Re: Correcting Netflix ipv6 geolocation

2023-10-19 Thread Jeroen Massar via NANOG
> On 19 Oct 2023, at 02:09, Justin Kilpatrick wrote: > > Our ipv6 subnet 2602::FBAD::/40 is You likely mean 2602:FBAD::/40, as the one above is not a valid IPv6 address ;) BGP wise it seems only 2602:fbad:8::/45 and 2602:fbad:10::/45 are announced as per

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Jeroen Massar via NANOG
> On 16 May 2023, at 06:46, Matthew Petach wrote: > [..] > I admit, I'm perhaps a little behind on the latest netflow whiz-bangs, > but I've never seen a netflow record type that included HTTP cookies > or PCAP data before. Take your pick from the "latest" ~2009 IPFIX Information Elements:

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
> On 3 Apr 2022, at 00:29, Michael Thomas wrote: > > > On 4/2/22 3:23 PM, Jeroen Massar via NANOG wrote: >> Hi Dan, >> >> Hope the rest of the world is treating you decently! >> >> There are a lot of bits and bobs that one has to get right for mai

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Jeroen Massar via NANOG
Hi Dan, Hope the rest of the world is treating you decently! There are a lot of bits and bobs that one has to get right for mail to flow, amongst which: - IP -> PTR lookup -> that hostname lookup, and match to IP again (https://en.wikipedia.org/wiki/Forward-confirmed_reverse_DNS) - SPF -

Re: ASN in use, but no whois data?

2022-02-25 Thread Jeroen Massar via NANOG
> On 20220225, at 23:45, Matt Harris wrote: > > Hey folks, > I'm looking at an ASN 394183 and I can't find any whois or other contact data. First stop for info: bgp.tools! https://bgp.tools/as/394183#whois But yes, as others commented, looks like a ARIN-expired ASN... as long as one pay

Re: FORT monitoring/visibility

2021-10-27 Thread Jeroen Massar via NANOG
> On 20211027, at 09:26, Lukas Tribus wrote: > > On Wed, 27 Oct 2021 at 08:47, Mark Tinka wrote: >> >> On 10/27/21 01:58, Randy Bush wrote: >>> my old DRL RP instances produce MRTG graphs etc of the CA >>> fetching side, though nothing on the rpki-rtr side. >> >> Randy, I actually have an

Re: Geolocation accuracy

2021-10-19 Thread Jeroen Massar via NANOG
On 2021-10-19 13:39, Hank Nussbacher wrote: Can anyone recommend a geo-location service with high city accuracy? Maxmind, for most countries (broadband, which does move) is below 50% accuracy (they claim 68% accuracy for USA cities):

Re: Admin for .tk (not a spam/abuse complaint!)

2021-09-29 Thread Jeroen Massar via NANOG
On 2021-09-29 01:03, Tim Harman via NANOG wrote: [..] {11:58}~ ➭ dig @194.0.41.1 test.tk ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> @194.0.41.1 test.tk ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached A traceroute with a source IP would be sooo

Re: IPv6 woes - RFC

2021-09-16 Thread Jeroen Massar via NANOG
> On 20210916, at 11:15, John Curran wrote: > > On 14 Sep 2021, at 3:46 AM, Eliot Lear wrote: >> …. >> There is no evidence that any other design choices on the table at the time >> would have gotten us transitioned any faster, and a lot of evidence and >> analysis that the exact opposite

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
On 2021-09-10 18:27, Owen DeLong wrote: On Sep 10, 2021, at 01:39 , Jeroen Massar wrote: On 20210909, at 21:55, Owen DeLong via NANOG wrote: [..] Awful lot of red spots even in the top 100. Hell, even amazon.com isn't IPv6 yet. And the long tail is going to be the death of a thousand

Re: IPv6 woes - RFC

2021-09-10 Thread Jeroen Massar via NANOG
> On 20210909, at 21:55, Owen DeLong via NANOG wrote: >> [..] >> Awful lot of red spots even in the top 100. Hell, even amazon.com >> isn't IPv6 yet. And the long tail is going to be the death of a thousand >> cuts for the call center unless you have a way to deal with those sites. > > This

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
On 2021-09-04 23:02, Ryan Hamel wrote: Jeroen, > You people keep on giving money to ISPs that are not providing the service you want. Not everyone has the luxury of picking their ISP, But this list is NANOG Network Operators. We are the ISPs and the common consumer doesn't know

