Re: DNS resolving issues with AT Customer Resolvers
Hi, For my tested it did work with google but not several internal AT resolvers. A ticket has been created in one of the AT NOC departments. (after a 4 hour phone call) and I hope they can get to this soon. Sincerely, Mark Keymer On 7/8/2016 4:46 PM, Brian Henson wrote: Resolves here in Ohio and using 8.8.8.8 anycast address. on Timewarner On Fri, Jul 8, 2016 at 3:55 PM, Hiawatha Demby <hde...@email.unc.edu> wrote: C:\Users>nslookup bridgecatalog.com Server: UnKnown Address: 192.168.0.1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to UnKnown timed-out C:\Users>nslookup bridgecatalog.com 8.8.8.8 Server: google-public-dns-a.google.com Address: 8.8.8.8 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to google-public-dns-a.google.com timed-out C:\Users>nslookup bridgecatalog.com 68.94.156.15 Server: dns156r15.sbcglobal.net Address: 68.94.156.15 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to dns156r15.sbcglobal.net timed-out Looks like the AT server are unavailable and the host is unresolvable on my end. On 7/8/2016 3:36 PM, Mark Keymer wrote: Hi all, I have a client bridgecatalog.com and it seems like customers with AT are unable to resolve his Domain. Maybe I am just overlooking something here but it seems like all should be working. Looking at outside tool things look ok too. https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fdnscheck.pingdom.com%2f%3fdomain%3dbridgecatalog.com=01%7c01%7chdemby%40email.unc.edu%7ca1a111c28862421e835f08d3a7672759%7c58b3d54f16c942d3af081fcabd095666%7c1=OhVtZs8EqOGddhZh26uvcnMLBBZ5CiUTdeX9FXy5twk%3d (except the SOA hostmas...@solarek.com e-mailing issues I see now) Other domains seem to work fine. So it isn't just everything is down. One of the end-users I was working with currently has an ip of 99.7.225.25. Power cycling the modem did not change thing. I also flushed DNS. If I change to google's open resolvers things work fine. But not with default resolvers to client. Anyone at AT that could check that the resolver's your clients are using are able to resolve. (Home / SMB connections, etc) I am not sure the best way to go about trying to look into this issue if other have suggestion I would also appreciate it. Sincerely,
Re: DNS resolving issues with AT Customer Resolvers
The specific DNS server that are not resolve for my client are. Primary DNS 68.94.156.9 Secondary DNS 68.94.157.9 If any AT people out there that can look into this. Thank you. Sincerely, Mark Keymer On 7/8/2016 12:36 PM, Mark Keymer wrote: Hi all, I have a client bridgecatalog.com and it seems like customers with AT are unable to resolve his Domain. Maybe I am just overlooking something here but it seems like all should be working. Looking at outside tool things look ok too. http://dnscheck.pingdom.com/?domain=bridgecatalog.com (except the SOA hostmas...@solarek.com e-mailing issues I see now) Other domains seem to work fine. So it isn't just everything is down. One of the end-users I was working with currently has an ip of 99.7.225.25. Power cycling the modem did not change thing. I also flushed DNS. If I change to google's open resolvers things work fine. But not with default resolvers to client. Anyone at AT that could check that the resolver's your clients are using are able to resolve. (Home / SMB connections, etc) I am not sure the best way to go about trying to look into this issue if other have suggestion I would also appreciate it. Sincerely,
DNS resolving issues with AT Customer Resolvers
Hi all, I have a client bridgecatalog.com and it seems like customers with AT are unable to resolve his Domain. Maybe I am just overlooking something here but it seems like all should be working. Looking at outside tool things look ok too. http://dnscheck.pingdom.com/?domain=bridgecatalog.com (except the SOA hostmas...@solarek.com e-mailing issues I see now) Other domains seem to work fine. So it isn't just everything is down. One of the end-users I was working with currently has an ip of 99.7.225.25. Power cycling the modem did not change thing. I also flushed DNS. If I change to google's open resolvers things work fine. But not with default resolvers to client. Anyone at AT that could check that the resolver's your clients are using are able to resolve. (Home / SMB connections, etc) I am not sure the best way to go about trying to look into this issue if other have suggestion I would also appreciate it. Sincerely, -- Mark Keymer
Charter Communication internet issues in SE Washington State.
Hi All, I was just wondering if anyone on the list might have some info on the ongoing issues with Charter in SE Washington state? I have heard that the issues are in Yakima WA. Off-list or on-list replies welcomed. Sincerely, -- Mark Keymer
Re: M$ no v6 or just me?
