Re: Multicast over GRE between Linux server and Cisco Router

2013-01-11 Thread Brian Christopher Raaen
Just a quick note. I do have multicast enabled on the server gre1 interface. A tshark capture shows the igmp group queries from the router and the igmp join reply from the server. On Wed, Jan 9, 2013 at 10:51 AM, Brian Christopher Raaen mailing-li...@brianraaen.com wrote: I am trying to set

Re: [SHAME] Spam Rats

2013-01-11 Thread Tony Finch
John Levine jo...@iecc.com wrote: *.4.4.3.0.5.a.0.0.8.b.d.0.1.0.0.2.ip6.arpa. PTR a.node.on.vlan344.namn.se. ...will work just fine, for instance. Since there is no record for a.node.on.vlan344.namn.se., this won't work fine in any rDNS check I'm aware of. I believe it's relatively

Team Cymru contact

2013-01-11 Thread J. Oquendo
Can one of you guys contact me of list. (Sorry for the noise list... Best place for me to definitively the right person) -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM Where ignorance is our master, there is no

Dreamhost hijacking my prefix...

2013-01-11 Thread Jeff Kell
Not sure how widespread their leakage may be, but Dreamhost just hijacked one of my prefixes... Possible Prefix Hijack (Code: 10) Your prefix:

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Kenneth McRae
Jeff, We are not announcing the prefix in question nor do we peer with AS42861. -- Best Regards, Kenneth McRae *Director, Network Operations* kenneth.mc...@dreamhost.com Ph: 818-447-2589 www.dreamhost.com On Fri, Jan 11, 2013 at 7:23 AM, Jeff Kell jeff-k...@utc.edu wrote: Not sure how

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Jeff Kell
Robtex would beg to differ... you show peered with AS42861, perhaps someone (else) is looping their advertisements? _R_egistered _O_ther side _B_GP visible Peer OB AS174 COGENT /PSI B AS4323 TWTC Autonomous system for tw telecom . B AS4826 VOCUS-BACKBONE-AS Vocus Connect

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Jon Lewis
Sounds like someone in Russia is having some fun with as-path prepending and prefix hijacking. On Fri, 11 Jan 2013, Kenneth McRae wrote: Jeff, We are not announcing the prefix in question nor do we peer with AS42861. -- Best Regards, Kenneth McRae *Director, Network Operations*

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Kenneth McRae
Just checked all BGP speakers again and I show no peering with AS42861. On Fri, Jan 11, 2013 at 7:49 AM, Jeff Kell jeff-k...@utc.edu wrote: Robtex would beg to differ... you show peered with AS42861, perhaps someone (else) is looping their advertisements? *R*egistered *O*ther side *B*GP

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Kenneth McRae
That would be my guess. We have had some issues with this in the past with operators from China and Russia. On Fri, Jan 11, 2013 at 7:51 AM, Jon Lewis jle...@lewis.org wrote: Sounds like someone in Russia is having some fun with as-path prepending and prefix hijacking. On Fri, 11 Jan 2013,

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Jeroen Wunnink | Atrato IP Networks
Here at/as AS5580 I no longer see it announced as a /20, only your own /18: #sh ip bgp routes 150.182.192.0 255.255.192.0 longer-prefixes Number of BGP Routes matching display condition : 4 Searching for matching routes, use ^C to quit... Status A:AGGREGATE B:BEST b:NOT-INSTALLED-BEST

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Andree Toonk
Hi, Here's a quick summary of what we saw at BGPMon.net. At 2013-01-11 14:14:13 we saw announcements (seemingly) originated by 26347, for prefixes normally announced by other ASn's (origin change / hijack). This seems to have affected 112 prefixes for 110 ASn's [1], including Rogers, Tata,

Re: OOB core router connectivity wish list

2013-01-11 Thread Nikolay Shopik
Also getting POTS line in your pop sometimes get tricky. 2G/3G modems with cheap plans cost like 10$/month (dunno about US though), thats almost same as POTS line. On 10/01/13 20:18, William Herrin wrote: Dial up with PPP and then cross the ethernet? Drop off a cellular modem with IP service

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Tony McCrory
Jeff: 150.182.208.0/20 is not visible from AS702 in Germany. 150.182.192.0/18 path is 702 701 209 26827 14209 Tony On 11 January 2013 15:23, Jeff Kell jeff-k...@utc.edu wrote: Not sure how widespread their leakage may be, but Dreamhost just hijacked one of my prefixes...