Re: IPv6 woes - RFC

2021-09-04 Thread Jeroen Massar via NANOG
> On 20210904, at 22:26, Grant Taylor via NANOG wrote: > > Hi, > > Does anyone have any recommendation for a viable IPv6 tunnel broker / > provider in the U.S.A. /other/ /than/ Hurricane Electric? SixXS shut down 4 years ago, to get ISPs to move their butts... as long as there are tunnels,

Re: The great Netflix vpn debacle! (geofeeds)

2021-08-31 Thread Jeroen Massar via NANOG
On 2021-09-01 01:13, Owen DeLong via NANOG wrote: You just broke 99% of the smart television sets in people’s homes, unfortunately. If only everybody would not get a separate box, be that a AppleTV, a Playstation, a XBox, Chromecast, ... or many other options. Fun part being that it is

Re: What is your preferred outage tracking service? (Hurricane Ida)

2021-08-29 Thread Jeroen Massar via NANOG
On 2021-08-29 23:29, Sean Donelan wrote: Netblocks is reporting connectivity in New Orleans LA is at 72% of normal as Hurricane Ida makes landfall. https://twitter.com/netblocks/status/1432038858460442625 There are per-incident things, like the outages mailing list and downdetector.com.  And

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
[ The kicker about DNSSEC is in the dnsviz links, enjoy ;) TLDR: As long as the very big providers don't demand DNSSEC / DANE, why bother as a small network (just, be prepared to deploy when it starts affecting spam scoring or your search rankings), but small networks do benefit unlike the

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
On 2021-06-02 15:47, Bjørn Mork wrote: Jeroen Massar via NANOG writes: For many organisations DNSSEC is 'scary' and a burden as it feels 'fragile' for them. For "many"? Can you name one that doesn't feel like that? Large organisations with 24/7 NOC teams where at least a few

Re: DANE of SMTP Survey

2021-06-02 Thread Jeroen Massar via NANOG
> On 20210601, at 15:15, Moritz Müller via NANOG wrote: > > Hi, > > DANE for SMTP is not deployed on large scale. Together with researchers from > Seoul National University, Virginia Tech and the University of Twente, we > would like to understand which challenges operators face when

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 23:03, Damian Menscher wrote: > On Tue, Oct 1, 2019 at 1:22 PM Jeroen Massar <mailto:jer...@massar.ch>> wrote: > > On 2019-10-01 21:38, Damian Menscher wrote: > > > Could someone provide a reference of Google saying they'll change the >

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 21:38, Damian Menscher wrote: > Could someone provide a reference of Google saying they'll change the default > nameserver?  Without that, I think all of Jeroen's arguments fall apart? While I stated: >> Moving only your DNS to Cloudflare or Google does not solve the security >>

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 15:22, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 12:11:32PM +0200, > Jeroen Massar wrote > a message of 101 lines which said: > >> - Using a centralized/forced-upon DNS service (be that over DoT/DoH >> or even plain old Do53 > > Yes,

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
controlling the browser bad for the Internet. - Use a VPN if you do not trust your network provider. - Use Tor if you really want 'privacy'. On 2019-10-01 11:57, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 10:35:31AM +0200, > Jeroen Massar wrote > a message of 29 lines w

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 10:08, Stephane Bortzmeyer wrote: > On Tue, Oct 01, 2019 at 09:55:54AM +0200, > Jeroen Massar wrote > a message of 26 lines which said: > >>> (Because this canary domain contradicts DoH's goals, by allowing >>> the very party you don't trus

Re: This DNS over HTTP thing

2019-10-01 Thread Jeroen Massar
On 2019-10-01 09:38, Stephane Bortzmeyer wrote: > On Mon, Sep 30, 2019 at 11:56:33PM -0400, > Brandon Martin wrote > a message of 10 lines which said: > >> It's use-application-dns.net. NXDOMAIN it, and Mozilla (at least) >> will go back to using your local DNS server list as per usual. > >

Re: DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
On 2019-09-18 12:24, Brian J. Murrell wrote: > On Wed, 2019-09-18 at 09:15 +0200, Jeroen Massar wrote: >> Hi Folks, > > Hi. > >> While in the US soon all Firefox users will *NOT* use your DNS >> Recursives configured using DHCP anymore >> (NXDOMAIN use

DNS Recursive Operators: Please enable QNAME minimization (RFC7816) for the enhanced privacy of your users

2019-09-18 Thread Jeroen Massar
Hi Folks, While in the US soon all Firefox users will *NOT* use your DNS Recursives configured using DHCP anymore (NXDOMAIN use-application-dns.net to avoid that[1]). Next to that, it seems some of the root operators are now creating instances in the same networks that offer these kind of

Re: any interesting/useful resources available to IPv6 only?

