Re: DNS Flag Day, Friday, Feb 1st, 2019

2019-01-31 Thread Mark Andrews
> On 31 Jan 2019, at 10:59 pm, Matthew Petach wrote: > > > > On Thu, Jan 31, 2019, 01:27 Radu-Adrian Feurdean > > > On Thu, Jan 31, 2019, at 03:24, Mark Andrews wrote: > > You do realise that when the day was chosen it was just the date after > >

Re: FCC Hurricane Michael after-action report

2019-05-14 Thread Mark Andrews
s were not the only victims of > this incompetence and negligence. Amusingly, sometimes Verizon had to > send its own repair crews for their copper lines. > > There's a lot more but let me skip to the end result. After inflicting > months of outages on everyone, after tearing up lo

DNS and QNAME MINIMISATION

2019-05-06 Thread Mark Andrews
SECTION: twcable.com.3600IN SOA ns1.twcable.com. hostmaster.pblpdns01.twcable.com. 2019042503 14400 7200 604800 3600 ;; Query time: 610 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue May 07 12:17:11 AEST 2019 ;; MSG SIZE rcvd: 170 % -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Microsoft have releases a fix for the misbehaviour of their DNS servers.

2019-04-28 Thread Mark Andrews
time then do not respond at all for a period of time. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: User Unknown (WAS: really amazon?)

2019-07-31 Thread Mark Andrews
use ARIN is so righteously > competent. :) > > I wasn't criticizing ARIN (or anybody) I was just answering a hypothetical. > > -- > S.C. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: MAP-E

2019-08-05 Thread Mark Andrews
reakages uncorrected. There is no fallback to IPv4 with DNS64 alone. If you also have 464XLAT with DNS64 then there is NO DIFFERENCE to MAP-[ET] or DS-Lite in terms of traffic shifting to native IPv6. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: QoS for Office365

2019-07-09 Thread Mark Andrews
u don't have end-to-end > control, trying to do QoS is pointless. > > That said, I believe it should be possible to apply some kind of meaningful, > end-to-end QoS together with Microsoft if you took up one of their Express > Route services, given that is considered

Re: Disney+ Streaming

2019-11-12 Thread Mark Andrews
urce" (piracy) they used to use before 1 > (or perhaps 2) streaming services kept them happy enough to abandon > piracy. > > The content providers are going to piss in their bed again due to > greed. Again. > > Cheers, > b. > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: RIPE our of IPv4

2019-12-02 Thread Mark Andrews
esn’t support native IPv6. Its just another level on encapsulation. Email is often out sourced so you don’t need your own IPv4 addresses for that. Then there is in the cloud for other services, again you don’t need your own IPv4 addresses. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: RIPE our of IPv4

2019-12-03 Thread Mark Andrews
> On 4 Dec 2019, at 02:04, Fernando Gont wrote: > > On 3/12/19 00:12, Mark Andrews wrote: >> >> >>> On 3 Dec 2019, at 13:31, Valdis Klētnieks wrote: >>> >>> On Mon, 02 Dec 2019 11:04:24 -0800, Fred Baker said: >>> >>>&

Re: RIPE our of IPv4

2019-12-03 Thread Mark Andrews
> On 4 Dec 2019, at 09:51, Valdis Klētnieks wrote: > > On Wed, 04 Dec 2019 07:47:25 +1100, Mark Andrews said: > >> Why not use someone else’s IPv4 addresses? Really. What is wrong with using >> someone else’s IPv4 addresses if it achieves the need? As far

Re: IPv4 and Auctions

2019-10-24 Thread Mark Andrews
t back in ’88 from SRI-NIC (pre-CIDR). Unfortunately I don’t have the paperwork anymore. You had to do projected host estimates out several years. 4 sites with one with over 254 hosts …. > ------ > Jon Lewis, MCP :) | I route > StackPath, Sr. Neten

Re: RIPE our of IPv4

2019-11-26 Thread Mark Andrews
onuses, short term decisions. > > Thanks, > > Sabri [1] https://en.wikipedia.org/wiki/X-Forwarded-For -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: RIPE our of IPv4

2019-11-26 Thread Mark Andrews
orted. 6rd works with 50 year replacement time frames. This is really no different to what HE has been doing for the last 20 years, it just moves the encapsulation / decapsulation closer to the customer. Mark [1] https://tools.ietf.org/html/rfc5969 -- Mark Andrews, ISC 1 Seymour St., Dun

