AAAA on various websites, but they all forgot to enable them on their nameservers....

2011-06-08 Thread Jeroen Massar
It is really nice that folks where able to put records on their websites for only 24 hours, but they forgot to put in the glue on their nameservers. As such, for the folks testing IPv6-only, a lot of sites will fail unless they use a recursor that does the IPv4 for them. The root is there,

Re: IPv6 day fun is beginning!

2011-06-08 Thread Jeroen Massar
On 2011-Jun-08 13:40, Jamie Bowden wrote: Thanks to HE's tunnel broker service, I've got fully functional dual stack at home (well, mostly, like most folks, VZ gives me a single address and I live behind that with NATv4, but otherwise, I loves me some FiOS) and yesterday went by for me without

Re: IPv6 day fun is beginning!

2011-06-08 Thread Jeroen Massar
On 2011-Jun-08 16:09, Owen DeLong wrote: [..] World IPv6 day is today. It started at UTC June 8 and goes to just before UTC June 9. As I write this, there are approximately 10 hours remaining in world IPv6 day. I think it is quite obvious that nothing serious broke anywhere ;) (read:

Re: www.nist.gov over v6 trouble Was: Microsoft's participation in World IPv6 day

2011-06-08 Thread Jeroen Massar
On 2011-Jun-08 17:26, STARNES, CURTIS wrote: Typical long trip via a sixxs.net tunnel. Unlike Hurricane Electric (tunnelbroker.net), Sixxs has no US peering that I know of so everything has to hit overseas before returning back. psst.. there is no such thing as SixXS peering. Each PoP

Re: Cogent HE

2011-06-09 Thread Jeroen Massar
On 2011-Jun-09 10:39, Saku Ytti wrote: On (2011-06-09 00:55 -0700), Owen DeLong wrote: To be an IPv6 TIer 1, one has to peer with other IPv6 Tier 1s. HE has aggressively tried to improve the situation through promiscuous peering in every way possible. If you are interested in peering with HE

Re: Cogent HE

2011-06-09 Thread Jeroen Massar
On 2011-Jun-10 02:18, Jimmy Hess wrote: On Thu, Jun 9, 2011 at 6:49 PM, Richard A Steenbergen r...@e-gerbil.net wrote: On Thu, Jun 09, 2011 at 06:26:01PM -0500, Jimmy Hess wrote: You seem to have missed it, so I will say again: IPv6 is not IPv4. First you seem to have missed the point

Anybody can participate in the IETF (Was: Why is IPv6 broken?)

2011-07-10 Thread Jeroen Massar
On 2011-07-10 17:56 , David Miller wrote: [..] +1 The lack of will on the part of the IETF to attract input from and involve operators in their processes (which I would posit is a critical element in the process). Eh ANYBODY, including you, can sign up to the IETF mailing lists and

Can somebody stop nanog@nanog.org from forwarding spam, kthx!

2011-07-12 Thread Jeroen Massar
I am fairly sure that the fake Western Union message and various other spams that are dripping through are from real subscribers... Also, as somebody decided to drop mailman and replace it by 'bulk_mailer v1.13' maybe one should start fixing that software also to add the List-* headers aka RF2369

Re: NANOG Move - Moved back

2011-07-12 Thread Jeroen Massar
On 2011-07-12 15:59 , Michael K. Smith - Adhost wrote: Hello All: We're back on the old configuration for now. I will send an update later this afternoon once I speak with AMS about the issues we experienced over night. What is the reason for dropping mailman btw? The IETF, which is also

Re: OT: Given what you know now, if you were 21 again...