2019-05-07 Thread Jeroen Massar
On 2019-05-07 15:55, William Waites wrote: > On 05/03, Jeroen Massar wrote: >> >> IPv6 is not a darknet, you won't find something hidden and unique there. > > The Dancing Kame, surely. That Kame has been liberated and made available over IPv4 so long ago that the

Re: any interesting/useful resources available to IPv6 only?

2019-05-03 Thread Jeroen Massar
On 2019-05-03 17:14, Brian J. Murrell wrote: > Hi, > > I am trying to make a case (to old fuddy-duddies, which is why I even > need to actually make a case) for IPv6 for my own selfish reasons. :-) > > I wonder if anyone has any references to interesting/useful/otherwise > resources on are only

Re: AS112 contact

2019-03-26 Thread Jeroen Massar
On 2019-03-26 08:56, Elmar K. Bins wrote: > Hi guys, > > I hope this is only slightly off-topic... > > I'm looking for the correct address for AS112, 1...@root-servers.org > keeps bouncing whatever I try. > > If anybody can drop me a line...much appreciated. You can subscribe/post to:

Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms

2019-03-08 Thread Jeroen Massar
On 2019-03-08 14:45, Brandon Martin wrote: > On 3/8/19 8:38 AM, Saku Ytti wrote: >> Hey, >> >>> now for UDP, I don't know yet how does things like QUIC can be handled >>> ... >> >> Unfortunately the magic answer you were hoping does not exist, what >> they do is they just send smaller

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 20:13, Mark Tinka wrote: > > > On 3/Mar/19 18:05, Jeroen Massar wrote: > >> IPv6 requires a minimum MTU of 1280. >> >> If you cannot transport it, then the transport (the tunnel in this case) >> needs to handle the fragmentation of packets o

Re: WIndows Updates Fail Via IPv6 - Update!

2019-03-04 Thread Jeroen Massar
On 2019-03-03 11:31, Mark Tinka wrote: [..] > Across the 6-in-4 tunnel, the tested MTU is 1,232 for IPv6. IPv6 requires a minimum MTU of 1280. If you cannot transport it, then the transport (the tunnel in this case) needs to handle the fragmentation of packets of 1280 down to whatever does fit

Re: Fixing Google geolocation screwups

2015-04-08 Thread Jeroen Massar
On 2015-04-08 13:31, Max Tulyev wrote: We operate IPv6 tunnel broker tb.netassist.ua, so /48 from our /32 is spread all around the world. Google change geo of our WHOLE /32 from time to time to another cute random place ;) One time Google decided we are in IRAN and block a lot of content as

Re: merry xmas

2014-12-24 Thread Jeroen Massar
On 2014-12-24 19:27, Ken Chase wrote: (mtr|lft|traceroute) xmas.futile.net Welcome to the end of 2014. If you are going to do a silly traceroute thing that has been done thousands of times before, at least use this new fangled thing called: IPv6 Here is the Wikipedia page for you to get

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 14:30, Song Li wrote: Hi everyone, I'm searching for a list of IXPS which contains the information of the ASN of the IXP. Some resources are good: https://prefix.pch.net/applications/ixpdir/?show_active_only=0sort=trafficorder=desc

Re: Is there list of IXPs (containing the information of the AS# of the IXP)

2014-12-22 Thread Jeroen Massar
On 2014-12-22 15:45, Song Li wrote: 在 2014/12/22 22:26, Nick Hilliard 写道: On 22/12/2014 13:50, Jeroen Massar wrote: IXs themselves do not have ASNs, as they are Layer 2 providers. most modern IXPs will have an ASN for their route server, and possibly a separate asn for their mgmt

Re: Comcast thinks it ok to install public wifi in your house

2014-12-11 Thread Jeroen Massar
On 2014-12-11 19:12, valdis.kletni...@vt.edu wrote: On Thu, 11 Dec 2014 18:04:20 +, Livingood, Jason said: Right, so user name password + MAC address. As more devices support things like Passpoint, this will get more sophisticated. OK, so it *does* do .1x authentication with the