Umm, ok so your saying you get records for microsoft.com I am Not talking about www.microsoft.com I agree that it has records. But the request was for microsoft.com And as noted other domains without the WWW might not have Records. Sincerely, Mark Keymer CFO/COO Vivio Technologies On 7/14/2015 2:22 PM, a.l.m.bu...@lboro.ac.uk wrote: Hi, No. My DNS (using the roots) gets it right. ;-) so if you choose google DNS you dont see the right stuff..in which case its your DNS and not microsoft or Akamai not doing IPv6 ;-)same true for OpenDNS? likely... alan
Re: M$ no v6 or just me?
I agree that www.microsoft.com passes. But it looks like microsoft.com does not. sincerely, Mark Keymer CFO/COO Vivio Technologies On 7/14/2015 12:39 PM, Jared Mauch wrote: www.microsoft.com seems to pass these checks for me: http://ipv6-test.com/validate.php Perhaps they have some other site that doesn't have it enabled? - Jared On Tue, Jul 14, 2015 at 07:33:19PM +, Nicholas Warren wrote: Surely Microsoft has IPv6 connectivity? Is there a problem with my dns, or is Microsoft not available over v6? Thanks, Nich
More Godaddy DNS and whois server issues?
Hi, So this started a little while ago but seems to be getting worse. What I am seeing is dns servers over at godaddy not replying however I seem to be able to traceroute ok to them. Also I have started to see that the whois.godaddy.com servers also seem to be having issues as well with Whois information is currently unavailable. Please try again later. Anyone else also seeing issues this morning? And able to confirm the issue is with godaddy? Sincerely, -- Mark Keymer
Re: More Godaddy DNS and whois server issues?
Hi, They all came back later and are good now. But next time if it happens I will send some of the NS servers and domains. Sincerely, Mark On 9/4/2014 9:26 AM, staticsafe wrote: On 9/4/2014 12:22, Mark Keymer wrote: Hi, So this started a little while ago but seems to be getting worse. What I am seeing is dns servers over at godaddy not replying however I seem to be able to traceroute ok to them. Also I have started to see that the whois.godaddy.com servers also seem to be having issues as well with Whois information is currently unavailable. Please try again later. Anyone else also seeing issues this morning? And able to confirm the issue is with godaddy? Sincerely, Do you have any particular NSes and/or domains we can test with?
Re: Facebook down?
Was down here too. But I see the homepage now. However, http://www.downforeveryoneorjustme.com/facebook.com still shows down. So maybe it is just starting to come up for some? What I would love to know what happened. :) Sincerely, Mark On 9/3/2014 12:48 PM, Warren Bailey wrote: I¹m getting a ton done right now too.. Hasn¹t been working since my first attempt about 20 minutes ago. On 9/3/14, 12:45 PM, Marshall Eubanks marshall.euba...@gmail.com wrote: http://www.downforeveryoneorjustme.com/facebook.com It's not just you! *http://facebook.com* http://facebook.com/ looks down from here. Relevant because of the likely increase in productiviity Regards Marshall Eubanks
Re: BGPMON Alert Questions
So, Just tired e-mailing to that address. *Delivery has failed to these recipients or groups:* indriana.triyunianingt...@indosat.com mailto:indriana.triyunianingt...@indosat.com The recipient's mailbox is full and can't accept messages now. Please try resending this message later, or contact the recipient directly. Sincerely, Mark Keymer CFO/COO Vivio Technologies On 4/2/2014 1:40 PM, Aris Lambrianidis wrote: Contacted ip@indosat.com about this, I urge others to do the same. --Aris On Wed, Apr 2, 2014 at 9:33 PM, Andrew (Andy) Ashley andre...@aware.co.thwrote: Hi All, I am a network admin for Aware Corporation AS18356 (Thailand), as mentioned in the alert. We operate a BGPMon PeerMon node on our network, which peers with the BGPMon service as a collector. It is likely that AS4761 (INDOSAT) has somehow managed to hijack these prefixes and CAT (Communications Authority of Thailand AS4651) is not filtering them, hence they are announced to us and are triggering these BGPMon alerts. I have had several mails to our NOC about this already and have responded directly to those. I suggest contacting Indosat directly to get this resolved. AS18356 is a stub AS, so we are not actually advertising these learned hijacked prefixes to anyone but BGPMon for data collection purposes. Thanks. Regards, Andrew Ashley Office: +27 21 673 6841 E-mail: andre...@aware.co.th Web: www.aware.co.th On 2014/04/02, 21:05, Vlade Ristevski vrist...@ramapo.edu wrote: I just got the same alert for one of my prefixes one minute ago. On 4/2/2014 2:59 PM, Frank Bulk wrote: I received a similar notification about one of our prefixes also a few minutes ago. I couldn't find a looking glass for AS4761 or AS4651. But I also couldn't hit the websites for either AS, either. Frank -Original Message- From: Joseph Jenkins [mailto:j...@breathe-underwater.com] Sent: Wednesday, April 02, 2014 1:52 PM To: nanog@nanog.org Subject: BGPMON Alert Questions So I setup BGPMON for my prefixes and got an alert about someone in Thailand announcing my prefix. Everything looks fine to me and I've checked a bunch of different Looking Glasses and everything announcing correctly. I am assuming I should be contacting the provider about their misconfiguration and announcing my prefixes and get them to fix it. Any other recommendations? Is there a way I can verify what they are announcing just to make sure they are still doing it? Here is the alert for reference: Your prefix: 8.37.93.0/24: Update time: 2014-04-02 18:26 (UTC) Detected by #peers: 2 Detected prefix: 8.37.93.0/24 Announced by: AS4761 (INDOSAT-INP-AP INDOSAT Internet Network Provider,ID) Upstream AS: AS4651 (THAI-GATEWAY The Communications Authority of Thailand(CAT),TH) ASpath: 18356 9931 4651 4761 -- Vlad
