* firstly. In the future, we will consider multicast and EVPN. Thanks. On 7 August 2015 at 10:05, Pavel Odintsov pavel.odint...@gmail.com wrote: Hi! Thanks for your code! I have used ExaBGP for one year and will try your tool too! Do you

Re: GoDaddy : DoS :: Contact

2015-08-03 Thread Alistair Mackenzie
Source based black holing would work in this case providing it was done at GoDaddy's edge. On 3 Aug 2015 01:58, Mel Beckman m...@beckman.org wrote: Blackholing isn't what you want. That will still permit his source IP into your network, and only blackhole replies from your network, so the

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Alistair Mackenzie
While increasing bandwidth to the endpoint isn't viable wouldn't increasing the edge bandwidth out to the ISP be a start in the right direction? I would assume this would a start to the problem if your attacks were volumetric. Once the bandwidth is there you can look at mitigation before it

Re: ISP in NYC

2015-07-17 Thread Alistair Mackenzie
Hibernia (5580) have good latency throughout Europe and are huge on AMS-IX. Latency is around 18ms from Edinburgh to Amsterdam and 5ms from London via their network. Used them for transit and they gave me a circuit onto AMS-IX too which could be worth you looking into. Between the route servers

Re: NTP versions in production use?

2015-07-12 Thread Alistair Mackenzie
I’m currently running a scan of the internet and querying NTP versions. I’ll publish the results of it on Github and mail them in here :) On 12/07/2015 15:15, NANOG on behalf of Mike O'Connor nanog-boun...@nanog.org on behalf of m...@dojo.mi.org wrote: :Thanks, and I'm kinda stunned that

Riot Games

2015-06-06 Thread Alistair Mackenzie
Hi, Is there anyone on this list from Riot Games that can reach out to me? I'm having some issues with customers reaching your network. Thanks, Alistair

Re: Hulu and HBO

2015-05-17 Thread Alistair Mackenzie
I know Netflix has caching boxes that the ISP can install. Perhaps Hulu and HBO have or do the same thing? On 17 May 2015 23:06, Mike Hammett na...@ics-il.net wrote: When I fire up their streams, they come from Level3 IPs. Can anyone confirm that Hulu and HBO come from Level 3 and not just

Re: Route Optimization Products

2015-05-15 Thread Alistair Mackenzie
There is this but its old and not been updated in quote some time. Never got around to playing with it. https://github.com/kvogt/kyro On 15 May 2015 at 17:26, Paul S. cont...@winterei.se wrote: Problem in this space is, none of the products offered are genuinely affordable. When your route

Re: Input Regarding Cogent and NTT

2015-02-05 Thread Alistair Mackenzie
Don't be surprised if cogent contact you for even posting this. They did it to me when I asked for hibernia. On 5 Feb 2015 19:16, Mike Hammett na...@ics-il.net wrote: Working on it. ;-) Being an eyeball network, most of my traffic just goes to NetFlix, Akamai, LimeLight, FaceBook, Google,

Re: Hibernia/Atrato contacts

2014-12-03 Thread Alistair Mackenzie
Thanks for the information. I've got a few contacts now and will be reaching out to them. On 3 Dec 2014 02:13, Alistair Mackenzie magics...@gmail.com wrote: Hi, Does anyone have a contact for a sales/account manager at Hibernia/Atrato located in the UK timezone or even +1? Please contact

Hibernia/Atrato contacts

2014-12-02 Thread Alistair Mackenzie
Hi, Does anyone have a contact for a sales/account manager at Hibernia/Atrato located in the UK timezone or even +1? Please contact me off list with the details. Thanks, Alistair

Re: TeliaSonera IC Contacts

2014-11-29 Thread Alistair Mackenzie
I'd be inclined to not buy from them if they are not replying to sales emails. You've got to ask what their NOC will be like once you are a customer... On 29 November 2014 at 16:08, Sander Steffann san...@steffann.nl wrote: Hi, It's more of a have to buy from them as opposed to a want to

Re: Anyone else having trouble reaching thepiratebay.se? AS39138

2014-11-26 Thread Alistair Mackenzie
All good from hibernia's network (AS5580). On 26 Nov 2014 17:43, Javier J jav...@advancedmachines.us wrote: Name: thepiratebay.se Address: 194.71.107.27 Its reachable from some places and not others. Is it being filtered? Is it being hijacked? Email to them bounced from google apps.

Re: Anyone else having trouble reaching thepiratebay.se? AS39138

2014-11-26 Thread Alistair Mackenzie
They do some wacky routing with internal IP addresses and AS prepending to make it seem like that they see hosted in Korea. I have no idea why anyone would but they do. On 26 Nov 2014 17:54, Ken Chase m...@sizone.org wrote: im hitting 30 hops tracing from one location, and 30 from some EC2s.

Re: Equinix Virginia - Ethernet OOB suggestions

2014-11-10 Thread Alistair Mackenzie
Couldn't you put a router or VPN system on the single IP they are giving you and use RFC1918 addressing space? OOB doesn't normally justify a /24 let alone a /23. On 10 November 2014 13:18, Ruairi Carroll ruairi.carr...@gmail.com wrote: Dear List, I've got an upcoming deployment in Equinix

Re: peer1 contact?

2014-10-10 Thread Alistair Mackenzie
Just a heads up, Gmail gave me a warning about this email too so that may be your problem. On 10 October 2014 18:15, goe...@anime.net wrote: Can someone from peer1.net contact me? You are filtering your ab...@peer1.net mailbox. -Dan

Re: Marriott wifi blocking

2014-10-04 Thread Alistair Mackenzie
You could monitor it with something like airodump-ng and send deauth packets if its not associated with your own BSSID(s) On 3 October 2014 21:06, David Hubbard dhubb...@dino.hostasaurus.com wrote: Saw this article: http://www.cnn.com/2014/10/03/travel/marriott-fcc-wi-fi-fine/ The