Re: Comcast thinks it ok to install public wifi in your house

2014-12-10 Thread Jeroen Massar
On 2014-12-11 03:35, Jeroen van Aart wrote: Grear – a paralegal – and her daughter claim the Xfinity hotspot is an unauthorized intrusion into their private home, places a vast burden on electricity bills, opens them up to attacks by hackers, and degrades their bandwidth. LibertyGlobal

Re: Google contact: apps vs IPv6 issue

2014-12-03 Thread Jeroen Massar
On 2014-12-03 17:57, Max Tulyev wrote: Hello! Could someone advice a good contact inside Google? n...@google.com is where this stuff has to go. They claim to read it (and mostly they do in time). I'm operating a IPv6 tunnel broker http://tb.netassist.ua/ Now there are a number of

Re: FYI, Level 3 issues in Dallas

2014-11-19 Thread Jeroen Massar
On 2014-11-19 16:13, David Hubbard wrote: We have some customers unable to access their websites, seeing this on the way to them: What would be the source and destination? You got a nice routing loop there. Greets, Jeroen

Re: v6 cdn problems

2014-11-10 Thread Jeroen Massar
On 2014-11-10 09:10, Christopher Morrow wrote: On Mon, Nov 10, 2014 at 12:51 AM, Jeroen Massar jer...@massar.ch wrote: There used to be a handy ipv6@google address for reporting things. This nowadays bounces. yes, it changed to noc@ I think. Thus, in case of an IPv6 issue, contacting n

Fwd: [v6ops] IPv6 MTU Flow-label.... (related to draft-v6ops-pmtud-ecmp-problem-01)

2014-11-10 Thread Jeroen Massar
MTU Flow-label (related to draft-v6ops-pmtud-ecmp-problem-01) Date: Mon, 10 Nov 2014 11:31:52 +0100 From: Jeroen Massar jer...@massar.ch Organization: Massar To: i...@ietf.org, v6...@ietf.org Hola folks (and folks in BCC ;), With the recent Google and Akamai outages (latter still ongoing afaik

Re: Equinix Virginia - Ethernet OOB suggestions

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:20, Joe Greco wrote: Hey, VPN setup is not really a viable option (for us) in this scenario. Honestly, I'd prefer to just call it done already and have a VPN but due to certain restraints, we have to go down this route. Without explaining the restraints, this kinda boils

Re: I am about to inherit 26 miles of dark fiber. What do I do with it?

2014-11-10 Thread Jeroen Massar
On 2014-11-10 15:35, Rob Seastrom wrote: While short and to the point, what Fletcher said is likely to be the best advice in this thread. Getting someone on staff who understands *both* outside plant architecture and balance sheets... and can co-develop a business model that involves the

Re: v6 cdn problems

2014-11-09 Thread Jeroen Massar
On 2014-11-09 23:00, Christopher Morrow wrote: On Sat, Nov 8, 2014 at 6:10 PM, Jeroen Massar jer...@massar.ch wrote: Google does not seem to be home. Note that you skipped the rest: Google does not seem to be home. They used to have a handy i...@google.com address, but alas, that does

Re: v6 cdn problems

2014-11-08 Thread Jeroen Massar
On 2014-11-08 23:55, Pete Carah wrote: [..] Symptom with akamai is that it connects immediately then data transfer times out. With google, symptom involves both slow connection, and data transfer timing out. See amongst others: https://forums.he.net/index.php?topic=3281.0

HTTP 302 with multiple Location: headers?

2014-11-03 Thread Jeroen Massar
Ignoring the fact that Akamai IPv6 is broken on random nodes, thus you get either a working response or not from the same IP as some of the nodes are borked and thus just hang the connection.. (could be pmtu, hard to say without peeking inside the cluster) see amongst others:

Re: Saying goodnight to my GSR

2014-09-20 Thread Jeroen Massar
On 2014-09-20 16:18, Matthew Crocker wrote: [..] IOS (tm) GS Software (GSR-P-M), Version 12.0(30)S3, RELEASE SOFTWARE (fc2) [..] gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Thank you for finally taking a vulnerable system of the Internet! Greets, Jeroen

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 16:55, Ryan Shea wrote: Just one man's experience, but my YouTube performance over my Hurricane Electric tunnel has been strikingly poor lately Instead of saying that something is poor, you might want to do the operational/technical[1] thing and include things like: - IPv4