Re: DNS Resolving issues. So for related just to Cox. But could be larger.
Thank you to the on and off lists replies. The DNS servers are not my choice to have them that way. But I will mention that to my client. It looks like Cox is now resolving things as it should be for this domain. Sincerely, Mark Keymer CFO/COO Vivio Technologies On 3/5/2014 4:52 AM, Rob Seastrom wrote: Paul S. cont...@winterei.se writes: For all it's worth, it might be Cox ignoring TTLs and enforcing their own update times instead. Wait 24-48 hours, and it should probably fix it all up. Possibly. I'm not seeing anything majorly broken with your system except the SOA EXPIRE being ridiculously large. Nowhere even close to ridiculously large. 360 (1 hours, 41 days) is the historical example value in RFC 1035. It's a bit larger than current recommended practices (2-4 weeks) but I wouldn't fault anyone for using that value nor would I expect any nameserver software to malfunction when confronted it. Besides, that value only matters to secondary nameservers. Speaking of that... ;; ADDITIONAL SECTION: ns1.nineplanetshosting.com. 172800 IN A 199.73.57.122 ns2.nineplanetshosting.com. 172800 IN A 199.73.57.122 I think OP ought to approach his hoster with a cluebat. Not just on the same subnet but the same address? Really. -r
DNS Resolving issues. So for related just to Cox. But could be larger.
Hi Everyone, So I have a client who moved a domain specifically periodforgood.com to a new VPS with our company. DNS has been updated and the TTL time is 4 hours so things should all be updated but something might still be wrong. Looking for help / confirmation that things look good. And better yet if someone from Cox and take a look. Our client uses Cox for there home internet and sometimes the domain resolves and sometimes it does not. We found they have the following IP's in Cox's network that are being used to resolve domains. 68.105.28.11 68.105.28.12 68.105.29.12 After doing many nslookups via a remote session to there computer we found that the top 2 IP's never resolve the periodforgood.com domain and we found that the third one will about 20%-40% of the time resolve it. We have gone to several DNS testing tools and all seems to be in order. If you dig or nslookup directly to the DNS servers that are used for the domain it seems to always respond. I admit I might just be overlooking something myself and will feel dumb once someone points it out to me. But if you can point it out to me that would be great! Also note that it looks like those DNS resolvers are blocked from outside lookups which is good. So maybe someone with some eyeballs inside or otherwise can help out? Sincerely, -- Mark Keymer CFO/COO Vivio Technologies
[Off-Topic] Ubersmith
Hi Everyone, I know this is a bit off topic. And I am completely open to someone giving me a link to a list that might be better to talk about Ubersmith. However I also know that Many of you might have some feedback about Ubersmith as well. ;) Basically, My company has been looking for some possible new software to run our company on vs custom build software along with several different software pages. We came across Ubersmith are and checking it out now. On the surface it looks like it could combine some of our current app into a nice single point application. But I would LOVE to get some feedback on what people think about it. And/or if there is something similar that I should be looking into. Looking for something Enterprise like. NOT WHMCS! Off-list replies are more then welcome. Thank you in advance. -- Mark Keymer CFO/COO Vivio Technologies
Re: [Off-Topic] Ubersmith
Hi James, Looking at the online billing / payment aspect, Along with some of its other feature. IP tracking Service tracking. Billing for cloudstack and integration with it along with Xenserver. The integrated ticketing system looks Cool too. Overall looking for a tool to manged customers and for customers to manage there servers / infrastructure along with billing of servers. Probably more as well but those are some highlights. Sincerely, Mark Keymer CFO/COO Vivio Technologies On 1/9/2014 1:04 PM, James Marcus wrote: I used it, when I was hosting with Voxel and I thought it was pretty cool. I think Ubersmith was developed at Voxel and then spun off, is that correct? What do you want to do with it? James On Jan 9, 2014, at 3:26 PM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Mark Keymer m...@viviotech.net I know this is a bit off topic. And I am completely open to someone giving me a link to a list that might be better to talk about Ubersmith. However I also know that Many of you might have some feedback about Ubersmith as well. ;) I know that E-Solutions, at 400 N Tampa, was running Uber before they got bought out by Knology (now WOW); I don't know if they still are. They were pretty happy with it, I gather, though like everything it has some pinch points. Cheers, -- jra -- Jay R. Ashworth Baylink j...@baylink.com Designer The Things I Think RFC 2100 Ashworth Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274
Possible DNS issues at Networksolutions aka WORLDNIC.COM?
Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, -- Mark Keymer
Re: nanog.org website - restored
I donno, I am thinking only if we get Super Cool Extra Special lighting around the Nanog server! ;) Hehehe, Sincerely, Mark On 10/8/2013 8:10 AM, Ryan Pavely wrote: I vote we go with Alex Rubenstein's offer to host.. Ryan Pavely Net Access Corporation http://www.nac.net/ On 10/7/2013 9:43 PM, Adam Newman wrote: I would be happy to donate a VM or two on my personal stack. Contact me if interested. -Adam Original message From: Phil Bedard bedard.p...@gmail.com Date: 10/07/2013 5:51 PM (GMT-08:00) To: Michael Thomas m...@mtcc.com,nanog@nanog.org Subject: RE: nanog.org website - restored Yeah isn't there some cloud provider like Amazon, Rackspace, or MS willing to donate some BW and CPU cycles? Would be a drop in the bucket. Phil From: Michael Thomas Sent: 10/7/2013 19:57 To: nanog@nanog.org Subject: Re: nanog.org website - restored On 10/7/13 4:24 PM, Andrew Koch wrote: Working with onsite personel to upgrade the server with additional memory failed during the first announced maintenance. Compatible memory was located and tested leading to the second maintenance when it was successfully installed. At this time we have increased the memory on the server and are at a stable point. How primative. When i want more memory I just log into the provider's web console and tell it I want more geebees. Mike
Re: One of our own in the Guardian.
He might have been talking about Condo Internet if he is in the Seattle area. They deliver 1Gig connections to your Condo/Apartment, if your in one of the buildings they service. Also I wanted to mention that I have only seen,heard and experienced good things from Xmission. It is nice to see how they have been handling these issues. Sincerely, Mark On 7/13/2013 9:32 PM, Grant Ridder wrote: Someone I know in Washington state has 100/100 at home and made the comment to me a year ago that it was one of the slower speeds offered. I am not sure who his ISP is however. -Grant On Sat, Jul 13, 2013 at 9:20 PM, Joe Hamelin j...@nethead.com wrote: Jima said: Really, who has 100/100 at home? Oddly, those living in Grand Coulee, WA. I went there once to setup corporate connectivity for a regional tire store. They ordered the minimal drop, 50/50Mbs. One of the tire changers there told me that he had 100/100 at home for $50/month. This was a town without T-Mobile service. I had to haul out the butt set and clip on to the business POTS lines to turn up the VPN. Most of rural Central Washington has very good fiber connectivity. Forward looking Public Utility Districts FTW! -- Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474
Re: PDU recommendations
I was wondering if anyone had experience with Geist's outlet monitoring product? I recently started using there basic PDU's and so far so good. But am wondering if anyone has feed back on Geist's outlet monitoring product. Mark Keymer
Charter Issues in SE Washington State.