2011-07-13 Thread Jeroen Massar
On 2011-07-13 23:08 , Larry Stites wrote: Given what you know now, if you were 21 and just starting into networking / communications industry which areas of study or specialty would you prioritize? Google. Greets, Jeroen

Re: best practices for management nets in IPv6

2011-07-23 Thread Jeroen Massar
On 2011-07-23 17:44 , Paul Ebersman wrote: ryan We keep running into problem with our IPv6 roll out. I just ryan confirmed today that Exchange does not fully support IPv6 [...] ryan Yes sorry Exchange 2010 - OCS, Lync, Exchange UM - these require ryan IPv4 It's a hack (but all ipv6

Re: dynamic or static IPv6 prefixes to residential customers

2011-07-26 Thread Jeroen Massar
On 2011-07-26 16:58 , JORDI PALET MARTINEZ wrote: Hi all, I will like to know, from those deploying IPv6 services to residential customers, if you are planning to provide static or dynamic IPv6 prefixes. Just to be clear, I'm for static prefix delegation to residential customers, however

Re: dynamic or static IPv6 prefixes to residential customers

2011-07-27 Thread Jeroen Massar
On 2011-07-27 03:25 , Scott Weeks wrote: matt.addi...@lists.evilgeni.us wrote: - [..] 1: http://panopticlick.eff.org/ All you need to do with what that site says is write a sh script that deletes and then creates the same user. And there you sprung into a trap.

Re: dynamic or static IPv6 prefixes to residential customers

2011-07-27 Thread Jeroen Massar
On 2011-07-27 20:27 , Scott Weeks wrote: --- jer...@unfix.org wrote: From: Jeroen Massar jer...@unfix.org On 2011-07-27 03:25 , Scott Weeks wrote: matt.addi...@lists.evilgeni.us wrote: - [..] 1: http://panopticlick.eff.org/ All you need to do with what

Re: v4/v6 dns thoughts?

2011-08-09 Thread Jeroen Massar
On 2011-08-09 20:47 , Joe Pruett wrote: as i'm rolling v6 into my world, i'm not sure which way to go with reverse dns conventions. for forward i'm doing things like: foo.example.coma1.1.1.1 foo.example.com1000::1.1.1.1 foo.v4.example.coma1.1.1.1

Re: IPv6 end user addressing

2011-08-10 Thread Jeroen Massar
On 2011-08-10 15:02 , Owen DeLong wrote: [..] Why do I want my appliance network's multicast packets getting tossed around on the guest wireless? Even wikipedia knows the answer to that: http://en.wikipedia.org/wiki/IGMP_snooping which is the first hit for IGMP snooping, which is generally a

Re: personal backup

2011-08-13 Thread Jeroen Massar
On 2011-08-13 16:53 , John Levine wrote: Backups remain a tricky problem to get right. Yeah. I've been using external USB terabyte disks, which work OK but are irritatingly flaky. I keep thinking that this is what tape is for, but every time I look at AIT or LTO tapes and jukeboxes, they

Re: Disappointing ARIN - A great advertisement for the USA ?

2011-09-12 Thread Jeroen Massar
On 2011-09-12 17:40 , Always Learning wrote: Dear person who is to scared to setup a regular email account in his own full name. [..] The Internet was created in North America. Many people around the world would appreciate your help in getting ARIN to revert to normal WHOIS displays. ARIN

Opta revokes Diginotar TTP license (Was: Microsoft deems all DigiNotar certificates untrustworthy, releases)

2011-09-14 Thread Jeroen Massar
And to end this thread as this effectively ends Diginotar troubles for the Interwebz: Dutch official statement: http://www.opta.nl/nl/actueel/alle-publicaties/publicatie/?id=3469 English Summary OPTA revokes Diginotar License as TTP:

Re: Network Research

2013-05-25 Thread Jeroen Massar
On 2013-05-25 14:09, James Bensley wrote: Hello everyone, I am performing some research on networking at present and want the input of the community and industry at large. I have created a small on-line survey and would be very grateful to anyone that could give 3 minutes to fill it out.

PGP/SSL/TLS really as secure as one thinks?