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 17:28, Ryan Shea wrote: I was attempting to determine the lowest-time-cost path to happy wife. Does your wife care it is IPv4 or IPv6 or just funny cat videos? I think your answer should be clear from that perspective. As somebody eager to post on NANOG though one would think it

Re: Best US Tunnelbroker for Youtube

2014-08-20 Thread Jeroen Massar
On 2014-08-20 18:21, Ryan Shea wrote: IRC is a good suggestion, thanks. They'll likely be helpful. I see no indication of any throttling from my ISP - I can blast data at full speed to my home from my server and work (with native v6 connections). Does that path between your $home and

Re: Applications that break when not using /64

2014-06-18 Thread Jeroen Massar
On 2014-06-18 12:31, Grzegorz Janoszka wrote: On 17/06/14 23:13 , Jeroen Massar wrote: Thus, can you please identify these applications so that we can hammer on the developers of those applications and fix that problem? I haven't done extensive testing. I have just tried to divide a /64

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-17 22:36, Grzegorz Janoszka wrote: On 2014-06-17 22:13, David Conrad wrote: On Jun 17, 2014, at 12:55 PM, Grzegorz Janoszka grzeg...@janoszka.pl wrote: There are still applications that break with subnet smaller than /64, so all VPS providers probably have to use /64 addressing.

Re: Ars Technica on IPv4 exhaustion

2014-06-17 Thread Jeroen Massar
On 2014-06-17 23:48, Jared Mauch wrote: On Jun 17, 2014, at 5:41 PM, Lee Howard l...@asgard.org wrote: [..] Can't tech news sites *please* run dual stack while they're spouting end-of-IPv4 stories? wishful thinking=on I would love to see a few more properties do IPv6 by default, such as

Re: Applications that break when not using /64

2014-06-17 Thread Jeroen Massar
On 2014-06-18 00:02, Matthew Petach wrote: [..] I tried to configure my FreeBSD box at home to use a /120 subnet mask. It consistently crashed with a kernel panic. Where is the bug report? I am fairly confident that that really should not be an issue, with the BSD stack being one of the

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:10, Randy Bush wrote: so how to folk protect yet access ipmi? it is pretty vulnerable, so 99% of the time i want it blocked off. but that other 1%, i want kvm console, remote media, and dim sum. currently, i just block the ip address chunk into which i put ipmi at the

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 14:23, Paul S. wrote: [..] On most ATEN chip based BMC boards from Supermicro, it includes a UI to iptables that works in the same way. You could put it on a public net, allow your stuff and DROP 0.0.0.0/0. But unless you have servers with those, I think the best way to go is

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 19:32, Nikolay Shopik wrote: On 02/06/14 20:56, Christopher Morrow wrote: so... as per usual: 1) embedded devices suck rocks 2) no updates or sanity expected anytime soon in same 3) protect yourself, or suffer the consequences seems normal. So I wonder why

Re: ipmi access

2014-06-02 Thread Jeroen Massar
On 2014-06-02 21:54, Brian Rak wrote: On 6/2/2014 3:47 PM, shawn wilson wrote: On Mon, Jun 2, 2014 at 3:19 PM, Nikolay Shopik sho...@inblock.ru wrote: Java only used for mouting images. KVM is transfered via VNC protocol iirc. They're not re-inventing the wheel, but I think KVM is

Re: oss netflow collector/trending/analysis

2014-05-02 Thread Jeroen Massar
On 2014-05-02 16:36, Matthew Galgoci wrote: [..] Is there anything else I've missed? A few folks here really seem to like nfsen/nfdump. For OSS that is pretty much it that really matters (maybe you could add Argus if you really want though). For a long long list, check out Simon Leinen's site:

Re: The FCC is planning new net neutrality rules. And they could enshrine pay-for-play. - The Washington Post

2014-04-25 Thread Jeroen Massar
On 2014-04-25 15:23 , Patrick W. Gilmore wrote: [..] While it is probably true that the gov't had a hand in the fact I have exactly one BB provider at my home, I am not even closed to convinced that a purely open market would not have resulted in the same problem. But thanx for pointing out an

Re: nanong list spam filtering

2014-04-24 Thread Jeroen Massar
On 2014-04-24 10:29 , Michael DeMan wrote: Hi All, Sorry being a bit off-topic and having a boring subject, but we really should clean up whatever has been going on with so much spam hitting this mailing list. NO - I am complaining about people who post things I disagree with or on