Re: RIPE our of IPv4

2019-11-30 Thread Mark Andrews
And how did that stop you deploying IPv6? It’s not like you were turning off IPv4. -- Mark Andrews > On 1 Dec 2019, at 04:03, Matthew Kaufman wrote: > >  > This is a great example (but just one of many) of how server software > development works: > > IANA IPv

Re: RIPE our of IPv4

2019-12-01 Thread Mark Andrews
> their equipment doesn't support it or they don't have the in-house >> expertise to support it, etc tho I can't think of much other etc, a >> few points of resistance do come up. >> >> -- >> -Barry Shein >> >> Software Tool & Die| b...@th

Re: RIPE our of IPv4

2019-11-25 Thread Mark Andrews
support both transports. Why are you scared to tick the box for IPv6? HTTPS doesn’t care which transport is used. -- Mark Andrews > On 26 Nov 2019, at 03:53, Dmitry Sherman wrote: > >  I believe it’s Eyeball network’s matter to free IPv4 blocks and move to v6. > > > Best

Re: RIPE our of IPv4

2019-11-25 Thread Mark Andrews
But IPv4 is ripe. You have just become accustomed to the stench of NAT that you don’t realise it. -- Mark Andrews > On 26 Nov 2019, at 05:31, Jeff Shultz wrote: > > Hard to say that something that is in full implementation and use is dead. > >> On Mon, Nov 25, 2019 at 9

Re: RIPE our of IPv4

2019-11-27 Thread Mark Andrews
to lose relevance. > > As an aside, I would guess that it's the corporate eyeball customers with > servers, not resi/mobile behind CGNAT, that will bear the brunt of the IPv4 > cost first. But what enterprise wants to tell its non-IPv6 customers "your > Internet needs to

Re: Update to BCP-38?

2019-10-03 Thread Mark Andrews
lse THEN deny packet Network administrators should log information on packets which are dropped. This then provides a basis for monitoring any suspicious activity. Mark > -- > Marco > (pushing for IPv6 examples since 2007 or so > like in: https://youtu.be/OLEizGPoB5w?t=30)

Re: IPv6 Pain Experiment

2019-10-03 Thread Mark Andrews
n its static DHCP page saying NAT64 this entry and many be even add a DDNS entry for it as well. I’m pretty sure I could configure a LEDE (OpenWRT) box to do this today. Throw a Raspberry Pi (or similar) in front of the plotter (or even the whole shop floor) with NAT64 configured and it is now

Re: IPv6 Pain Experiment

2019-10-03 Thread Mark Andrews
> On 4 Oct 2019, at 10:35 am, Masataka Ohta > wrote: > > Doug Barton wrote: > >> Not if you configure your services (like DNS) with static addresses,which as >> we've already discussed is not only possible, but easy. > > That's your opinion. But, as Mark

Re: IPv6 Pain Experiment

2019-10-02 Thread Mark Andrews
aka Ohta > wrote: > > Mark Andrews wrote: > >> There is also nothing stopping machines updating their addresses in >> the DNS dynamically securely. > Except that glue A/ can not be updated so easily > and security configuration is even more pai

Re: Update to BCP-38?

2019-10-02 Thread Mark Andrews
What part of BCP-38 do you think needs to be updated to support IPv6? Changing the examples to use IPv6 documentation prefixes instead of IPv4 documentation prefixes? Mark > On 3 Oct 2019, at 1:20 pm, Stephen Satchell wrote: > > Is anyone working on an update to include IPv6?

Re: IPv6 Pain Experiment

2019-10-02 Thread Mark Andrews
need an IPAM for IPv4, you almost certainly don't for IPv6. > > IPv6 is different, but it's not any more difficult to learn than IPv4. (You > weren't born understanding IPv4 either.) > > Doug -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Update to BCP-38?

2019-10-04 Thread Mark Andrews
which references the > existing literature, as opposed to being created from whole cloth. > > I think I steered everyone wrong when I was talking about some of the > exposition in the text, specifically the examples. That kind of > material really belongs in an RFC. My apologies. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Reminiscing our first internet connections (WAS) Re: akamai yesterday - what in the world was that

2020-01-27 Thread Mark Andrews
The hardware support was 2B+D but you could definitely just use a single B. 56k vs 64k depended on where you where is the world and which style of ISDN the telco offered. -- Mark Andrews > On 27 Jan 2020, at 22:32, Bryan Holloway wrote: > > I didn't think one could get a

Re: Tell me about AS19111

2020-02-05 Thread Mark Andrews
> P.S. Remember, out of all of the networking engineers in the entire world, > by definition, half of them are of below average intelligence. Unfortunately there is no basis for that claim as networking engineers are not uniformly randomly selected from the population as a whole. --