2013-06-07 Thread Jeroen Massar
On 2013-06-07 06:50, Dan White wrote: [..] A nice 'it is Friday' kind of thought OpenPGP and other end-to-end protocols protect against all nefarious actors, including state entities. If you can't trust the entities where your data is flowing through because you are unsure if and where

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 13:01, david peahi wrote: Apologies for making what could be construed as an off topic, political comment, but doesn't everyone in the USA know by now that the PRC represents a dagger aimed at the economic and national security of America? A military invasion in slow motion as it

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 14:28, david peahi wrote: Last I heard NANOG stands for North American Network Operators Group. Anti-American comments are not welcome here.. (IMHO there was nothing 'anti-american' about my statement, though I guess it completely depends on what the definition of that would be;

Re: gTLDs opened up

2013-06-19 Thread Jeroen Massar
On 2013-06-19 12:14, Owen DeLong wrote: You are, of course, free to criticize as you wish, but ideally, you should at least direct your criticism at those responsible. Indeed, you should point out the simple fact that anybody with a budget can simply buy their time to sound like they belong

Re: SixXS Contact

2013-07-01 Thread Jeroen Massar
[several replies in one (hence cc's) to not clutter the list with non-really-nanog stuff, but it kinda deserves a reply, reply-to set to where these things should be going in the first place] [TLDR: contact = i...@sixxs.net, mail queue is long, human time is limited, if you have lots of users

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access right? :) Anybody not putting them behind a properly restricted firewall and/or VLAN is asking

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 17:54 , Jamie Bowden wrote: From: Jeroen Massar [mailto:jer...@massar.ch] On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access

Re: iOS 7 update traffic

2013-09-23 Thread Jeroen Massar
On 2013-09-23 15:41 , Glen Kent wrote: BTW Linux distributions are available to download via bittorrent, I am very sure that you will be happy to see your customer's UPSTREAM links filled with that traffic... next to you having a shiny CDN and then having to do traffic to ISPs who do not have

Re: Automatic abuse reports

2013-11-12 Thread Jeroen Massar
On 2013-11-12 16:58, Jonas Björklund wrote: Hello, We got often abuse reports on hosts that has been involved in DDOS attacks. We contact the owner of the host help them fix the problem. I also would like to start send these abuse report to the ISP of the source. Are there any

Re: IPv6 /48 advertisements

2013-12-18 Thread Jeroen Massar
On 2013-12-18 17:11 , Cliff Bowles wrote: I accidentally sent this to nanog-request yesterday. I could use some feedback from anyone that can help, please. Question: will carriers accept IPv6 advertisements smaller than /48? Our org was approved a /36 based on number of locations. In GRH

Re: Help me make sense of these traceroutes please

2013-12-24 Thread Jeroen Massar
On 2013-12-25 00:16, Sam Moats wrote: Hello Nanog community, I would like to enlist your help with understanding this latency I'm seeing. You are likely seeing the effects of asymmetric routing. [..] Tracing route to xxx.yyy.ie [193.1.x.x] www.heanet.ie by chance? :) Though you could use

Deadline TOMORROW to Apply to Represent the Technical Community at the Brazil Meeting and in 1Net

2014-01-09 Thread Jeroen Massar
For everybody who wants to dabble in politics that people on this list actually care about ;) Greets, Jeroen Original Message Subject:Deadline TOMORROW to Apply to Represent the Technical Community at the Brazil Meeting and in 1Net Date: Thu, 09 Jan 2014 16:04:01

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Jeroen Massar
On 2014-01-16 23:11, Nick Hilliard wrote: On 16/01/2014 21:22, Jon Lewis wrote: Also, at least of the ones I've dealt with, there is no verification of records as they're entered. on the RIPE IRRDB, there is validation, so you can't just go in and register route: objects for someone else's

Re: 59.229.189.0/24

2014-03-24 Thread Jeroen Massar
On 2014-03-24 13:49, greg whynott wrote: [..] 4 1 ms 1 ms 1 ms 58.229.66.9 5 2 ms 1 ms 1 ms 58.229.66.105 6 7 ms 5 ms 3 ms 58.229.119.149 Seems you mean 58 instead of 59. Greets, Jeroen

Re: nanong list spam filtering

2014-04-24 Thread Jeroen Massar
On 2014-04-24 10:29 , Michael DeMan wrote: Hi All, Sorry being a bit off-topic and having a boring subject, but we really should clean up whatever has been going on with so much spam hitting this mailing list. NO - I am complaining about people who post things I disagree with or on