Re: 59.229.189.0/24

2014-03-24 Thread Jeroen Massar
On 2014-03-24 13:49, greg whynott wrote: [..] 4 1 ms 1 ms 1 ms 58.229.66.9 5 2 ms 1 ms 1 ms 58.229.66.105 6 7 ms 5 ms 3 ms 58.229.119.149 Seems you mean 58 instead of 59. Greets, Jeroen

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Jeroen Massar
On 2014-01-16 23:11, Nick Hilliard wrote: On 16/01/2014 21:22, Jon Lewis wrote: Also, at least of the ones I've dealt with, there is no verification of records as they're entered. on the RIPE IRRDB, there is validation, so you can't just go in and register route: objects for someone else's

Deadline TOMORROW to Apply to Represent the Technical Community at the Brazil Meeting and in 1Net

2014-01-09 Thread Jeroen Massar
For everybody who wants to dabble in politics that people on this list actually care about ;) Greets, Jeroen Original Message Subject:Deadline TOMORROW to Apply to Represent the Technical Community at the Brazil Meeting and in 1Net Date: Thu, 09 Jan 2014 16:04:01

Re: Help me make sense of these traceroutes please

2013-12-24 Thread Jeroen Massar
On 2013-12-25 00:16, Sam Moats wrote: Hello Nanog community, I would like to enlist your help with understanding this latency I'm seeing. You are likely seeing the effects of asymmetric routing. [..] Tracing route to xxx.yyy.ie [193.1.x.x] www.heanet.ie by chance? :) Though you could use

Re: IPv6 /48 advertisements

2013-12-18 Thread Jeroen Massar
On 2013-12-18 17:11 , Cliff Bowles wrote: I accidentally sent this to nanog-request yesterday. I could use some feedback from anyone that can help, please. Question: will carriers accept IPv6 advertisements smaller than /48? Our org was approved a /36 based on number of locations. In GRH

Re: Automatic abuse reports

2013-11-12 Thread Jeroen Massar
On 2013-11-12 16:58, Jonas Björklund wrote: Hello, We got often abuse reports on hosts that has been involved in DDOS attacks. We contact the owner of the host help them fix the problem. I also would like to start send these abuse report to the ISP of the source. Are there any

Re: iOS 7 update traffic

2013-09-23 Thread Jeroen Massar
On 2013-09-23 15:41 , Glen Kent wrote: BTW Linux distributions are available to download via bittorrent, I am very sure that you will be happy to see your customer's UPSTREAM links filled with that traffic... next to you having a shiny CDN and then having to do traffic to ISPs who do not have

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access right? :) Anybody not putting them behind a properly restricted firewall and/or VLAN is asking

Re: IPMI vulnerabilities

2013-07-02 Thread Jeroen Massar
On 2013-07-02 17:54 , Jamie Bowden wrote: From: Jeroen Massar [mailto:jer...@massar.ch] On 2013-07-02 16:51 , Steven Bellovin wrote: http://www.wired.com/threatlevel/2013/07/ipmi/ Capsule summary: watch out! Indeed! But it is should be logical, as IPMI is supposed to be for OOB access

Re: SixXS Contact

2013-07-01 Thread Jeroen Massar
[several replies in one (hence cc's) to not clutter the list with non-really-nanog stuff, but it kinda deserves a reply, reply-to set to where these things should be going in the first place] [TLDR: contact = i...@sixxs.net, mail queue is long, human time is limited, if you have lots of users

Re: gTLDs opened up

2013-06-19 Thread Jeroen Massar
On 2013-06-19 12:14, Owen DeLong wrote: You are, of course, free to criticize as you wish, but ideally, you should at least direct your criticism at those responsible. Indeed, you should point out the simple fact that anybody with a budget can simply buy their time to sound like they belong

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 13:01, david peahi wrote: Apologies for making what could be construed as an off topic, political comment, but doesn't everyone in the USA know by now that the PRC represents a dagger aimed at the economic and national security of America? A military invasion in slow motion as it

Re: huawei (ZTE too)

2013-06-13 Thread Jeroen Massar
On 2013-06-13 14:28, david peahi wrote: Last I heard NANOG stands for North American Network Operators Group. Anti-American comments are not welcome here.. (IMHO there was nothing 'anti-american' about my statement, though I guess it completely depends on what the definition of that would be;

PGP/SSL/TLS really as secure as one thinks?