Re: QUIC traffic throttled on AT residential

2020-02-18 Thread Mark Andrews
d. And my users > agree -- they no longer turn off wifi. > > > May I naively ask if Google staff have considered scrapping using UDP > and instead proposing a new, first-class transport protocol that OSes > can implement on top of IP? UDP certainly helped speed testing and > iteratio

Re: QUIC traffic throttled on AT residential

2020-02-19 Thread Mark Andrews
se DHCPv6 PD if both exist. > I know v6 works cuz AT's device supports it, and openwrt does it out > of the box-- but heck if I know how it works. At the risk of asking > this list for tech support -- does anyone want to ping me off list and > point me in the right direction?? Maybe so

Re: ISC BIND 9 breakage?

2020-03-26 Thread Mark Andrews
# NOTE: The ISC DLV zone is being phased out as of February 2017; > # the key will remain in place but the zone will be otherwise empty. > # Configuring "dnssec-lookaside auto;" to activate this key is > # harmless, but is no longer useful and is not recommended.

Re: Abuse Desks

2020-04-29 Thread Mark Andrews
The machines that are ssh probing are probably doing other stuff. Take the win that you have been informed about a compromised machine and get it cleaned / quarantined. -- Mark Andrews > On 30 Apr 2020, at 06:20, Bottiger wrote: > >  > It is rather easy to block SSH crack

Re: mail admins?

2020-04-29 Thread Mark Andrews
racted with >> them, I just emailed Matt Griswold, but that was years ago. > > I'm also assuming this is about the 5 bounce messages I got from this last > message to the list "Message to 9728466...@email.uscc.net failed." > > Lets see if it honors "Reply-to:&q

Re: IP addresses on subnet edge (/24)

2020-09-14 Thread Mark Andrews
w what that source IP is > when it does work). > Before you suggest that those .255 addresses are broadcasts on some VLAN, > they are not. They are injected as /32s using a routing protocol, while the > VLAN addressing is all RFC1918 addressing. > > --Andrey -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Ingress filtering on transits, peers, and IX ports

2020-10-14 Thread Mark Andrews
; I suppose it depends on your definition of "engage the community". I think > that's what we're doing right now. We're also no stranger to NANOG (though > perhaps more of a lurker on the mailing list). But community is a much > broader term. And anyway, there is some order to this whole thing, and > broader announcements will come later. > > Cheers, > Casey -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Virginia voter registration down due to cable cut

2020-10-16 Thread Mark Andrews
compared to counting the votes. Timezone spread also makes the night longer. If you have a result within 2 hours of the Hawaiian polls closing you are on par. -- Mark Andrews > On 17 Oct 2020, at 07:49, Alain Hebert wrote: > >  Hi, > > Beside being: > >

Re: Ipv6 help

2020-08-26 Thread Mark Andrews
ed disclosure, > copying, distribution or use of the contents of this information, even if > partially, including attached files, is strictly prohibited and will be > considered a criminal offense. If you are not the intended recipient be aware > that any disclosure, copying, distribution

Re: Ipv6 help

2020-08-26 Thread Mark Andrews
, then Sony is in breach of lots of consumer laws around the planet. No EULA trumps the law. Here is Australia it would be the ACCC that would take them to task. -- Mark Andrews > On 27 Aug 2020, at 04:38, Brian Johnson wrote: > > I‘m going further... They shouldn’t have to care. So

Re: Ipv6 help

2020-08-27 Thread Mark Andrews
l stack network. And no NAT64 does not imply DNS64. You can publish a ipv4only.arpa zone with the mappings for the NAT64. There are now also RA options for publishing these mappings. There are also DHCPv6 options. Mark > Bjørn -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Ipv6 help

2020-08-27 Thread Mark Andrews
missing? Lots of assumptions people are making about how equipment is configured which is causing people to talk past each other. >> On Aug 27, 2020, at 1:20 AM, Mark Andrews wrote: >> >> >> >>> On 27 Aug 2020, at 15:58, Bjørn Mork wrote: >>> >

Re: Vint Cerf & Interplanetary Internet

2020-10-21 Thread Mark Andrews
tps://spacenews.com/osiris-rex-touches-down-on-asteroid > https://www.bbc.com/news/science-environment-47293317 > > Or... > > The IPI idea has been around for a long time now: > https://en.wikipedia.org/wiki/Interplanetary_Internet > > The main question is will NANOG On The