Re: The FCC is planning new net neutrality rules. And they could enshrine pay-for-play. - The Washington Post

2014-04-25 Thread Jeroen Massar
On 2014-04-25 15:23 , Patrick W. Gilmore wrote: [..] While it is probably true that the gov't had a hand in the fact I have exactly one BB provider at my home, I am not even closed to convinced that a purely open market would not have resulted in the same problem. But thanx for pointing out an

Re: oss netflow collector/trending/analysis

2014-05-02 Thread Jeroen Massar
On 2014-05-02 16:36, Matthew Galgoci wrote: [..] Is there anything else I've missed? A few folks here really seem to like nfsen/nfdump. For OSS that is pretty much it that really matters (maybe you could add Argus if you really want though). For a long long list, check out Simon Leinen's site:

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:10, Randy Bush wrote: so how to folk protect yet access ipmi? it is pretty vulnerable, so 99% of the time i want it blocked off. but that other 1%, i want kvm console, remote media, and dim sum. currently, i just block the ip address chunk into which i put ipmi at the

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:23, Paul S. wrote: [..] On most ATEN chip based BMC boards from Supermicro, it includes a UI to iptables that works in the same way. You could put it on a public net, allow your stuff and DROP 0.0.0.0/0. But unless you have servers with those, I think the best way to go is

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 19:32, Nikolay Shopik wrote: On 02/06/14 20:56, Christopher Morrow wrote: so... as per usual: 1) embedded devices suck rocks 2) no updates or sanity expected anytime soon in same 3) protect yourself, or suffer the consequences seems normal. So I wonder why

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 21:54, Brian Rak wrote: On 6/2/2014 3:47 PM, shawn wilson wrote: On Mon, Jun 2, 2014 at 3:19 PM, Nikolay Shopik sho...@inblock.ru wrote: Java only used for mouting images. KVM is transfered via VNC protocol iirc. They're not re-inventing the wheel, but I think KVM is

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-17 22:36, Grzegorz Janoszka wrote: On 2014-06-17 22:13, David Conrad wrote: On Jun 17, 2014, at 12:55 PM, Grzegorz Janoszka grzeg...@janoszka.pl wrote: There are still applications that break with subnet smaller than /64, so all VPS providers probably have to use /64 addressing.

Re: Ars Technica on IPv4 exhaustion

2014-06-17 Thread Jeroen Massar
On 2014-06-17 23:48, Jared Mauch wrote: On Jun 17, 2014, at 5:41 PM, Lee Howard l...@asgard.org wrote: [..] Can't tech news sites *please* run dual stack while they're spouting end-of-IPv4 stories? wishful thinking=on I would love to see a few more properties do IPv6 by default, such as

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-18 00:02, Matthew Petach wrote: [..] I tried to configure my FreeBSD box at home to use a /120 subnet mask. It consistently crashed with a kernel panic. Where is the bug report? I am fairly confident that that really should not be an issue, with the BSD stack being one of the

Re: Applications that break when not using /64

2014-06-18 Thread Jeroen Massar
On 2014-06-18 12:31, Grzegorz Janoszka wrote: On 17/06/14 23:13 , Jeroen Massar wrote: Thus, can you please identify these applications so that we can hammer on the developers of those applications and fix that problem? I haven't done extensive testing. I have just tried to divide a /64

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 16:55, Ryan Shea wrote: Just one man's experience, but my YouTube performance over my Hurricane Electric tunnel has been strikingly poor lately Instead of saying that something is poor, you might want to do the operational/technical[1] thing and include things like: - IPv4

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 17:28, Ryan Shea wrote: I was attempting to determine the lowest-time-cost path to happy wife. Does your wife care it is IPv4 or IPv6 or just funny cat videos? I think your answer should be clear from that perspective. As somebody eager to post on NANOG though one would think it

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 18:21, Ryan Shea wrote: IRC is a good suggestion, thanks. They'll likely be helpful. I see no indication of any throttling from my ISP - I can blast data at full speed to my home from my server and work (with native v6 connections). Does that path between your $home and

Re: Saying goodnight to my GSR

2014-09-20 Thread Jeroen Massar
On 2014-09-20 16:18, Matthew Crocker wrote: [..] IOS (tm) GS Software (GSR-P-M), Version 12.0(30)S3, RELEASE SOFTWARE (fc2) [..] gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Thank you for finally taking a vulnerable system of the Internet! Greets, Jeroen

HTTP 302 with multiple Location: headers?