2013-06-07 Thread Jeroen Massar
On 2013-06-07 06:50, Dan White wrote: [..] A nice 'it is Friday' kind of thought OpenPGP and other end-to-end protocols protect against all nefarious actors, including state entities. If you can't trust the entities where your data is flowing through because you are unsure if and where

Re: Network Research

2013-05-25 Thread Jeroen Massar
On 2013-05-25 14:09, James Bensley wrote: Hello everyone, I am performing some research on networking at present and want the input of the community and industry at large. I have created a small on-line survey and would be very grateful to anyone that could give 3 minutes to fill it out.

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 15:39 , Adam Vitkovsky wrote: to watch the latest Quad-HD movie Multicast -I'm afraid it has to be unicast so that people can pause/resume anytime they need to go... well you know what I mean Works fine too with multicast, for instance with FuzzyCast:

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 16:13 , fredrik danerklint wrote: to watch the latest Quad-HD movie Multicast -I'm afraid it has to be unicast so that people can pause/resume anytime they need to go... well you know what I mean Works fine too with multicast, for instance with FuzzyCast:

Re: The 100 Gbit/s problem in your network

2013-02-08 Thread Jeroen Massar
On 2013-02-08 17:03 , fredrik danerklint wrote: You really think people did not have problems with the 1mbit links they had back then? Yes, I do. And you really think that we won't have problems with Zillion-HD or whatever they will call it in another 20 years? I think that this is

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:04 , Shahab Vahabzadeh wrote: Hi everybody, Last two days I was under an interesting attack which comes from multiple sources to three of my ADSL users destination. You say that it comes from multiple sources to 3 of your DSL users. The below source/dest though shows that the

Re: DDoS Attacks Cause of Game Servers

2013-01-31 Thread Jeroen Massar
On 2013-01-31 08:53 , Shahab Vahabzadeh wrote: Those ip addresses I send were only sample, its 5 page :D and not only those addresses. And you are looking to target 128.141.X.Y its mine 128.141.0.0/16 is CERN in Switzerland. Thus not yours, but owned(*) by n...@cern.ch. (unless you work

securelogin.arubanetworks.com AAAA ::1 --- someone from Aruba who can fix that?

2012-12-04 Thread Jeroen Massar
Hi folks, For quite a few folks here on the list travel is a common thing, going into foreign wireless networks is too. Likely your laptop/tablet comes with IPv6 enabled per default, it is 2012 after all almost going 2013. And then you get to a silly hotspot and it does not work as the

Re: Six Strike Rule (Was: William was raided...)

2012-12-04 Thread Jeroen Massar
On 2012-12-04 11:51, Nick B wrote: In a related note, I wonder if the six-strike rule would violate the ISP's safe harbor, as it's clearly content inspection. As performed in France, what happens is that some copyright owner contacts the ISP that IP address a.b.c.d had accessed/served copyright

Re: William was raided for running a Tor exit node. Please help if you can.

2012-11-30 Thread Jeroen Massar
On 2012-11-30 13:51 , Joakim Aronius wrote: * Will Hargrave (w...@harg.net) wrote: On 29 Nov 2012, at 20:53, George Herbert george.herb...@gmail.com wrote: The assertion being made here, that it's somehow illegal (or immoral, or scary) for there to be not-completely-traceable internet

Remaining IPv6 hurdles (Was: Programmers...)

2012-11-30 Thread Jeroen Massar
On 2012-12-01 00:00, Dobbins, Roland wrote: On Nov 29, 2012, at 12:27 PM, Owen DeLong wrote: 60% of the world's population still isn't on the internet and I expect a significant fraction of that will be coming on in the next 2-4 years. I live and work in a part of the world which

Re: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2012-11-29 Thread Jeroen Massar
On 2012-11-29 13:53 , . wrote: On 29 November 2012 12:48, Dobbins, Roland rdobb...@arbor.net wrote: On Nov 29, 2012, at 6:47 PM, Bjørn Mork wrote: What's the proper term for software which happens to access the network? Just about anything, these days. ; 'Network-enabled' or

Re: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2012-11-28 Thread Jeroen Massar
On 2012-11-28 17:30 , david raistrick wrote: On Wed, 28 Nov 2012, Bjørn Mork wrote: Do you really want to run netowrking software written by someone incapable of setting up a test network? This doesn't have anything with tunnel brokers or native access to do at all. So the software

Re: Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2012-11-28 Thread Jeroen Massar
On 2012-11-28 18:26, Michael Thomas wrote: On 11/28/2012 09:00 AM, Jeroen Massar wrote: And still, if you as a proper engineer where not able to test/add IPv6 code in the last 10++ years, then you did something very very wrong in your job, the least of which is to file a ticket for IPv6

Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications....

