Re: Seeking contact with Russian Lawful Intercept (SORM) implementation experience

2021-09-10 Thread Arnold Nipper
On 09.09.2021 23:36, Jon Boone wrote: > Hi folks, > >   I’m looking for a contact who has experience with implementing Russian > SORM-[2,3] compliance infrastructures. > >   I recognize this may be the NOG forum to ask in. — if there is a more > appropriate one, please let me know. > There's a

Re: Squat space is now being advertised by AS 749 (DoD Network Information Center)

2021-09-10 Thread Paul Ferguson
Both articles are base don Doug Madory's research: https://www.kentik.com/blog/wait-did-as8003-just-disappear/ Cheers, - ferg On 9/10/21 5:26 PM, Daniel Lacey wrote: Just saw an article in the Washington Post explaining what went on… It was a follow up to the Apr 24 and 26 articles… I don

Re: Squat space is now being advertised by AS 749 (DoD Network Information Center)

2021-09-10 Thread Daniel Lacey
Just saw an article in the Washington Post explaining what went on… It was a follow up to the Apr 24 and 26 articles… I don’t have a link without a subscription…. Basically, unused IPv4 addresses from DOD were being transferred to Global Resource Systems. It was transferred back today.This is

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Eric Kuhnke
Ideally being your own customer owned cable modem that meets specs (Comcast does allow this in some regions) that will function as a layer 2 bridge. On Fri, Sep 10, 2021, 1:46 PM Owen DeLong wrote: > First thing I do with any cable modem is convert it to bridge mode. > > The fewer “smarts” in th

Squat space is now being advertised by AS 749 (DoD Network Information Center)

2021-09-10 Thread Compton, Rich A
Hi, this week it looks like the DoD owned squat space that was previously advertised by AS 8008 (a shadow company called Global Resource Systems, see https://apnews.com/article/technology-business-government-and-politics-b26ab809d1e9fdb53314f56299399949) is now being advertised by AS 749 (DoD Ne

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
On 2021-09-10 18:27, Owen DeLong wrote: On Sep 10, 2021, at 01:39 , Jeroen Massar wrote: On 20210909, at 21:55, Owen DeLong via NANOG wrote: [..] Awful lot of red spots even in the top 100. Hell, even amazon.com isn't IPv6 yet. And the long tail is going to be the death of a thousand

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Warren Kumari
On Fri, Sep 10, 2021 at 4:21 PM Baldur Norddahl wrote: > A nearby datacenter once lost power delayed because someone hit the switch > to transfer from city power to generator power and then failed to notice. > The power went out the day after when there was no fuel left. > :-) A story, told to

Re: IPv6 woes - RFC

2021-09-10 Thread John Levine
It appears that Owen DeLong via NANOG said: >This is my point… That is why I think an announcement of “On X date, >we will begin charging extra for IPv4 services and define Internet Access >to be IPv6” by a couple of the larger eyeball ISPs would light a pretty >big fire under those laggards. Ind

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Baldur Norddahl
A nearby datacenter once lost power delayed because someone hit the switch to transfer from city power to generator power and then failed to notice. The power went out the day after when there was no fuel left. On Fri, Sep 10, 2021 at 9:24 PM Matthew Huff wrote: > Since we are telling power horr

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Warren Kumari
On Fri, Sep 10, 2021 at 2:52 PM Christopher Morrow wrote: > > > On Fri, Sep 10, 2021 at 1:49 PM Matthew Huff wrote: > >> Reminds me of something that happened about 25 years ago when an >> elementary school visited our data center of the insurance company where I >> worked. One of our operators

Re: Voice Middleware

2021-09-10 Thread james jones
Owen, Do you mean this https://www.voip-info.org/asterisk-how-to-connect-to-metaswitch/? I am not sure that is what he is looking for, but it could be. It has been a while for me as well :) Mike, Could you give a little more context in what you are trying to do? Are you looking for something tha

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Mikael Abrahamsson via NANOG
On Fri, 10 Sep 2021, Sean Donelan wrote: 1. The “Emergency Power Off” button did not have a protective cover at the time of the shutdown or the following WSP investigation. Aka "molly-guard". https://en.wiktionary.org/wiki/molly-guard -- Mikael Abrahamssonemail: swm...@swm.pp.se

RE: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Matthew Huff
Since we are telling power horror stories… How about the call from the night operator that arrived at 10:00pm asking “Is there any reason there is no power in the data center?” Turns out someone had plugged in a new high end workgroup laser printer to the outside wall of the datacenter. The po

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Chris Kane
True EPO story; maintenance crew carrying new drywall into the data center backed into the EPO that didn't have a cover on it. One of the most eerie sounds in networking...a completely silent data center. -chris On Fri, Sep 10, 2021 at 2:48 PM Christopher Morrow wrote: > > > On Fri, Sep 10, 202

Re: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Christopher Morrow
On Fri, Sep 10, 2021 at 1:49 PM Matthew Huff wrote: > Reminds me of something that happened about 25 years ago when an > elementary school visited our data center of the insurance company where I > worked. One of our operators strategically positioned himself between the > kids and the mainframe,

Weekly Routing Table Report

2021-09-10 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-st...@li

RE: Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Matthew Huff
Reminds me of something that happened about 25 years ago when an elementary school visited our data center of the insurance company where I worked. One of our operators strategically positioned himself between the kids and the mainframe, leaned back and hit it's EPO button. Matthew Huff | Direc