2014-11-03 Thread Jeroen Massar
Ignoring the fact that Akamai IPv6 is broken on random nodes, thus you get either a working response or not from the same IP as some of the nodes are borked and thus just hang the connection.. (could be pmtu, hard to say without peeking inside the cluster) see amongst others:

Re: v6 cdn problems

2014-11-08 Thread Jeroen Massar
On 2014-11-08 23:55, Pete Carah wrote: [..] Symptom with akamai is that it connects immediately then data transfer times out. With google, symptom involves both slow connection, and data transfer timing out. See amongst others: https://forums.he.net/index.php?topic=3281.0

Re: v6 cdn problems

2014-11-09 Thread Jeroen Massar
On 2014-11-09 23:00, Christopher Morrow wrote: On Sat, Nov 8, 2014 at 6:10 PM, Jeroen Massar jer...@massar.ch wrote: Google does not seem to be home. Note that you skipped the rest: Google does not seem to be home. They used to have a handy i...@google.com address, but alas, that does

Re: v6 cdn problems

2014-11-10 Thread Jeroen Massar
On 2014-11-10 09:10, Christopher Morrow wrote: On Mon, Nov 10, 2014 at 12:51 AM, Jeroen Massar jer...@massar.ch wrote: There used to be a handy ipv6@google address for reporting things. This nowadays bounces. yes, it changed to noc@ I think. Thus, in case of an IPv6 issue, contacting n

Fwd: [v6ops] IPv6 MTU Flow-label.... (related to draft-v6ops-pmtud-ecmp-problem-01)

2014-11-10 Thread Jeroen Massar
MTU Flow-label (related to draft-v6ops-pmtud-ecmp-problem-01) Date: Mon, 10 Nov 2014 11:31:52 +0100 From: Jeroen Massar jer...@massar.ch Organization: Massar To: i...@ietf.org, v6...@ietf.org Hola folks (and folks in BCC ;), With the recent Google and Akamai outages (latter still ongoing afaik

Re: Equinix Virginia - Ethernet OOB suggestions

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:20, Joe Greco wrote: Hey, VPN setup is not really a viable option (for us) in this scenario. Honestly, I'd prefer to just call it done already and have a VPN but due to certain restraints, we have to go down this route. Without explaining the restraints, this kinda boils

Re: I am about to inherit 26 miles of dark fiber. What do I do with it?

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:35, Rob Seastrom wrote: While short and to the point, what Fletcher said is likely to be the best advice in this thread. Getting someone on staff who understands *both* outside plant architecture and balance sheets... and can co-develop a business model that involves the

Re: FYI, Level 3 issues in Dallas

2014-11-19 Thread Jeroen Massar
On 2014-11-19 16:13, David Hubbard wrote: We have some customers unable to access their websites, seeing this on the way to them: What would be the source and destination? You got a nice routing loop there. Greets, Jeroen

Re: Google contact: apps vs IPv6 issue

2014-12-03 Thread Jeroen Massar
On 2014-12-03 17:57, Max Tulyev wrote: Hello! Could someone advice a good contact inside Google? n...@google.com is where this stuff has to go. They claim to read it (and mostly they do in time). I'm operating a IPv6 tunnel broker http://tb.netassist.ua/ Now there are a number of

Re: Comcast thinks it ok to install public wifi in your house

2014-12-10 Thread Jeroen Massar
On 2014-12-11 03:35, Jeroen van Aart wrote: Grear – a paralegal – and her daughter claim the Xfinity hotspot is an unauthorized intrusion into their private home, places a vast burden on electricity bills, opens them up to attacks by hackers, and degrades their bandwidth. LibertyGlobal