Re: CGNAT Opensource with support to BPA, EIM/EIF, UPnP-PCP

2020-07-07 Thread Mark Andrews
will be > considered a criminal offense. If you are not the intended recipient be aware > that any disclosure, copying, distribution or use of the contents of this > information, even if partially, including attached files, is strictly > prohibited, will be considered a criminal offense, so you must reply to the > original sender to inform about this communication and delete it. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: nike.com->nike.com/ca

2021-01-06 Thread Mark Andrews
talina macos) and > rebooted just because. Anyone else seen a weirdism on this? thanks > > Becki in Detroit -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: CNAME records in place of A records

2020-11-08 Thread Mark Andrews
ecord - fwiw... > > Yes. I didn't think that was something that needed to be explained on NANOG, > though. Given the number of ISPs (and others) that ask ISC to support CNAME at the APEX to whom we have to politely say: “No. It is not permitted by this part of RFC 1034.” I

Re: CNAME records in place of A records

2020-11-08 Thread Mark Andrews
of other areas, too. >> >> - Matt > > > except - don't forget that the root of a domain (that domain without "www.” > or any other label) - cannot have a CNAME as the "A" record - fwiw… Which is why there are HTTPS and SVCB records coming and SRV exists. You don’t need CN

Re: Nice work Ron

2021-01-22 Thread Mark Andrews
APNIC and 30% in RIPE then the majority of addresses by region are in the LACNIC region. -- Mark Andrews > On 22 Jan 2021, at 23:48, JORDI PALET MARTINEZ via NANOG > wrote: > >  > > El 22/1/21 13:25, "NANOG en nombre de Masataka Ohta" > mo...

Re: DoD IP Space

2021-01-21 Thread Mark Andrews
URL bar, similar to the HTTPS > warnings we see today. If a site is IPv4 only, warn that the site is using > deprecated technology. > > Financial incentives also work. Perhaps we can convince Mr. Biden to give a > .5% > tax cut to corporations that fully implement v6. That will

Re: Nice work Ron

2021-01-22 Thread Mark Andrews
I would think as long as most of the LACNIC addresses are used in region they are fine. Without going and reading the policies in full, I would expect that there would be a exception for multinationals to allow them to get addresses from wherever they held a significant usage. -- Mark

Re: DoD IP Space

2021-01-22 Thread Mark Andrews
are silently untraceable over one then the other transport. It isn’t hard to do. Dealing with broken networks is something every application should do. -- Mark Andrews > On 23 Jan 2021, at 01:28, Travis Garrison wrote: > > What's all your opinion when company's such as Disney actively

Re: DoD IP Space

2021-01-22 Thread Mark Andrews
services to move staff around the factory. -- Mark Andrews > On 23 Jan 2021, at 07:42, Mark Andrews wrote: > > Disney should hire some proper developers and QA team. > > RFC 1123 instructed developers to make sure your products handled multi-homed > servers properly an

Re: DNSSEC failures for www.cdc.gov

2021-01-14 Thread Mark Andrews
n Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for > Dummies", > Please consider the environment before reading this e-mail. https://jl.ly -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: DANE of SMTP Survey

2021-06-03 Thread Mark Andrews
DANE works with self generated CERTs. The TLSA record provides the cryptographic link back to the DNSSEC root. -- Mark Andrews > On 3 Jun 2021, at 22:32, babydr DBA James W. Laferriere > wrote: > > Hello Mark , > >> On Wed, 2 Jun 2021, Mark Tinka wrote: >&g

Re: DoD IP Space

2021-01-24 Thread Mark Andrews
; Doug Barton > Sent: Friday, January 22, 2021 5:30 PM > To: nanog@nanog.org > Subject: Re: DoD IP Space > > The KB indicates that the problem is with the "LG TV WebOS 3.8 or above." > > Doug > > (not speaking for any employers, current or former) > > >

Re: 10 years from now... (was: internet futures)

2021-03-26 Thread Mark Andrews
. NATs produce a second class Internet. We have had to lived with a second class Internet for so long that most don’t know what they are missing. -- Mark Andrews > On 27 Mar 2021, at 07:14, Andy Ringsmuth wrote: > >  >> >>> On 3/26/21 12:26 PM, Mark Tinka wrote

Re: login.authorize.net has A and CNAME records

2021-04-06 Thread Mark Andrews
but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 1232 ;; QUESTION SECTION: ;login.authorize.net.cdn.cloudflare.net.IN TXT ;; Query time: 15 msec ;; SERVER: 198.41.222.31#53(198.41.222.31) ;; WHEN: Wed Apr 07 07:14:22 AEST 2021 ;; MSG SIZE rcvd: 67 % > Or if