Hi, Just wondering if there was anyone around that might know what is up with Charter Internet in South Eastern Washington State (Walla Walla / Tri-Cities). Could even be a larger area that is effected. As usual the normal support doesn't really know anything. On the plus side the lady I got a few hours ago was pleasant on the phone. I thought I would post here vs Outages as this issue is probably only effecting a small population. One which I live in and use them at home. (My datacenter and upstreams are not having issues that I know of) Sincerely, Mark
Re: Amazon Abuse contact
Thank you for everyone's help. We were contacted by Amazon today. Sincerely, Mark Keymer On 12/6/2012 1:37 PM, Enrico Sorge wrote: http://aws.amazon.com/security/vulnerability-reporting/ On Tue, Dec 4, 2012 at 11:40 PM, Mark Keymer m...@viviotech.net mailto:m...@viviotech.net wrote: Hi, If there is a Amazon Abuse person our there or if someone has a good contact to someone at Amazon can you message me off-list. We have put in some Abuse request a couple of days ago and have not heard back. It would be great to talk with someone about an issue effecting one of our clients and the use of Amazon. (Cloud instances I believe) Thank you in advance. Sincerely, -- Mark Keymer CFO/COO Vivio Technologies 509-593-4207 x1002 tel:509-593-4207%20x1002
Re: Data Center Flooring
Thank you for the information, both on and off-list. It has been very helpful. Also it looks likes the current tiles are VCT so no Asbestos currently. Sincerely, Mark Keymer On 10/2/2012 4:36 AM, Alex Rubenstein wrote: We have operated with several types of floor in four locations over the last 15 years (Raised, VCT, painted, and polished concrete). Personally, I like the look of the polished concrete the best. It's relatively cheap and easy to do. Epoxy and VCT tend to get hurt over time and require considerably maintenance. If you want any pics, let me know. From a static electricity aspect, we have never had a problem with any flooring ever - that is more about humidity level and proper grounding. -Original Message- From: Mark Keymer [mailto:m...@viviotech.net] Sent: Monday, October 01, 2012 5:12 PM To: North American Network Operators' Group Subject: Data Center Flooring We recently took possession of a building which part of it was used for a teleco room by a Cellular company. The floor looks like crap. So we were thinking about maybe just putting another new flooring on top. Currently it has some type of tile looking flooring. I have been told the the entry way into the building is Anti-static. However No idea on the actual data center flooring. I know in the past there have been talks about datacenter flooring. (Even Carpet if I recall). What I am wondering is does the actual datacenter flooring need to be like Static Dissipating. (Found something that does that for about $10.00 a Sqr foot). Or can it just be non static generating or like non conducting. Not quite sure the wording to use here. Any thoughts on this would be appreciated on or off the list. Sincerely, -- Mark Keymer
Data Center Flooring
We recently took possession of a building which part of it was used for a teleco room by a Cellular company. The floor looks like crap. So we were thinking about maybe just putting another new flooring on top. Currently it has some type of tile looking flooring. I have been told the the entry way into the building is Anti-static. However No idea on the actual data center flooring. I know in the past there have been talks about datacenter flooring. (Even Carpet if I recall). What I am wondering is does the actual datacenter flooring need to be like Static Dissipating. (Found something that does that for about $10.00 a Sqr foot). Or can it just be non static generating or like non conducting. Not quite sure the wording to use here. Any thoughts on this would be appreciated on or off the list. Sincerely, -- Mark Keymer
Re: Transport Fee's (Taxes and random telecom fee's)
I had to deal with this with an upstream once that was taxing me. Finally got it all worked out after sending in copies of the law and getting the CEO involved. However a year or two later I started to get taxed again when the company was bought out. Had to resend copies of the law (Fed and State) over to them again. I also had the full conversation with the previous CEO so I sent that over as well as he was now a VP under the new company. Do to how much of a hassle I had to go through, I am guessing they still keep charging tax on other clients that probably should not have been! Sincerely, Mark Keymer On 9/14/2012 8:15 AM, Faisal Imtiaz wrote: All Communication Circuits are subject to Communication Taxes, as per Tax laws of that State. Having said that... if this communication circuit is carrying Internet Traffic, you can contact the Carrier and Ask them to provide you the forms so that you can Claim ITFA / ITNA Exemption ...(if you are not in a grandfathered state) Google for Internet Tax Freedom Act and review the Wikipedia article for more details and history. In regards to Dark Fiber. Active Circuits = i.e. circuits where signaling is provided by the Carrier are considered to be Communication Circuits and are subject to Communication taxes, as per the State Laws. Dark Fiber is considered to be an asset purchase .. i.e. like leasing Office Space/ Automobile / or Machinery... and as such the Lease Payments are subject to Sales Taxes only (again, details may vary from State to State). Regards. Faisal Imtiaz Snappy Internet Telecom 7266 SW 48 Street Miami, Fl 33155 Tel: 305 663 5518 x 232 Helpdesk: 305 663 5518 option 2 Email: supp...@snappydsl.net On 9/14/2012 10:29 AM, A. Pishdadi wrote: Hello Everyone, We purchase 10Gig waves for transport out of our datacenter and are trying to figure out why the taxes on the circuits are so much. We are paying around 60% additional in taxes and fee's on top of the cost of the circuit. Ofcourse when we were negotiating pricing , it seemed like a great price until we got our first bill, they forgot to mention that we would be paying such fees. It seems like these taxes would be for companies who would be using transport services for voice, but we are all data. Is there any way to get a tax exempt status? How come the same fee's do not apply to dark fiber? We are in process of getting dark fiber to replace the transport circuits but its going to take quite some time as we have a few more years on some of the contracts. The dark fiber we do have there is no taxes at all. Can anyone shed any light on this?