Re: Comcast thinks it ok to install public wifi in your house

2014-12-11 Thread Jeroen Massar
On 2014-12-11 19:12, valdis.kletni...@vt.edu wrote: On Thu, 11 Dec 2014 18:04:20 +, Livingood, Jason said: Right, so user name password + MAC address. As more devices support things like Passpoint, this will get more sophisticated. OK, so it *does* do .1x authentication with the

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 14:30, Song Li wrote: Hi everyone, I'm searching for a list of IXPS which contains the information of the ASN of the IXP. Some resources are good: https://prefix.pch.net/applications/ixpdir/?show_active_only=0sort=trafficorder=desc

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 15:45, Song Li wrote: 在 2014/12/22 22:26, Nick Hilliard 写道: On 22/12/2014 13:50, Jeroen Massar wrote: IXs themselves do not have ASNs, as they are Layer 2 providers. most modern IXPs will have an ASN for their route server, and possibly a separate asn for their mgmt

Re: merry xmas

2014-12-24 Thread Jeroen Massar
On 2014-12-24 19:27, Ken Chase wrote: (mtr|lft|traceroute) xmas.futile.net Welcome to the end of 2014. If you are going to do a silly traceroute thing that has been done thousands of times before, at least use this new fangled thing called: IPv6 Here is the Wikipedia page for you to get

Re: Fixing Google geolocation screwups

2015-04-08 Thread Jeroen Massar
On 2015-04-08 13:31, Max Tulyev wrote: We operate IPv6 tunnel broker tb.netassist.ua, so /48 from our /32 is spread all around the world. Google change geo of our WHOLE /32 from time to time to another cute random place ;) One time Google decided we are in IRAN and block a lot of content as

Re: AS112 contact

2019-03-26 Thread Jeroen Massar
On 2019-03-26 08:56, Elmar K. Bins wrote: > Hi guys, > > I hope this is only slightly off-topic... > > I'm looking for the correct address for AS112, 1...@root-servers.org > keeps bouncing whatever I try. > > If anybody can drop me a line...much appreciated. You can subscribe/post to:

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 11:31, Mark Tinka wrote: [..] > Across the 6-in-4 tunnel, the tested MTU is 1,232 for IPv6. IPv6 requires a minimum MTU of 1280. If you cannot transport it, then the transport (the tunnel in this case) needs to handle the fragmentation of packets of 1280 down to whatever does fit

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 20:13, Mark Tinka wrote: > > > On 3/Mar/19 18:05, Jeroen Massar wrote: > >> IPv6 requires a minimum MTU of 1280. >> >> If you cannot transport it, then the transport (the tunnel in this case) >> needs to handle the fragmentation of packets o

Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms

2019-03-08 Thread Jeroen Massar
On 2019-03-08 14:45, Brandon Martin wrote: > On 3/8/19 8:38 AM, Saku Ytti wrote: >> Hey, >> >>> now for UDP, I don't know yet how does things like QUIC can be handled >>> ... >> >> Unfortunately the magic answer you were hoping does not exist, what >> they do is they just send smaller

Re: any interesting/useful resources available to IPv6 only?

2019-05-07 Thread Jeroen Massar
On 2019-05-07 15:55, William Waites wrote: > On 05/03, Jeroen Massar wrote: >> >> IPv6 is not a darknet, you won't find something hidden and unique there. > > The Dancing Kame, surely. That Kame has been liberated and made available over IPv4 so long ago that the

Re: any interesting/useful resources available to IPv6 only?

2019-05-03 Thread Jeroen Massar
On 2019-05-03 17:14, Brian J. Murrell wrote: > Hi, > > I am trying to make a case (to old fuddy-duddies, which is why I even > need to actually make a case) for IPv6 for my own selfish reasons. :-) > > I wonder if anyone has any references to interesting/useful/otherwise > resources on are only

DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
Hi Folks, While in the US soon all Firefox users will *NOT* use your DNS Recursives configured using DHCP anymore (NXDOMAIN use-application-dns.net to avoid that[1]). Next to that, it seems some of the root operators are now creating instances in the same networks that offer these kind of