Re: login.authorize.net has A and CNAME records

2021-04-07 Thread Mark Andrews
the RDATA section of the RR. If a CNAME RR is present at a node, no other data should be present; this ensures that the data for a canonical name and its aliases cannot be different. This rule also insures that a cached CNAME can be used without checking with an authoritative server for other RR ty

Re: Ip space Dilemma

2021-03-09 Thread Mark Andrews
with a letter to the Minster, Shadow Minister and the CEO of the company the servers where outsourced too pointing out the problem. Fixed within a couple of days. -- Mark Andrews > On 10 Mar 2021, at 06:17, Kevin Wallace wrote: > > On Tue, Mar 9, 2021, at 6:13 AM, Justin Wilson (Lists) wr

Re: Newbie Question: Is anyone actually using the Null MX (RFC 7505)?

2021-02-26 Thread Mark Andrews
to satisfy myself that I > wrote mine correctly? > 2. Which one makes more sense from the practical point-of-view: having a Null > MX Record for the no-mail domain, or having no MX record at all? > > > Thanks in advance for all advices, > > -- > > Pi

Re: DualStack (CGNAT) vs Other Transition methods

2021-02-24 Thread Mark Andrews
will us keep that much options of endpoints connections, if only one > solves all the problems? > - We will need to train the guys on the Dual-Stack/CGNAT Scnario, and > 464Xlat Scenario... Knowing about Danos, about Jool... > - It doesn't scale! > > > -- > Douglas Fer

Re: CGNAT

2021-02-23 Thread Mark Andrews
not true if the IPv4AAS implementation is done carefully. > > Owen > > >> On Feb 19, 2021, at 12:11 PM, Tony Wicks wrote: >> >> Because then a large part of the Internet won't work.... >> >> From: NANOG on behalf of Mark >> Andrews >> Sen

Re: DoD IP Space

2021-02-15 Thread Mark Andrews
8 is a bandaid for an obsolete >> >> protocol. >> > So, in your mind, IPv4 was "obsolete" in 1996 -- almost three years >> > before IPv6 was even specified? Fascinating. I could be in no way >> > mistaken for an IPv4/NAT apologist, but that

Re: Famous operational issues

2021-02-16 Thread Mark Andrews
you aren’t depending on a piece of medical equipment with a Y2038 issue to keep you alive. Y2038 is everybody's problem! Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: DoD IP Space

2021-02-14 Thread Mark Andrews
perror("fcntl"); } else perror("fcntl"); } cleanup: /* Free everything. */ if (fds != NULL) free(fds); return (fd); } See https://users.isc.org/~marka/ Mark > Regards, > Bill Herrin > > -- > William Herrin > b...@herrin.us > https://bill.herrin.us/ -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: CGNAT

2021-02-19 Thread Mark Andrews
Why not go whole hog and provide IPv4 as a service? That way you are not waiting for your customers to turn up IPv6 to take the load off your NAT box. Yes, you can do it dual stack but you have waited so long you may as well miss that step along the deployment path. -- Mark Andrews > On

Re: CGNAT

2021-02-19 Thread Mark Andrews
I’m sure the large parts of the world already doing this would disagree. -- Mark Andrews > On 20 Feb 2021, at 07:11, Tony Wicks wrote: > >  > Because then a large part of the Internet won't work > > From: NANOG on behalf of Mark > Andrews > Sent: Saturday, 2

Re: DoD IP Space

2021-02-11 Thread Mark Andrews
home but the installed base is becoming IPv6 capable. The harder part is making sure every piece of kit works with IPv6 when you want to turn off IPv4 internally but even then you can put that equipment behind bi-directional NAT-64 boxes. You have large parts of the world actively turning off as much IPv4 as they can. Connections to legacy IPv4-only services are being tunnelled over IPv6 either by encapsulation or bi-directional protocol translation. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: DoD IP Space

2021-02-11 Thread Mark Andrews
> On 12 Feb 2021, at 10:25, Tim Howe wrote: > > On Fri, 12 Feb 2021 09:05:51 +1100 > Mark Andrews wrote: > >> Almost everything you buy today works with IPv6. Even the crappy $50 home >> router does IPv6. > > You're testing very different

Re: DoD IP Space

2021-02-11 Thread Mark Andrews
t;fix the network," tolerate neither incompetence or sloth > from its operators. Educate the former. Encourage the latter. > > -- > . ___ ___ . . ___ > . \/ |\ |\ \ > . _\_ /__ |-\ |-\ \__ -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

STOP USING FONT SIZE SMALL Was: Re: LOAs for Cross Connects - Something like PeeringDB for XC

2021-02-22 Thread Mark Andrews
PathPanel/Port). > > And some workflow > > - Cross Connect Requiremento/Authorization from A-Side > > - Acceptance/Authorization from Z-side. > > - Acceptance/Authorization from Facilities involved (could be more than > > one) > > - Execution/Activation notice from Facilities. > > > > > > -- > > Douglas Fernando Fischer > > Engº de Controle e Automação > > > -- > Douglas Fernando Fischer > Engº de Controle e Automação -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: The great Netflix vpn debacle!