Re: Anyone have experience with Adconion Direct?
Hi, I guess I should clarify a bit more on my comments about ROKSO at Spamhaus. Spamhaus says here http://www.spamhaus.org/faq/section/ROKSO%20FAQ#159 that people that have been thrown off 3 ISP due to spamming or providing spam services get on the ROKSO. So I tried to contact them to see what the process was for reporting that. If someone here knows how to do that and would like to share that would be great. I do agree that to get delisted in the RBL etc they are responsive. Also per my main point I wanted to thank those of you that got back with me about Adconion Direct. Sincerely, Mark On 3/16/2012 2:51 AM, Suresh Ramasubramanian wrote: If a company has a ROKSO record, you don't want to host them. And spamhaus IS responsive. Yes they don't take spam reports from people - they got their own traps. They ARE responsive to requests for removal where the request checks out and meets their criteria. On Fri, Mar 16, 2012 at 12:06 AM, Mark Keymer m...@viviotech.net mailto:m...@viviotech.net wrote: Also along the lines of spammers and or similar activities is there a good resource for looking up people/companies that might be not so legit? I know of the ROKSO that spamhaus has but from what I have seen it is hard to even report spammer to them and wasn't sure how active that was getting updated these days. -- Suresh Ramasubramanian (ops.li...@gmail.com mailto:ops.li...@gmail.com)
Anyone have experience with Adconion Direct?
I was wondering if anyone has any experience with Adconion Direct? It is the standard we want a server with lots of IP's. And I am thinking he is probably a spammer or what not. However unlike most of the requests we get like this, they look to have the most legit looking profile I have seen. I am thinking they are a company I don't want to host. But I thought I would check with the community here and see what others might know about these guys. Also along the lines of spammers and or similar activities is there a good resource for looking up people/companies that might be not so legit? I know of the ROKSO that spamhaus has but from what I have seen it is hard to even report spammer to them and wasn't sure how active that was getting updated these days. Sincerely, Mark
Re: time sink 42
Hi Randy, I know where you are coming from. I have going throw many types. Currently we use the Bothers P-Touch with the TZe Tape with the specific Cable/Wire Labels tape. It works ok and the labels last much longer then the previous masking tape with sharpe method. Overall I pay more money then I would like for the machine and the Tape. But it seems to work well and that does mean something. One of my techs have been look at the TekGun - Cable Labeling System for cables. It does look kind of cool. Anyone here have experience with that TekGun and what are your thoughts on it? Mark Keymer CFO/COO Vivio Technologies On 2/16/2012 1:08 PM, Randy Bush wrote: ok, this is horribly pragmatic, but it's real. yesterday i was in the westin playing rack and stack for five hours. an horrifyingly large amount of my time was spent trying to peel apart labels made on my portable brother label tape maker, yes peeling the backing from a little label so remote hands could easily confirm a server they were going to attack. is there a trick? is there a (not expensive) different labeling machine or technique i should use? randy
Re: Possible New Zero Day Microsoft Windows 3389 vulnerability - outbound traffic 3389
Hi, We have had 2 of the below hit us this week. First time was apx 11:20am 1/10/2012 (PST). The 2nd was 1/12/2012 (Yesterday) 4:45pm. We had done some research and had already planed to switch to Network Level Authentication (NLA) as it looks like that would help with the screen not getting dumped. Unfortunately we had not done the change to that yet as we were getting looking for and found a new RDP client on linux that would support it. However last night we did start doing the changes to NLA. I am not saying NLA is a fix or that it is the best option. Just one of the things we are trying. When we can, locking down access to the RDP port I think would be best. Ohh, as for the destination. The first day was to 221.251.194.42. Yesterday was for 115.236.185.167. Sincerely, Mark Keymer On 1/13/2012 4:36 AM, James Braunegg wrote: Hey All, Just posting to see if anyone has seen any strange outbound traffic on port 3389 from Microsoft Windows Server over the last few hours. We witnessed an alarming amount of completely independent Microsoft Windows Servers, each on separate vlan and subnets (ie all /30 and /29 allocations) with separate gateways on and completely separate customers, but all services were within the same 1.x.x.x/16 allocation all simultaneously send around 2mbit or so data to a specific target IP address. The only common link was / is terminal services port 3389 is open to the public. Obviously someone (Mr 133t dude) scanned an allocation within our network, and like a worm was able to simultaneously