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
On 2019-09-18 12:24, Brian J. Murrell wrote: > On Wed, 2019-09-18 at 09:15 +0200, Jeroen Massar wrote: >> Hi Folks, > > Hi. > >> While in the US soon all Firefox users will *NOT* use your DNS >> Recursives configured using DHCP anymore >> (NXDOMAIN use

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 10:08, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 09:55:54AM +0200, > Jeroen Massar wrote > a message of 26 lines which said: > >>> (Because this canary domain contradicts DoH's goals, by allowing >>> the very party you don't trus

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 09:38, Stephane Bortzmeyer wrote: > On Mon, Sep 30, 2019 at 11:56:33PM -0400, > Brandon Martin wrote > a message of 10 lines which said: > >> It's use-application-dns.net. NXDOMAIN it, and Mozilla (at least) >> will go back to using your local DNS server list as per usual. > >

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
controlling the browser bad for the Internet. - Use a VPN if you do not trust your network provider. - Use Tor if you really want 'privacy'. On 2019-10-01 11:57, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 10:35:31AM +0200, > Jeroen Massar wrote > a message of 29 lines w

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 15:22, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 12:11:32PM +0200, > Jeroen Massar wrote > a message of 101 lines which said: > >> - Using a centralized/forced-upon DNS service (be that over DoT/DoH >> or even plain old Do53 > > Yes,

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 23:03, Damian Menscher wrote: > On Tue, Oct 1, 2019 at 1:22 PM Jeroen Massar <mailto:jer...@massar.ch>> wrote: > > On 2019-10-01 21:38, Damian Menscher wrote: > > > Could someone provide a reference of Google saying they'll change the >

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 21:38, Damian Menscher wrote: > Could someone provide a reference of Google saying they'll change the default > nameserver?  Without that, I think all of Jeroen's arguments fall apart? While I stated: >> Moving only your DNS to Cloudflare or Google does not solve the security >>

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
On 2021-06-02 15:47, Bjørn Mork wrote: Jeroen Massar via NANOG writes: For many organisations DNSSEC is 'scary' and a burden as it feels 'fragile' for them. For "many"? Can you name one that doesn't feel like that? Large organisations with 24/7 NOC teams where at least a few

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
> On 20210601, at 15:15, Moritz Müller via NANOG wrote: > > Hi, > > DANE for SMTP is not deployed on large scale. Together with researchers from > Seoul National University, Virginia Tech and the University of Twente, we > would like to understand which challenges operators face when

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
[ The kicker about DNSSEC is in the dnsviz links, enjoy ;) TLDR: As long as the very big providers don't demand DNSSEC / DANE, why bother as a small network (just, be prepared to deploy when it starts affecting spam scoring or your search rankings), but small networks do benefit unlike the

Re: The great Netflix vpn debacle! (geofeeds)

2021-08-31 Thread Jeroen Massar via NANOG
On 2021-09-01 01:13, Owen DeLong via NANOG wrote: You just broke 99% of the smart television sets in people’s homes, unfortunately. If only everybody would not get a separate box, be that a AppleTV, a Playstation, a XBox, Chromecast, ... or many other options. Fun part being that it is

Re: What is your preferred outage tracking service? (Hurricane Ida)

2021-08-29 Thread Jeroen Massar via NANOG
On 2021-08-29 23:29, Sean Donelan wrote: Netblocks is reporting connectivity in New Orleans LA is at 72% of normal as Hurricane Ida makes landfall. https://twitter.com/netblocks/status/1432038858460442625 There are per-incident things, like the outages mailing list and downdetector.com.  And

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
> On 20210909, at 21:55, Owen DeLong via NANOG wrote: >> [..] >> Awful lot of red spots even in the top 100. Hell, even amazon.com >> isn't IPv6 yet. And the long tail is going to be the death of a thousand >> cuts for the call center unless you have a way to deal with those sites. > > This

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
On 2021-09-10 18:27, Owen DeLong wrote: On Sep 10, 2021, at 01:39 , Jeroen Massar wrote: On 20210909, at 21:55, Owen DeLong via NANOG wrote: [..] Awful lot of red spots even in the top 100. Hell, even amazon.com isn't IPv6 yet. And the long tail is going to be the death of a thousand

