Re: [Nanog-futures] Stenographers for Future NANOGs?

2010-10-07 Thread Aaron Hughes
On Wed, Oct 06, 2010 at 07:54:57AM -0700, Kevin Oberman wrote: Date: Wed, 06 Oct 2010 10:42:16 -0400 From: Randy Whitney randy.whit...@verizonbusiness.com As I am reading through Matt's notes since I cannot attend NANOG in person this time, I'm pondering whether it may make sense in the

Re: [Nanog-futures] Memberships, Bylaws and other election matters

2010-10-07 Thread laperriere . sylvie
To answer Rich's question about newcomers: at every nanog, roughly 30% of attendees are newcomers and they also tend to be local. Whether they come back for seconds, we are just starting to collect the data. The large percent of new attendees in each location seem to indicate that there is

P2P link over STM-1

2010-10-07 Thread Peter Rudasingwa
I have clients who want a P2P link over STM-1. How can I achieve this? What kind of equipment do I need. At the moment I have a cisco 6500 and 7200VXR Thanks, Peter R.

DNS/Proxy based DDoS protection

2010-10-07 Thread Drew Weaver
Hi, Over the last several years I've noticed there seems to be no limit to the number of proxy/DNS based DDoS protection services springing up all over the place so I am wondering if anyone has any insights on what sorts of tools, etc these companies use to provide this service (Open Source,

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Sven Olaf Kamphuis
we have run a simular system for a while, the problem is still with mailinglists and online shops (by lack of a standardised field the password was put anywhere in the email, all email not containing a password was rejected with a message to call sales) a) you print unique passwords on each

reachability problems Europe-US?

2010-10-07 Thread Thomas Schmid
Hi, any known problems with reachability from europe to US? We have customer complaints that they can't reach US-based sites like microsoft and others. Seems to be only source-prefix-based, but several ISPs in europe are affected. Or is the same problem visible in the states? Regards,

Re: reachability problems Europe-US?

2010-10-07 Thread Heath Jones
Seems to be only source-prefix-based, but several ISPs in europe are affected. Can you post source and destination IP's ?

Re: P2P link over STM-1

2010-10-07 Thread Matthew Petach
On Thu, Oct 7, 2010 at 1:24 AM, Peter Rudasingwa peter.rudasin...@altechstream.rw wrote: I have clients who want a P2P link over STM-1. How can I achieve this? What kind of equipment do I need. At the moment I have a cisco 6500 and 7200VXR Thanks, Peter R. Aren't STM-1 links, by their

Re: reachability problems Europe-US?

2010-10-07 Thread Thomas Schmid
Hi, On 07.10.2010 14:35, Heath Jones wrote: Seems to be only source-prefix-based, but several ISPs in europe are affected. Can you post source and destination IP's ? source: 131.220.0.0/16, 212.201.68.0/22, 212.201.72.0/21, destination: 65.122.178.73, 63.228.223.104 traceroute to

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Valdis . Kletnieks
On Thu, 07 Oct 2010 12:10:37 -, Sven Olaf Kamphuis said: If what you're asking under point c is what happens if a system that contains such a password for your email address gets compromised the answer is simple, you remove that specific password from your approved passwords list 140

Re: reachability problems Europe-US?

2010-10-07 Thread Thomas Schmid
an update: On 07.10.2010 15:09, Thomas Schmid wrote: Hi, On 07.10.2010 14:35, Heath Jones wrote: Seems to be only source-prefix-based, but several ISPs in europe are affected. Can you post source and destination IP's ? source: 131.220.0.0/16, 212.201.68.0/22, 212.201.72.0/21, destination:

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Jason Bertoch
On 2010/10/06 11:36 PM, Ronald F. Guilmette wrote: Well, anyway, here's three more hijacked blocks that they (AS6517) are routing. This is in addition to the 75 such blocks I've already reported. (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity, are you also

Re: reachability problems Europe-US?

2010-10-07 Thread Heath Jones
Seems to be only source-prefix-based, but several ISPs in europe are affected. source: 131.220.0.0/16, 212.201.68.0/22, 212.201.72.0/21, destination: 65.122.178.73, 63.228.223.104 traceroute to 65.122.178.73 (65.122.178.73), 30 hops max, 40 byte packets  1  er-rz-gig-3-3.stw-bonn.de

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Heath Jones
Well, anyway, here's three more hijacked blocks that they (AS6517) are routing.  This is in addition to the 75 such blocks I've already reported.  (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity, are you also reporting these blocks to Spamhaus?  I expect their

[NANOG-announce] NANOG election results and other news

2010-10-07 Thread Steve Feldman
As usual for our October meetings, there has been a lot happening, with more to come over the next few days. Our annual election was held during NANOG 50, with these results: - Patrick Gilmore, Robert Seastrom, and Richard Steenbergen were elected to two-year terms on the NANOG SC (and

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks

2010-10-07 Thread Christopher Morrow
On Thu, Oct 7, 2010 at 10:09 AM, Heath Jones hj1...@gmail.com wrote: Well, anyway, here's three more hijacked blocks that they (AS6517) are routing.  This is in addition to the 75 such blocks I've already reported.  (I guess that makes 78 hijacked blocks for them, in total.) Out of curiosity,

Re: AS6517 - Reliance Globalcom -- routing three more hijacked blocks - bulk Whois

2010-10-07 Thread John Curran
On Oct 7, 2010, at 10:25 AM, Christopher Morrow wrote: in stabbing around today on the ARIN online website I noticed this: ARIN provides access to a list of number resources in the database which have no valid POC data. A POC handle is marked invalid by ARIN staff when the POC has not

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Valdis . Kletnieks
On Thu, 07 Oct 2010 14:16:00 -, Sven Olaf Kamphuis said: you just give contacts for the passwords with which you have received a new one. each potential person that can send email to your email address, gets a unique password from you. You missed the point. How does

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Nick Hilliard
On 07/10/2010 13:10, Sven Olaf Kamphuis wrote: You know what, why don't we simply turn the smtp servers -off- This is an excellent idea. I invite you to do everyone a favour and turn yours off first. Nick

RE: reachability problems Europe-US?

