The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread NANOG
We recently purchased new IP addresses from ARIN, with plans on using one of them for our external and internal email delivery. We set up a reverse lookup and a SPF record for the newly purchased IP to prevent being classified as spam. We tested the functionality of the PTR and SPF record

mlb.com Geolocation clue/contact needed

2013-09-18 Thread Heather Schiller
Anyone have a contact at mlb.com that could help resolve an ip geolocation issue? (Networking, db.. or someone who can help find the right folks) Alternatively, anyone know who mlb.com buys geolocation data from? It's related to their baseball game streaming/subscription service. Whitelisting

Re: [liberationtech] Brazil Looks to Break from U.S.-Centric Internet

2013-09-18 Thread Eugen Leitl
- Forwarded message from Bill Woodcock wo...@pch.net - Date: Wed, 18 Sep 2013 09:25:13 -0700 From: Bill Woodcock wo...@pch.net To: liberationtech liberationt...@lists.stanford.edu Subject: Re: [liberationtech] Brazil Looks to Break from U.S.-Centric Internet X-Mailer: Apple Mail (2.1508)

Re: common method to count traffic volume on IX

2013-09-18 Thread Leo Bicknell
On Sep 17, 2013, at 3:15 PM, Niels Bakker niels=na...@bakker.net wrote: I don't know of any IXP that does this. Industry standard is as you and others wrote before: the 5-minute counter difference on all customer-facing ports, publishing both input and output bps and pps. I guess MRTG is

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Bill Woodcock
On Sep 18, 2013, at 9:07 AM, NANOG na...@abcsupply.com wrote: We recently purchased new IP addresses from ARIN No, actually, you didn't. You were assigned the use of the addresses, based on need. Just as a radio station does not purchase spectrum. https://www.arin.net/policy/nrpm.html#four3

iOS 7 update traffic

2013-09-18 Thread Zachary McGibbon
So iOS 7 just came out, here's the spike in our graphs going to our ISP here at McGill, anyone else noticing a big spike? [image: internet-sw1 - Traffic - Te0/7 - To Internet1-srp (IR Canet) - TenGigabitEthernet0/7] Zachary McGibbon

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Michael Schuler
My experience in the past is that it can take a good amount of time for ATT to remove you from their black list. It's been as short as 24 - 48 hours and as long as a couple weeks and required follow up contact with support. They're a big company and they get a lot of requests. I've not dealt

Re: [liberationtech] Brazil Looks to Break from U.S.-Centric Internet

2013-09-18 Thread Jorge Amodio
LOL, we'll move the taps one layer down ... -J On Wed, Sep 18, 2013 at 11:37 AM, Eugen Leitl eu...@leitl.org wrote: - Forwarded message from Bill Woodcock wo...@pch.net - Date: Wed, 18 Sep 2013 09:25:13 -0700 From: Bill Woodcock wo...@pch.net To: liberationtech

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Jean-Francois . TremblayING
Our mail server IP address is 74.112.99.25. Is it possible they are blocking us based on old information from the previous IP address block owner? Quite likely, yes. https://www.arin.net/resources/whowas/ Found it to be of use for this type of question. Registration required.

Re: iOS 7 update traffic

2013-09-18 Thread Zachary McGibbon
Hmm.. seems my image was stripped. I'm trying imgur for the first time so here's our graph: http://i.imgur.com/OrtjJXF.jpg On Wed, Sep 18, 2013 at 1:38 PM, Zachary McGibbon zachary.mcgibbon+na...@gmail.com wrote: So iOS 7 just came out, here's the spike in our graphs going to our ISP here

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread John LeCoque
I would say the first step is to find an immediate workaround for your end users - maybe bring up a VM on AWS or some other cloud provider to use as an SMTP relay while you work out the blacklist issue. If you run into blacklist issues after that, you may want to take a very close look at your

Re: iOS 7 update traffic

2013-09-18 Thread Josh Hoppes
Our local Akamai cluster has pegged it's 1G uplink a few times, and we are hitting our 1G Equinix IX link pretty hard as well. On Wed, Sep 18, 2013 at 1:10 PM, Ben Bartsch uwcable...@gmail.com wrote: We are seeing Akamai traffic up about 100-300% since noon CDT. Seeing similar increased from

Re: iOS 7 update traffic

2013-09-18 Thread Sam Hayes Merritt, III
We are seeing Akamai traffic up about 100-300% since noon CDT. Seeing similar increased from our participants - colleges and universities mainly. Ours is not so much Akamai as Limelight. Spiked to about 7 times normal. sam