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Kenneth McRae
Thanks for that info Andree. The only valid peer I see on the list would be HE. We do not peer with any of the others listed. Kenneth On Fri, Jan 11, 2013 at 8:46 AM, Andree Toonk andree+na...@toonk.nl wrote: Hi, Here's a quick summary of what we saw at BGPMon.net. At 2013-01-11 14:14:13

Re: Microsoft Product Activation server reachability

2013-01-11 Thread Yang Yu
communication prohibited by filter is just an ICMP response code, sadly Windows does not under it.. Type 3 (Destination unreachable) Code 13 (Communication Administratively Prohibited - generated if a router cannot forward a packet due to administrative filtering;) ICMP echo request for this

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
- Original Message - From: William Herrin b...@herrin.us On Thu, Jan 10, 2013 at 11:41 AM, Randy Whitney randy.whit...@verizon.com wrote: Nothing beats POTS in a broad power outage scenario. Numerous power outages have taken down mobile service completely while the POTS lines

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Andree Toonk
Hi Kenneth, .-- My secret spy satellite informs me that at 2013-01-11 8:54 AM Kenneth McRae wrote: Thanks for that info Andree. The only valid peer I see on the list would be HE. We do not peer with any of the others listed. Could it be these ASns receive your routes via an IX route-server?

Weekly Routing Table Report

2013-01-11 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Job Snijders
Hi all, Atrato / 5580 here. We don't have direct peering with AS26347, although we learn the AS26347 prefixes through the 206.223.143.253 (AS 19996) routeserver in LAX. So in a sense we are peering :-) Kind regards, Job On Jan 11, 2013, at 7:31 PM, Andree Toonk andree+na...@toonk.nl

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Kenneth McRae
Yes, now that is possible (just no direct peering). So that takes me back to my original statement about not announcing the 150.182.208.0/20 prefix to begin with. Kenneth On Fri, Jan 11, 2013 at 10:31 AM, Andree Toonk andree+na...@toonk.nlwrote: Hi Kenneth, .-- My secret spy satellite

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Andree Toonk
.-- My secret spy satellite informs me that at 2013-01-11 10:44 AM Kenneth McRae wrote: Yes, now that is possible (just no direct peering). So that takes me back to my original statement about not announcing the 150.182.208.0/20 http://150.182.208.0/20 prefix to begin with. Here's some more

Re: Dreamhost hijacking my prefix...

2013-01-11 Thread Scott Weeks
--- andree+na...@toonk.nl wrote: From: Andree Toonk andree+na...@toonk.nl Here's some more data showing an announcement for 150.182.208.0/20 originated by 26347

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 1:26 PM, Jay Ashworth j...@baylink.com wrote: Oh, I dunno, Bill. Sure there are lots more RSUs than there used to be, but at least it's not all *that* hard to tell if you're connected to one. Much easier than, say, finding out if both sides of your loop have been

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
- Original Message - From: William Herrin b...@herrin.us On Fri, Jan 11, 2013 at 1:26 PM, Jay Ashworth j...@baylink.com wrote: Oh, I dunno, Bill. Sure there are lots more RSUs than there used to be, but at least it's not all *that* hard to tell if you're connected to one. Much

The Cidr Report

2013-01-11 Thread cidr-report
This report has been generated at Fri Jan 11 21:13:09 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

BGP Update Report

2013-01-11 Thread cidr-report
BGP Update Report Interval: 03-Jan-13 -to- 10-Jan-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS982975137 4.5% 45.2 -- BSNL-NIB National Internet Backbone 2 - AS7552