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Owen DeLong via NANOG
First thing I do with any cable modem is convert it to bridge mode. The fewer “smarts” in the cable modem doing odd things to my traffic, the better. Owen > On Sep 10, 2021, at 10:40 , Eric Kuhnke wrote: > > I know this is not a solution to your problem, but I have found myself more > often

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Eric Kuhnke
I know this is not a solution to your problem, but I have found myself more often running the public interface of openvpn systems on port 443. Any sufficiently advanced DPI setup will be able to tell that it's not quite normal https traffic. But 99% of the time it seems to serve the purpose of def

Never push the Big Red Button (New York City subway failure)

2021-09-10 Thread Sean Donelan
NEW YORK CITY TRANSIT RAIL CONTROL CENTER POWER OUTAGE ISSUE ON AUGUST 29, 2021 Key Findings September 8, 2021 https://www.governor.ny.gov/sites/default/files/2021-09/WSP_Key_Findings_Summary-for_release.pdf Key Findings [...] 3. Based on the electrical equipment log readings and the manufactu

Re: Voice Middleware

2021-09-10 Thread Owen DeLong via NANOG
I don’t know the current state, but I believe Asterisk was going down that road for a while. Owen > On Sep 10, 2021, at 05:26 , Mike Hammett wrote: > > Before we build something from scratch, are there platforms that do the heavy > lifting of talking to the Metaswitch API, Peerless's API, va

Re: IPv6 woes - RFC

2021-09-10 Thread Owen DeLong via NANOG
> On Sep 10, 2021, at 01:39 , Jeroen Massar wrote: > > > >> On 20210909, at 21:55, Owen DeLong via NANOG wrote: >>> [..] >>> Awful lot of red spots even in the top 100. Hell, even amazon.com >>> isn't IPv6 yet. And the long tail is going to be the death of a thousand >>> cuts for the call

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Dovid Bender
Could it be related to the many FortiNet devices being exploited? About 45k credentials were dumped two days ago. Many are still working. On Fri, Sep 10, 2021 at 10:56 AM Chris Boyd wrote: > > > > On Sep 10, 2021, at 9:31 AM, Jason Kuehl > wrote: > > > > For whatever reason Comcast Xfinity is

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Jason Kuehl
This is an SSL VPN that is being blocked. This is what failure looks like. Curl is the same. Once we disable the Xfi Advanced Security everyone can connect. [image: image.png] On Fri, Sep 10, 2021 at 11:01 AM Jim Popovitch via NANOG wrote: > On Fri, 2021-09-10 at 10:31 -0400, Jason Kuehl wrot

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Jason Kuehl
By default, the cable modems from Comcast have Xfi Advanced security-enabled which is a layer 3 URL blocker. We can access our URL via that IP fine, but the URL fails. The fix we're telling users is to 1st allow to unblock the URL in the APP, then disable the service. Which does fix the issue. I

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Jim Popovitch via NANOG
On Fri, 2021-09-10 at 10:31 -0400, Jason Kuehl wrote: > For whatever reason Comcast Xfinity is blocking my VPN URL. Not certain that this applies, but Concast Advanced Security (setup in your Comcast gateway) only allows outbound VPN connections to UDP ports 500, 4500, and 62515 and TCP port 1723

Re: Xfi Advances Security (comcast)

2021-09-10 Thread Chris Boyd
> On Sep 10, 2021, at 9:31 AM, Jason Kuehl wrote: > > For whatever reason Comcast Xfinity is blocking my VPN URL. I've started the > process to unblock, and I'm trying to get a hold of their security team to > resolve this. I've been bounced around all morning. > > Does anyone have a conta

Xfi Advances Security (comcast)

2021-09-10 Thread Jason Kuehl
For whatever reason Comcast Xfinity is blocking my VPN URL. I've started the process to unblock, and I'm trying to get a hold of their security team to resolve this. I've been bounced around all morning. Does anyone have a contact at Comcast that can whitelist a URL or get me to a team that can un

Voice Middleware

2021-09-10 Thread Mike Hammett
Before we build something from scratch, are there platforms that do the heavy lifting of talking to the Metaswitch API, Peerless's API, various LSR APIs, etc.? I mean this for provisioning purposes. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX

Seeking contact with Russian Lawful Intercept (SORM) implementation experience

2021-09-10 Thread Jon Boone
Hi folks,   I’m looking for a contact who has experience with implementing Russian SORM-[2,3] compliance infrastructures.   I recognize this may be the NOG forum to ask in. — if there is a more appropriate one, please let me know. — jb

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
> On 20210909, at 21:55, Owen DeLong via NANOG wrote: >> [..] >> Awful lot of red spots even in the top 100. Hell, even amazon.com >> isn't IPv6 yet. And the long tail is going to be the death of a thousand >> cuts for the call center unless you have a way to deal with those sites. > > This

Re: IPv6 woes - RFC

2021-09-10 Thread Mark Andrews
> On 10 Sep 2021, at 17:21, Bjørn Mork wrote: > > Owen DeLong via NANOG writes: > >> The addresses aren’t the major cost of providing IPv4 services. >> >> CGN boxes, support calls, increasing size of routing table = buying new >> routers, etc. > > You're counting dual-stack costs as if IP

Re: IPv6 woes - RFC

2021-09-10 Thread Bjørn Mork
Owen DeLong via NANOG writes: > The addresses aren’t the major cost of providing IPv4 services. > > CGN boxes, support calls, increasing size of routing table = buying new > routers, etc. You're counting dual-stack costs as if IPv4 was the optional protocol. That's a fantasy world. Time to get