2021-08-31 Thread Mark Andrews
; >> Geolocate and VPN or Not are often kind of tied to the same kinds of >> reporting services and it may well be that whatever provider HBO is using >> for one is also being used for the other. >> Owen -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: The great Netflix vpn debacle!

2021-08-31 Thread Mark Andrews
et firmware updates > done), > I wouldn’t hold my breath and I suspect where there are competitive > alternatives, > such a notice would be a boon to the competition. > > Owen > > >> On Aug 31, 2021, at 15:15 , Mark Andrews wrote: >> >> Force the

Re: IPv6 woes - RFC

2021-09-10 Thread Mark Andrews
Internet IPv4(40% of traffic) + IPv6(60% of traffic) } - [Router w/ AFTR] - { IPv6-only (IPv4 traffic has been encapsulated in IPv6) } - [CPE w/ B4] { home network IPv4 + IPv6 } MAP-T and MAP-E are similar to 464XLAT and DS-Lite respectively. Yes, you have to learn something new but it costs less that a “pure" IPv4 service. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: if not v6, what?

2021-09-07 Thread Mark Andrews
it is implemented? Getting IPv4 continue to work just add layer upon layer of hacks which we are all continuing to pay for. While we debate more and more services are enabling IPv6 and the traffic is shifting to IPv6. >> Do you have any more practical proposals, or..? > > What are miss

Re: IPv6 woes - RFC

2021-09-18 Thread Mark Andrews
It tells you that AT don’t treat IPv6 on equal footing to IPv4 and nothing more. There is nothing at the protocol level stopping AT offering a similar level of service. Don’t equate poor implementation with the protocol being broken. -- Mark Andrews > On 19 Sep 2021, at 07:19, Step

Re: IPv6 woes - RFC

2021-09-28 Thread Mark Andrews
t;> know, Im biased toward IPv4. >> >> I don't view honest and good spirited discussion of facts and understanding >> to >> be a flame war. In fact, I view such discussions as a good thing. >> >>> If something new popups, I want it better than previous thingie (a lot) and >>> easier or at least same level of complications, but IPv6 just solves one >>> thing >>> and brings a lot of complexity. >> Please elaborate on the complexity that IPv6 brings that IPv4 didn't also >> bring >> with it in the '90s? >> >> Would the things that you are referring to as IPv6 complexities have been any >> different if we had started with IPv6 instead of IPv4 in the '80s & '90s? >> >> In some ways it seems to me that you are alluding to the legacy code / >> equipment >> / understanding / configuration / what have you. This is something that many >> have been dealing with for quite a while. The mainframe's ability to run >> code >> from near half a century ago comes to mind. >> >>> The fact is, IPv6 failed. >> >> I concede that IPv6 has faltered. But I don't believe it's failed. I don't >> think it's fair to claim that it has. >> >>> There are probably multiple reasons for it. Do we ever move to IPv6? I dont >>> know.. Do I care for now? Nope, IPv4 works for me for now. >> >> You are entitled to your own opinion as much as I'm entitled to mine. But the >> key thing to keep in mind is that it's /your/ opinion. The operative word >> being >> "your" as in "you". Your views / opinions / experiences are /yours/. What's >> more important is that other people's views / opinions / experiences may be >> different. >> >> >> >> -- >> Grant. . . . >> unix || die -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 woes - RFC

2021-09-28 Thread Mark Andrews
/rfc6092 CableLabs has similar requirements. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 woes - RFC

2021-09-23 Thread Mark Andrews
:34, Colton Conor wrote: > > 300 apartments Mark. No, it's bulk internet and wifi so a single provider. > > On Wed, Sep 22, 2021 at 8:01 PM Mark Andrews wrote: >> >> And how many apartments where covered by that single IP address? Was this >> where there is a