RE: Microsoft Product Activation server reachability

2013-01-11 Thread Nathan Anderson
TCP 80 is working fine now; wasn't last night, though. In the past, my recollection is that ICMP ping to actual Microsoft IP space (not simply Akamai) would have simply been blackholed/dropped with no response, so seeing packet filtered come back + no response on any TCP ports made it seem

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 4:43 PM, Jay Ashworth j...@baylink.com wrote: You are suggesting that it is *at all* difficult for a technically competent end-user to determine whether a given new POTS line will go to a CO or to an RSU? Well, let me treat this as an opportunity to learn. How does one

Re: OOB core router connectivity wish list

2013-01-11 Thread Joel jaeggli
On 1/11/13 02:44 , Nikolay Shopik wrote: Also getting POTS line in your pop sometimes get tricky. 2G/3G modems with cheap plans cost like 10$/month (dunno about US though), thats almost same as POTS line. They don't generally have public IPs (that can be arranged). verizon 4G cards have ipv6

Re: OOB core router connectivity wish list

2013-01-11 Thread Walter Keen
I work for a rural Telecom in northwest US. Typically when I hear statements like that, it's that the tech built (strung aerially, trenched through ground, or through buried conduit) from a pedestal or other copper splice point to the customer premise. I would only expect this to go to the

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
The issue wasn't diversity, it was is my POTS on Central Battery; sorry for the comparative red herring. - jra Walter Keen walter.k...@rainierconnect.net wrote: I work for a rural Telecom in northwest US. Typically when I hear statements like that, it's that the tech built (strung aerially,

Re: OOB core router connectivity wish list

2013-01-11 Thread Walter Keen
In the US, any incumbent phone carrier (ILEC), is required to have POTS lines on a power infrastructure capable of sustaining at least an 8 hour interruption in commercial power, whether it's in a remote or central office. Most companies use batteries at remotes (and put portable generators out

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
A POTS circuit necessarily terminates on a piece of gear with a specific CLLI, generally discernable at order time. What that gear will be, and if it's in a CO with a real battery plant is also known in advance. And, to tie it back on topic, the odds of a core router being in a place where

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
Sure. I assume it on real wire centers, I don't on RSUs or carrier. Luckily it's easy to tell which is which, in most cases. Walter Keen walter.k...@rainierconnect.net wrote: In the US, any incumbent phone carrier (ILEC), is required to have POTS lines on a power infrastructure capable of

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 7:09 PM, Jay Ashworth j...@baylink.com wrote: The issue wasn't diversity, it was is my POTS on Central Battery; sorry for the comparative red herring. The issue was: is my POTS going to survive an extended regional power outage that my cellular/DSL/cable modem doesn't,

Question about DOCSIS DHCP vs ARP

2013-01-11 Thread Jean-Francois Mezei
In the old days of DOCSIS, I was able, during failures of DHCP (for various reasons) to self assign a nearby IP address in the same subnet and this worked fine as long as that IP wasn't being used by someone else at the time. While this was done to cope with some failures or bad policy at the

Re: Question about DOCSIS DHCP vs ARP

2013-01-11 Thread Jean-Francois Mezei
On 13-01-11 19:59, Karl Brumund wrote: JF, Long ago been fixed. Look at Cisco CMTS config documentation, particularly cable-source-verify. Many thanks. In particular, you need cable-source-verify dhcp to prevent self assigned IPs that are unused by neighbours. Is this something that is now

[NANOG-announce] NANOG 57 Update

2013-01-11 Thread Betty Burke be...@nanog.org
Colleagues: I write to share a few NANOG 57http://www.nanog.org/meetings/nanog57/index.html, February 4-5, 2013, meeting updates with you. The NANOG Program Committee, once again, delivered a NANOG program full of great content. The NANOG 57

Re: OOB core router connectivity wish list

2013-01-11 Thread Nikolay Shopik
On 12.01.2013 3:44, Joel jaeggli wrote: On 1/11/13 02:44 , Nikolay Shopik wrote: Also getting POTS line in your pop sometimes get tricky. 2G/3G modems with cheap plans cost like 10$/month (dunno about US though), thats almost same as POTS line. They don't generally have public IPs (that can