2010-10-07 Thread John van Oppen
Global crossing is having major issues (since yesterday actually) in Seattle. Every path I see to dfn.de is via gblx and Microsoft hosts most of those sites out of the seattle area so they may be seeing the same issue. Based on what we can see gblx has a broken port-channel or something

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Tim Franklin
If i have to wait for 20 minutes for an email, i've started skype already.. You know what, why don't we simply turn the smtp servers -off- and use skype and msn for everything... saves electricity :P By that argument, why don't we turn off the Internet and use SMS for everything? It may be

Re: reachability problems Europe-US?

2010-10-07 Thread Heath Jones
... random traffic (into) their network via our transit link gets black-holed. So for the same source destination, sometimes it works, sometimes it doesn't?

Amazon - Flexible Payments Service (Amazon FPS)

2010-10-07 Thread Ryan Finnesey
Would someone from Amazon mind contacting me off-list. I have some questions on the best way to pass traffic to Flexible Payments Service (Amazon FPS) and my e-mails to the contacts within peeringdb.com have gone unanswered. Cheers Ryan

Re: reachability problems Europe-US?

2010-10-07 Thread Heath Jones
It seemed from the symptoms OP was seeing, that Qwest was the issue. Has GLBX reported to you that they are having a fault? If not, perhaps try tagging your exported routes to GLBX with 8010 as per this: http://onesc.net/communities/as3549/ On 7 October 2010 16:59, John van Oppen

RE: reachability problems Europe-US?

2010-10-07 Thread John van Oppen
I know for certain it was gblx, noc confirmed, we saw this to multiple destinations all with the outbound towards gblx (not just DFN). We are on the same GBLX pop the sites they are talking about are connected to (westin) and almost every path I see back to dfn (from seven upstreams in

RE: reachability problems Europe-US?

2010-10-07 Thread John van Oppen
It looked like a broken aggregated Ethernet bundle or something similar... Most annoying was that the issue moved around a bit, over about five hours all the broken test IPs we had started working again and then other destinations started failing.All was well when we turned down gblx.

Re: reachability problems Europe-US?

2010-10-07 Thread Thomas Schmid
Am 07.10.2010 18:46, schrieb John van Oppen: It looked like a broken aggregated Ethernet bundle or something similar... Most annoying was that the issue moved around a bit, over about five hours all the broken test IPs we had started working again and then other destinations started

RE: P2P link over STM-1

2010-10-07 Thread Welch, Bryan
I politely suggest a call into your Cisco account team so they can help you spec the equipment you require. Otherwise a quick google for Cisco+OC-48 would help you out tremendously. Bryan -Original Message- From: Peter Rudasingwa [mailto:peter.rudasin...@altechstream.rw] Sent:

Re: reachability problems Europe-US?

2010-10-07 Thread Richard A Steenbergen
On Thu, Oct 07, 2010 at 07:12:33PM +0200, Thomas Schmid wrote: yes, I can confirm that situation is back to normal now after we re-enabled the GBLX session. I heared from others that it was again a broken LSP problem in GBLX (unconfirmed :) ) Global Crossing recently started deploying

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Sven Olaf Kamphuis
When was email *ever* expected to be real-time? If you need real time, use IM (the clue is in the I), or pick up the phone. if you simply run the smtpd on port 25 of the little boxy thing with the blinking lights and the big shiney apple on it on your desk (which has for most applications

Re: P2P link over STM-1

2010-10-07 Thread Carlos Martinez-Cagnazzo
As said above, STM-1s are by their very nature point to point links. You just need an STM-1 interface on your side and another on the customer side. Which one will depend on the router models you will be using. Also, as said above, you will need to engage the help of your local Cisco partner for

RE: P2P link over STM-1

2010-10-07 Thread Michael K. Smith - Adhost
-Original Message- From: Peter Rudasingwa [mailto:peter.rudasin...@altechstream.rw] Sent: Thursday, October 07, 2010 1:24 AM To: nanog@nanog.org Subject: P2P link over STM-1 I have clients who want a P2P link over STM-1. How can I achieve this? What kind of equipment do I need.

Re: Facebook down!! Alert!

2010-10-07 Thread Jeff Harper
- Original Message - From: Bret Clark bcl...@spectraaccess.com I've always looked at the nanog list representing issues up to layer 4 of the OSI model; mostly layer 3/4. Maybe a new mailing list could be made called the North American Network Applications Group (nanag)...there might

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Leen Besselink
On 10/07/2010 04:16 PM, Sven Olaf Kamphuis wrote: you just give contacts for the passwords with which you have received a new one. Hi Sven/others, This very much sounds like TMDA: http://tmda.net/ http://en.wikipedia.org/wiki/Tagged_Message_Delivery_Agent Where by each person that needs to

Re: New hijacking - Done via via good old-fashioned Identity Theft

2010-10-07 Thread Ben McGinnes
On 8/10/10 10:00 AM, Leen Besselink wrote: k...@domain.tld for when you have a personal domain key-u...@domain.tld for when you have a server which understand address extensions Actually I think it's user+...@domain.tld for the second one. At least that's what I've seen for Postfix. Not so

Yahoo! security contact needed

2010-10-07 Thread Mike
Greetings, I need to get a hold of Yahoo! security and the online submission form doesn't seem to work for me. Anyone got a good contact? Thank you.