Re: IPv6 woes - RFC

2021-09-22 Thread Mark Andrews
an lower the number of people that need to escape IPv4 nat. If >> it helps just a little bit, that alone will make implementing IPv6 worth it >> for smaller emerging operators. Buying IPv4 has become very expensive. Yes >> you can profit from selling a public IPv4 address to the cu

Re: more spaces in PTRs, this time totisp.net

2021-10-22 Thread Mark Andrews
\032 is space. Go read STD13 aka RFC 1034 and RFC 1035. -- Mark Andrews > On 22 Oct 2021, at 16:40, Owen DeLong via NANOG wrote: > > \032 is not a space. > > Decimal 32 (0x20, \040) is a space. > \032 is a Ctrl-Z (26 decimal, 0x1a) > > Owen > > >> On

Re: Redeploying most of 127/8, 0/8, 240/4 and *.0 as unicast

2021-11-20 Thread Mark Andrews
That fine. XP supports IPv6 and apart from the DNS needing a IPv4 recursive server it works fine. -- Mark Andrews > On 21 Nov 2021, at 11:23, ML wrote: > >  > >> On 11/19/2021 1:27 PM, William Herrin wrote: >>> On Fri, Nov 19, 2021 at 10:22 AM Zu wrote

Re: Redploying most of 127/8 as unicast public

2021-11-17 Thread Mark Andrews
with multiple protocols and tunnelling > technologies > • Supplying tested patches and tools that address these problems > -- > > Some of these are hardcoded in ASICs, I believe. Change that! ;) > > scott > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Redploying most of 127/8 as unicast public

2021-11-17 Thread Mark Andrews
> On 18 Nov 2021, at 11:58, Joe Maimon wrote: > > > > Mark Andrews wrote: >> It’s a denial of service attack on the IETF process to keep bringing up >> drafts like this that are never going to be approved. 127/8 is in use. It >> isn’t free. &g

Re: IPv6 and CDN's

2021-11-28 Thread Mark Andrews
grow the per customer allocation up to /48 per customer. One shouldn’t be stuck with /56 because one made a bad choice of prefix size initially. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: WKBI #586, Redploying most of 127/8 as unicast public

2021-11-17 Thread Mark Andrews
on, local to your > system. > > All other mechanisms are not. Maybe by convention, but not definition. > > Dont we appreciate standards for that very reason? > >> Or, you know, >> some maniac might decide that part of 127/8 isn't loopback so I have to move >> them to the part that >> still is. >> >> In IPv6 I use ULAs since that gives me the option of routing them or not. >> >> R's, >> John >> >> > ULA and registered ULA are one of those things thats hard to think about with > a straight face. They betray a variety of dichotomies that are quite > ridiculous. > > Joe -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Anyone else seeing DNSSEC failures from EU Commission ? (european-union.europa.eu)

2021-12-09 Thread Mark Andrews
de to enable it. For requests without DNS COOKIEs present there is RRL mechanisms. > Please stop enabling dnssec on your domain folks, you are going to have > outage, your security is worse off, and you feeding the vendor / hacker ddos > death spiral > > > > > > >

Re: A crazy idea

2021-07-19 Thread Mark Andrews
ign > stuff they can't control. > > Just playing devils advocate. > > -- > Bryan Fields > > 727-409-1194 - Voice > http://bryanfields.net -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Not Making Use of 240/4 NetBlock

2022-03-16 Thread Mark Andrews
It’s a business problem for the RIR’s. Selling / leasing known defective products is against lots of consumer law. -- Mark Andrews > On 17 Mar 2022, at 03:43, Owen DeLong wrote: > >  > >>> On Mar 15, 2022, at 19:23 , Mark Andrews wrote: >>> >>> &

Re: Making Use of 240/4 NetBlock Re: 202203151549.AYC

2022-03-15 Thread Mark Andrews
>> https://datatracker.ietf.org/doc/html/draft-fuller-240space-02 >> https://mailarchive.ietf.org/arch/search/?q=draft-fuller-240space >> >> >> The walkaway I had from these discussions was that while changing the >> definition of the address space would allow RIRs to sell more IPv4 address >> space for a few weeks (such as happened to APNIC when the last /8's were >> handed out), there were not enough addresses in the identified pools to >> solve the address shortage. So it was in the end a fool's errand. If you >> want to have address space to address the current shortage, you need an >> addressing architecture with more addresses. >> >> I was there for those discussions, and I'm not sure how to put it more >> simply. >> >> -- >> >> >> Virus-free. www.avast.com > > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Not Making Use of 240/4 NetBlock