control every Microsoft Windows Server to send outbound traffic. Microsoft Windows Servers within the 1.x.x.x/16 allocation which were behind a firewall or VPN and did not have public 3389 access did not send the unknown traffic Would be very interested if anyone else has seen this behavior before ! Or is this the start of a lovely new Zero Day Vulnerability with Windows RDP, if so I name it ohDeer-RDP A sample of the traffic is as per below, collected from netflow Source Destination Application Src Port Dst x.x.x.x/1658.162.67.45 ms-wbt-server 3389 51534TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 52699TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 60824TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 51669TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 49215TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 62099TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 65429TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 51965TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 50381TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 59379TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 58103TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 59514TCP x.x.x.x/1658.162.67.45 ms-wbt-server 3389 58298TCP This occurred around 10:30pm AEST Friday the 13th of January 2012 We had many other Microsoft Windows Servers in other 2.x.x.x/16 IP ranges which were totally unaffected. Kindest Regards James Braunegg W: 1300 769 972 | M: 0488 997 207 | D: (03) 9751 7616 E: james.braun...@micron21.commailto:james.braun...@micron21.com | ABN: 12 109 977 666 [Description: Description: Description: M21.jpg] This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.
In need of a Microsoft Postmaster
I am in great hopes that a Microsoft Postmaster could get in contact with me. This is dealing with a delisting of a banned IP blocked using Blocklist 3, mail from IP banned My client is e-mailing a vendor of theirs who's mail goes to mail.messaging.microsoft.com We have submitted a request to delist it but have not heard back from anyone for about 2 weeks now. Our client is up in arms and all that. There has been no know reasons for why the ban would have taken place. It is possible this is an old ban from before we had the IP space which we got 1-2 years ago. :( Sincerely, Mark Keymer CFO/COO Vivio Technologies
What do you do when your Home ISP is down?
I am wondering what some of you guys do when your home ISP is down. At least those of you that don't give yourself internet. I myself have a cable provider at home that I use. And I find it quite frustrating to call and report issues in there network, because the people in the call center have you do the same things every time and are not very technical. Just the other week I could see fairly clearly that I was getting routed through there network and then started to have issues in a town about 3 hours away. I tried to explain this to the rep but they thought we needed to reboot my modem. Surprise that didn't work. I mostly called just to put in a FYI having issues here, please have the smart people look into it. It is my understanding that they need to get X amount of calls before things get escalated. Granted I am sure they monitor there network too. But I called about 10 mins after the routing issues started to happen and there was no notifications that there was any issues. Even after being on the phone with them for 20? mins. Still they showed all is good and that it must just be me. I know we have a wide range of people here some of which work for my Home ISP. and would love some feedback. Sincerely, Mark Keymer
Looking for Postmaster contact for js.pentagon.mil
We have a client that we resent moved to some new address space (We have had the the space for a couple of years now) However it looks like the mail server for js.pentagon.mil are droping all packet to them. :( If anyone had some leads on a way to contact them. Please contact me off-list. We did try the number in the whois for the IP. The phone rang and rang. :( Thank you all. Sincerely, Mark Keymer
Re: Found: Who is responsible for no more IP addresses
What I don't understand is I can only guess they must have a IT team. And Maybe even 1 or more people that view this list. Why don't they just talk to there own staff about the issues? Maybe one of the IT guess saw the issues talked about the articles and contacted the news team about the bad info. I donno. I agree they kind of did a poor job on this. If you work at FOX maybe you should help get the news guys on the right page. :) Sincerely, Mark On 1/27/2011 11:51 AM, George, Wes E [NTK] wrote: -Original Message- From: Jay Ashworth [mailto:j...@baylink.com] Sent: Thursday, January 27, 2011 2:06 PM To: NANOG Subject: Re: Found: Who is responsible for no more IP addresses - Original Message - From: Brian Johnson bjohn...