2012-11-27 Thread Jeroen Massar
On 2012-11-27 20:21, mike wrote: On 11/26/12 9:32 PM, Mikael Abrahamsson wrote: The main problem with IPv6 only is that most app developers (most programmers totally) do not really have access to this, so no testing is being done. This is a point that is probably more significant than is

IPv6 is really there when SEO-style spammers want to start using it ;)

2012-11-09 Thread Jeroen Massar
Hi, As it is http://www.youtube.com/watch?v=kfVsfOSbJY0 ... (don't look if you have a video and audio enabled terminal ;) I just came across the following: 8-- I want to use IPv6 to test if my Marketing Referral System will work with this protocol. Since IPv4s are running low, it takes

Re: MTU issues s0.wp.com

2012-11-06 Thread Jeroen Massar
On 2012-11-06 13:33, Seth Mos wrote: Hi, Since about a week or so it's become impossible to reach wp.com content over IPv6. IPv4 content does work fine, using the IPv6 literal returns a 404 which is small enough to fit in a smaller 1480 byte MTU. I have another test site that has a

Re: IP tunnel MTU

2012-10-30 Thread Jeroen Massar
On 2012-10-30 11:19, Sander Steffann wrote: Hi, Certainly fixing all the buggy host stacks, firewall and compliance devices to realize that ICMP isn't bad won't be hard. Wait till you get started on fixing the security consultants. Ack. I've yet to come across a *device* that doesn't

Re: www.ipv6.facebook.com not loading)

2012-10-25 Thread Jeroen Massar
On 2012-10-25 09:18, Frank Bulk wrote: Since Wednesday at 1:48 pm Central www.ipv6.facebook.com has not been loading (though it's pingable). Does anyone know if this has been formally deprecated? I am getting NXDOMAIN for www.ipv6.facebook.com thus it likely is fully gone now:

Re: www.ipv6.facebook.com not loading)

2012-10-25 Thread Jeroen Massar
On 2012-10-25 09:45, Dobbins, Roland wrote: [..] ;; ANSWER SECTION: www.facebook.com. 49 IN CNAME www.c10r.facebook.com. www.c10r.facebook.com.39 IN 2a03:2880:2110:9f01:face:b00c:: Interresting, I was just now getting responses pointing

Re: Is a /48 still the smallest thing you can route independently?

2012-10-11 Thread Jeroen Massar
On 2012-10-11 23:02 , Jo Rhett wrote: I've finally convinced $DAYJOB to deploy IPv6. Justification for the IP space is easy, however the truth is that a /64 is more than we need in all locations. However the last I heard was that you can't effectively announce anything smaller than a /48. Is

Re: is CERNET part of the Internet?

2012-09-27 Thread Jeroen Massar
On 2012-09-27 11:23 , Eugen Leitl wrote: I'm trying to figure out whether CERNET http://en.wikipedia.org/wiki/CERNET is part of the official Internet, There is no 'official Internet', there is a 'view on the Internet'. Note that if you would do an eyeball count the 'official' one would be

Re: Announcing APNIC IP's in ARIN region

2012-09-25 Thread Jeroen Massar
On 2012-09-21 01:57, Brandon Wade wrote: Hello, I was wondering if there are any problems originating APNIC IP's in the ARIN region through transit providers? I have a Singapore-based prospect who would like to do business with us, but I'm not sure if I'll run into problems originating

Re: Real world sflow vs netflow?

2012-09-24 Thread Jeroen Massar
On 2012-09-24 14:48 , Joe Loiacono wrote: Peter Phaal peter.ph...@gmail.com wrote on 09/23/2012 12:23:57 PM: Exporting packet oriented measurements doesn't mean that you have to loose ingress/egress interface data. Note that you get these in NetFlow too. Depends on which version you pick or

Re: Throw me a IPv6 bone (sort of was IPv6 ignorance)

2012-09-21 Thread Jeroen Massar
On 2012-09-21 15:31 , Mark Radabaugh wrote: The part of IPv6 that I am unclear on and have not found much documentation on is how to run IPv6 only to end users. Anyone care to point me in the right direction? Can we assign IPv6 only to end users? What software/equipment do we need in

  1   2   3   >