2022-03-15 Thread Mark Andrews
| *oo* >> >> >> -- >> Best Regards ! >> __ >> baya.sylvain[AT cmNOG DOT cm]|<https://cmnog.cm/dokuwiki/Structure> >> Subscribe to Mailing List: <https://lists.cmnog.cm/mailman/listinfo/cmnog/> >> __ >> #‎LASAINTEBIBLE‬|#‎Romains15‬:33«Que LE ‪#‎DIEU‬ de ‪#‎Paix‬ soit avec vous >> tous! ‪#‎Amen‬!» >> ‪#‎MaPrière‬ est que tu naisses de nouveau. #Chrétiennement‬ >> «Comme une biche soupire après des courants d’eau, ainsi mon âme soupire >> après TOI, ô DIEU!»(#Psaumes42:2) >> >> > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: CC: s to Non List Members (was Re: 202203080924.AYC Re: 202203071610.AYC Re: Making Use of 240/4 NetBlock)

2022-03-08 Thread Mark Andrews
ork stopped treating this as > loopback, we'd be glad to hear about it. What does it matter what people are using those addresses for. They are using them in good faith and are under no obligation to report how they are using them. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 Only - was Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-30 Thread Mark Andrews
by > its own merits, not by relying on artificial barriers to the competitions. > Based on my best understanding, IPv6 failed right after the decision of "not > emphasizing the backward compatibility with IPv4". It broke one of the golden > rules in the s

Re: A straightforward transition plan (was: Re: V6 still not supported)

2022-03-30 Thread Mark Andrews
defaults. You could implement this in stack that only presented IPv6 to the application using IPv4 mapped address. You use getaddrinfo with AI_V4MAPPED set for domain names and address literals which should preference IPv6 over mapped IPv4 moving the traffic to IPv6. Yes, you still have a stub I

Re: IPv6 Only

2022-03-31 Thread Mark Andrews
what breaks like sites where one of the cdn’s is IPv4 only despite the page itself being reachable over IPv6. Or the nameservers are not reachable over IPv6. Write down what you find is broken and report it. -- Mark Andrews > On 1 Apr 2022, at 05:53, Matthew Petach wr

Re: V6 still not supported

2022-04-06 Thread Mark Andrews
id NAT tricks. > Well yes... > > ... but why would Sony do that when they have so conveniently externalized > all costs? > > > - Jared -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-11 Thread Mark Andrews
through a transition box today. If the router modifies the source or destination addresses or the ports of the packet it is a transition box. It is the border between two internets. -- Mark Andrews > On 12 Oct 2023, at 06:07, Delong.com wrote: > >  > >>> On Oct 10,

Re: Charter DNS servers returning invalid IP addresses

2023-10-25 Thread Mark Andrews
It’s being filtered. Only Charter can tell you why. -- Mark Andrews > On 26 Oct 2023, at 05:07, Jason J. Gullickson via NANOG > wrote: > >  > I've been working for a week or so to solve a problem with DNS resolution for > Charter customers for our domain bonesinjars.com.

Re: swedish dns zone enumerator

2023-11-02 Thread Mark Andrews
to be much more than that to make that conclusion. -- Mark Andrews > On 2 Nov 2023, at 06:15, Randy Bush wrote: > > ya, right, and at a whole bunch of other cctld servers > > from a network called domaincrawler-hosting > > shall we smoke another? > > /home/randy&g

Re: swedish dns zone enumerator

2023-11-01 Thread Mark Andrews
> org:ORG-ABUS1196-RIPE > country:SE > admin-c:VIJE1-RIPE > tech-c: VIJE1-RIPE > status: ASSIGNED PA > notify: c+1...@resilans.se > mnt-by: RESILANS-MNT > mnt-routes: ETTNET-LIR > created:2008-04-03T11:21:0

Re: swedish dns zone enumerator

2023-11-02 Thread Mark Andrews
> On 2 Nov 2023, at 20:25, Stephane Bortzmeyer wrote: > > On Thu, Nov 02, 2023 at 04:09:24PM +1100, > Mark Andrews wrote > a message of 90 lines which said: > >> I also see QNAME minimisation in action as the QTYPE is NS. This >> could just be a open

Re: what is acceptible jitter for voip and videoconferencing?

2023-09-22 Thread Mark Andrews
The implication would look at the terminal characteristics and enable as required. -- Mark Andrews > On 23 Sep 2023, at 08:33, Michael Thomas wrote: > >  >> On 9/22/23 1:54 PM, Mark Andrews wrote: >> Telnet sessions where often initiated from half duplex terminals.

<    6   7   8   9   10   11   12   >