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
> On 20210904, at 22:26, Grant Taylor via NANOG wrote: > > Hi, > > Does anyone have any recommendation for a viable IPv6 tunnel broker / > provider in the U.S.A. /other/ /than/ Hurricane Electric? SixXS shut down 4 years ago, to get ISPs to move their butts... as long as there are tunnels,

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
On 2021-09-04 23:02, Ryan Hamel wrote: Jeroen, > You people keep on giving money to ISPs that are not providing the service you want. Not everyone has the luxury of picking their ISP, But this list is NANOG Network Operators. We are the ISPs and the common consumer doesn't know

Re: IPv6 woes - RFC

2021-09-16 Thread Jeroen Massar via NANOG
> On 20210916, at 11:15, John Curran wrote: > > On 14 Sep 2021, at 3:46 AM, Eliot Lear wrote: >> …. >> There is no evidence that any other design choices on the table at the time >> would have gotten us transitioned any faster, and a lot of evidence and >> analysis that the exact opposite

Re: Geolocation accuracy

2021-10-19 Thread Jeroen Massar via NANOG
On 2021-10-19 13:39, Hank Nussbacher wrote: Can anyone recommend a geo-location service with high city accuracy? Maxmind, for most countries (broadband, which does move) is below 50% accuracy (they claim 68% accuracy for USA cities):

Re: Admin for .tk (not a spam/abuse complaint!)

2021-09-29 Thread Jeroen Massar via NANOG
On 2021-09-29 01:03, Tim Harman via NANOG wrote: [..] {11:58}~ ➭ dig @194.0.41.1 test.tk ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> @194.0.41.1 test.tk ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached A traceroute with a source IP would be sooo

Re: FORT monitoring/visibility

2021-10-27 Thread Jeroen Massar via NANOG
> On 20211027, at 09:26, Lukas Tribus wrote: > > On Wed, 27 Oct 2021 at 08:47, Mark Tinka wrote: >> >> On 10/27/21 01:58, Randy Bush wrote: >>> my old DRL RP instances produce MRTG graphs etc of the CA >>> fetching side, though nothing on the rpki-rtr side. >> >> Randy, I actually have an

Re: ASN in use, but no whois data?

2022-02-25 Thread Jeroen Massar via NANOG
> On 20220225, at 23:45, Matt Harris wrote: > > Hey folks, > I'm looking at an ASN 394183 and I can't find any whois or other contact data. First stop for info: bgp.tools! https://bgp.tools/as/394183#whois But yes, as others commented, looks like a ARIN-expired ASN... as long as one pay

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
Hi Dan, Hope the rest of the world is treating you decently! There are a lot of bits and bobs that one has to get right for mail to flow, amongst which: - IP -> PTR lookup -> that hostname lookup, and match to IP again (https://en.wikipedia.org/wiki/Forward-confirmed_reverse_DNS) - SPF -

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
> On 3 Apr 2022, at 00:29, Michael Thomas wrote: > > > On 4/2/22 3:23 PM, Jeroen Massar via NANOG wrote: >> Hi Dan, >> >> Hope the rest of the world is treating you decently! >> >> There are a lot of bits and bobs that one has to get right for mai

Re: Correcting Netflix ipv6 geolocation

2023-10-19 Thread Jeroen Massar via NANOG
> On 19 Oct 2023, at 02:09, Justin Kilpatrick wrote: > > Our ipv6 subnet 2602::FBAD::/40 is You likely mean 2602:FBAD::/40, as the one above is not a valid IPv6 address ;) BGP wise it seems only 2602:fbad:8::/45 and 2602:fbad:10::/45 are announced as per

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Jeroen Massar via NANOG
> On 16 May 2023, at 06:46, Matthew Petach wrote: > [..] > I admit, I'm perhaps a little behind on the latest netflow whiz-bangs, > but I've never seen a netflow record type that included HTTP cookies > or PCAP data before. Take your pick from the "latest" ~2009 IPFIX Information Elements:

<    1   2   3