Re: iOS 7 update traffic

2013-09-18 Thread Phil Bedard
Large US MSO. Our overall traffic is up about 20% compared to this time yesterday, which equates to ~120Gbps. Mostly Akamai. -Phil On 9/18/13 1:38 PM, Zachary McGibbon zachary.mcgibbon+na...@gmail.com wrote: So iOS 7 just came out, here's the spike in our graphs going to our ISP here

Re: iOS 7 update traffic

2013-09-18 Thread Ben Bartsch
We are seeing Akamai traffic up about 100-300% since noon CDT. Seeing similar increased from our participants - colleges and universities mainly. AS32440 -ben On Wed, Sep 18, 2013 at 12:59 PM, Tassos Chatzithomaoglou ach...@forthnetgroup.gr wrote: We also noticed an interesting spike (+

Re: iOS 7 update traffic

2013-09-18 Thread Edward Dore
Various EU IXPs are showing spikes of various sizes at the moment LINX: http://cl.ly/image/3n1521432S1R LONAP: http://cl.ly/image/0W2K0q3p3f2h AMS-IX: http://cl.ly/image/0r0J2b331E2A DE-CIX: http://cl.ly/image/0D1B181N103A Akamai (who I believe Apple use for at least some of their CDN delivery)

Re: iOS 7 update traffic

2013-09-18 Thread Warren Bailey
Do you guys not have a local akamai node?? Seems like maybe @gilmore could help you out, that's a pretty intense surge for software updates. Our stuff gets hit, but nothing like this (our networks usually don't exceed 40mbps over satellite). The MSO I used to work at had a fairly large akamai

Re: iOS 7 update traffic

2013-09-18 Thread Tassos Chatzithomaoglou
We also noticed an interesting spike (+ ~40%), mostly in akamai. The same happened on previous iOS too. -- Tassos Zachary McGibbon wrote on 18/9/2013 20:38: So iOS 7 just came out, here's the spike in our graphs going to our ISP here at McGill, anyone else noticing a big spike? [image:

Re: iOS 7 update traffic

2013-09-18 Thread Justin M. Streiner
On Wed, 18 Sep 2013, Tassos Chatzithomaoglou wrote: We also noticed an interesting spike (+ ~40%), mostly in akamai. The same happened on previous iOS too. I see it here, too. At its peak, our traffic levels were roughly double what we would see on a normal weekday. jms Zachary McGibbon

RE:The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Brandon Ross
On Wed, 18 Sep 2013, Timothy Metzinger wrote: Here's a thought. Would it be possible to set up a process where ARIN, as part of reselling IP addresses, either issues a certificate of transfer that the new owner can use to prove to the ISPs that he's a new owner and not the old evil spammer, or

Re: common method to count traffic volume on IX

2013-09-18 Thread Niels Bakker
* bickn...@ufp.org (Leo Bicknell) [Wed 18 Sep 2013, 19:23 CEST]: On Sep 17, 2013, at 3:15 PM, Niels Bakker niels=na...@bakker.net wrote: I don't know of any IXP that does this. Industry standard is as you and others wrote before: the 5-minute counter difference on all customer-facing ports,

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Tammy Firefly
On 9/18/13 4:46 PM, Andrew D Kirch wrote: On 9/18/2013 6:41 PM, Timothy Metzinger wrote: Here's a thought. Would it be possible to set up a process where ARIN, as part of reselling IP addresses, either issues a certificate of transfer that the new owner can use to prove to the ISPs that

Re: common method to count traffic volume on IX

2013-09-18 Thread Nick Hilliard
On 18/09/2013 18:23, Leo Bicknell wrote: Serious question, at an IXP shouldn't IN = OUT nearly perfectly? if you host multicast on your unicast peering lan, then this will be affected by the unicast:multicast ratio and the number of recipient ports. Most networks which support multicast will

Re: common method to count traffic volume on IX

2013-09-18 Thread Niels Bakker
* ra...@psg.com (Randy Bush) [Wed 18 Sep 2013, 04:39 CEST]: somehow, a serious case of testosterone poisoning combined with insane goal drift has hit a number of the large european exchanges. instead of the goal being how well they serve their local communities, they have gone wild with sleazy

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Andrew D Kirch
On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and ARIN used to contact us when they recycled IP space. We always removed when contacted by ARIN. Andrew ARIN hasnt contacted us for this since i've been involved with the ahbl for ~5 years. just a FYI. Well, it'd seem we

Re: common method to count traffic volume on IX

2013-09-18 Thread Stephen Fulton
Ding ding ding! And that's why honest IXPs graph both, to show that they have no packet loss on their inter-switch links. It depends on what is being measured. At TorIX we'll see deviations between in/out on our aggregate graph. As we combine all peer ports to form the aggregate graph,