@drtel.com To be clear, FOX screwed this up big time, but that doesn't mean we all need to get out our personal/political pitchforks and run them out of town. Take your Ritalin. :-) Fox didn't screw up, for a change, and Vint's quote appears in many other news sources. Apparently, I'm the only one on Nanog who knows about this new thing called The Google. :-) Thinking that Fox News is not a reputable news source is not, indeed, an opinion attributable *solely* to non-Republicans, and indeed, it's easy to prove in a documentary, non-partisan fashion. [WES] Don't kid yourself, defending a reputable news organization for not properly checking their facts on a technical story before publishing is politically motivated too, especially when you try to imply that being willing to call out inaccurate (technical) info in the news is somehow related to one's political party. The article that everyone is causing everyone to make fun of Fox news for says nothing about Vint. Fox news has posted two separate articles, both of which have been factually incorrect. http://www.foxnews.com/scitech/2011/01/26/internet-run-ip-addresses-happens-anyones-guess/ and http://www.foxnews.com/scitech/2010/07/26/world-run-internet-addresses-year-experts-predict/ They at least corrected the first one - Editors' Note: An earlier version of this story erroneously described an IP address as consisting of four digits, rather than four sets of digits, and inaccurately described the IP address. This story has been updated to reflect the correction. But this gem still exists in the first article: Web developers have compensated for this problem by creating IPv6. At least there's *probably* some web developers at IETF that might have had a hand in creating IPv6, so that one's not technically incorrect... The second one from several months ago is still borked: IPv4, ... the unique 32-digit number used to identify each computer, website or internet-connected device. ... The solution to the problem is IPv6, which uses a 128-digit address. So, first it was 32 digits, then it was 4 digits... FWIW, Marketplace (on NPR) did a story the other night too. It wasn't necessarily incorrect, but it was so dumbed down that they managed to talk about IPv4 exhaustion without mentioning the words IPv4 or IPv6 http://marketplace.publicradio.org/display/web/2011/01/25/pm-internet-running-out-of-digital-addresses/ Wes George
Re: US hunters shoot down Google fibre
Hi Kevin, That is easy. Tree Climbing Spurs / Tree Climbing Spikes A quick Google search found these for sale. http://wesspur.com/spurs/spurs.html :) Sincerely, Mark Kevin Neal wrote: How are the guys sent out on cross-country skis going to get up to the fiber to repair it? I'm sure that the cable isn't low enough for them to reach it without a ladder, bucket truck, helicopter all of which you don't pack in on skis... -Kevin On Tue, Sep 21, 2010 at 12:02 PM, Seth Mattinen se...@rollernet.us wrote: On 9/21/2010 10:52, Holmes,David A wrote: Modern telephone pole aerial fiber uses all dialectric self-supporting (ADSS) technology, where the self-supporting component consists primarily of aramid yarn, the same material used for bullet-proof vests. This makes for an extremely light weight, almost indestructible fiber bundle. My guess is that ADSS fiber would deflect any bullets, or it would take a very good marksman using a very high caliber weapon to actually sever an aerial fiber. Now in the case described below where optical ground wire (OPGW) fiber is used as a component in the ground wire running at the top of high voltage transmission towers, it may be possible to hit the insulators at the top of the towers, but the ground wire itself is usually armored, with ADSS inside. Seems far-fetched to me. Back in my ISP days it was more common for people to take pot shots at remote equipment cabinets than the cable/fiber itself. Any field enclosure is as easy a target as your average bullet-ridden road sign. Although this was extremely rare; I can only recall one instance where it was the direct cause of an outage. ~Seth
Re: ARIN IP6 policy for those with legacy IP4 Space
Hi, I guess I am confused. Don't you have to pay for IP4 space? I know I am still fairly new to things. So maybe I just don't get it. Sincerely, Mark Antonio Querubin wrote: On Wed, 7 Apr 2010, Kevin Stange wrote: How much IPv6 address space were they expecting? I have trouble envisioning any operation that could require more than a /32 immediately that can't afford to pay $4500 per YEAR. Amount of address space wasn't the problem. The application was actually approved by ARIN. However, fighting for a line in the budget for the unexpected fee(s) and the prospect of having to push the RSA through state government lawyers was enough to dissuade them that IPv6 just wasn't important enough at this time. Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: t...@lava.net
AOL Postmaster
Hi, If at all possible can a AOL Postmaster please get a hold of me. I have a client that co-lo's with use and we do the support for them and we need some help on getting mail to be delivering again to AOL. Thank You in advance. Sincerely, Mark Keymer