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Andrew D Kirch
On 9/18/2013 7:15 PM, Tammy Firefly wrote: On 9/18/13 5:07 PM, Andrew D Kirch wrote: On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and ARIN used to contact us when they recycled IP space. We always removed when contacted by ARIN. Andrew ARIN hasnt contacted us for this

Re: common method to count traffic volume on IX

2013-09-18 Thread Nick Hilliard
On 18/09/2013 23:55, Niels Bakker wrote: Ding ding ding! And that's why honest IXPs graph both, to show that they have no packet loss on their inter-switch links. If in out, it's not necessarily inter-switch packet loss. The difference between the two will also include packet loss for

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread David Miller
On 9/18/2013 7:30 PM, Andrew D Kirch wrote: On 9/18/2013 7:15 PM, Tammy Firefly wrote: On 9/18/13 5:07 PM, Andrew D Kirch wrote: On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and ARIN used to contact us when they recycled IP space. We always removed when contacted by

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Tammy Firefly
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/18/13 6:10 PM, David Miller wrote: On 9/18/2013 7:30 PM, Andrew D Kirch wrote: On 9/18/2013 7:15 PM, Tammy Firefly wrote: On 9/18/13 5:07 PM, Andrew D Kirch wrote: On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Tammy Firefly
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/18/13 6:10 PM, David Miller wrote: On 9/18/2013 7:30 PM, Andrew D Kirch wrote: On 9/18/2013 7:15 PM, Tammy Firefly wrote: On 9/18/13 5:07 PM, Andrew D Kirch wrote: On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread staticsafe
On 9/18/2013 8:16 PM, Tammy Firefly wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Those also are statistics not actual IP block numbers being deallocated/allocated. -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - http://gpgtools.org Comment:

Re: common method to count traffic volume on IX

2013-09-18 Thread Randy Bush
somehow, a serious case of testosterone poisoning combined with insane goal drift has hit a number of the large european exchanges. instead of the goal being how well they serve their local communities, they have gone wild with sleazy means of having traffic contests, doing really sick

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Carlos Kamtha
Quite unfortunate.. These days, when allocated 'new' IPV4 space you really have to do a little homework to make sure it 'clean'. I would suggest that you run your CIDR block through http://multirbl.valli.org/lookup/. IF it's mostly clean and not on hardcore lists such as SpamHaus ROKSO,

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread David Miller
On 9/18/2013 8:16 PM, Tammy Firefly wrote: On 9/18/13 6:10 PM, David Miller wrote: On 9/18/2013 7:30 PM, Andrew D Kirch wrote: On 9/18/2013 7:15 PM, Tammy Firefly wrote: On 9/18/13 5:07 PM, Andrew D Kirch wrote: On 9/18/2013 6:55 PM, Tammy Firefly wrote: I used to run the AHBL and ARIN

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread John Levine
This is pathetic. ARIN is supposed to be working as a steward of this IP space. When you have policies that make it more difficult to use the IP space this isn't even remotely close to stewardship. It's pathetic, Unfortunately, a surprising number of new IP space owners turn out to be the

Re: common method to count traffic volume on IX

2013-09-18 Thread Randy Bush
you gotta love the amsix hkg charlie foxtrot. and how is that working out financially for the amsix members, the folk in the amsterdam area the amsix purportedly serves, niels? randy

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Andrew D Kirch
On 9/18/2013 9:02 PM, John Levine wrote: This is pathetic. ARIN is supposed to be working as a steward of this IP space. When you have policies that make it more difficult to use the IP space this isn't even remotely close to stewardship. It's pathetic, Unfortunately, a surprising number of

Re: The block message is 521 DNSRBL: Blocked for abuse

2013-09-18 Thread Mark Andrews
In message 523a6203.8090...@trelane.net, Andrew D Kirch writes: On 9/18/2013 9:02 PM, John Levine wrote: This is pathetic. ARIN is supposed to be working as a steward of this IP space. When you have policies that make it more difficult to use the IP space this isn't even remotely close

anybody from Amsterdam Internet Exchange (ams-ix) to help?

2013-09-18 Thread Shahab Vahabzadeh
Hello Everybody, Is there anybody from Amsterdam IX here? I have some questions about concept of IXP. If anybody else have enough information about IXP's please give me message off the list. Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871

Re: anybody from Amsterdam Internet Exchange (ams-ix) to help?

2013-09-18 Thread Henk Steenman
Dear Shahab, Please conact me directly kind regards - Henk Steenman, AMS-IX On 19 sep. 2013, at 07:05, Shahab Vahabzadeh sh.vahabza...@gmail.com wrote: Hello Everybody, Is there anybody from Amsterdam IX here? I have some questions about concept of IXP. If anybody else have enough