LACNIC becomes the first RIR to go below /9 of available IP space

2014-05-20 Thread Rubens Kuhl
http://www.lacnic.net/en/web/lacnic/inicio Website is still showing phase 0 of address depletion, but the updated quantity means that the /9 trigger has been reached. Rubens

NAT IP and Google

2014-05-20 Thread Pui Edylie
Hi Everyone, May I know what is the best approach so that Google would not ban our Natted IP from time to time as it suspect it as a bot. Is there any official channel from Google which we could work with them for resolution? Thanks much! Best, Edy

Re: NAT IP and Google

2014-05-20 Thread William Waites
On Tue, May 20, 2014 at 10:21:43PM +0800, Pui Edylie wrote: May I know what is the best approach so that Google would not ban our Natted IP from time to time as it suspect it as a bot. IPv6?

Re: NAT IP and Google

2014-05-20 Thread Harald Koch
On 20 May 2014 10:27, William Waites w...@styx.org wrote: IPv6? Might help if all your hosts have their own IPv6 addresses - doesn't help if you run an http proxy. Google blacklists my (personal) IPv6 proxy at least once a month. -- Harald

Re: NAT IP and Google

2014-05-20 Thread Derek Andrew
They take out our campus, both IPv4 and IPv6. All hailing attempts fail. Good luck. On Tue, May 20, 2014 at 8:21 AM, Pui Edylie em...@edylie.net wrote: Hi Everyone, May I know what is the best approach so that Google would not ban our Natted IP from time to time as it suspect it as a

Re: NAT IP and Google

2014-05-20 Thread Chris Garrett
Their determination is based on the type of search traffic more than the volume. I had some success using squid to proxy through to them and reduce the overall number of complex queries. On May 20, 2014, at 10:10 AM, Derek Andrew derek.and...@usask.ca wrote: They take out our campus, both

Re: NAT IP and Google

2014-05-20 Thread Kevin Kadow
If at all possible, consider using a NAT pool instead of translating all outbound web traffic to a single IP address. When I ran Tribune's network (with about 15K internal client IPs), we were blacklisted by Google several times due to high query volumes. In the end I built a pair of /24 NAT

Re: All of .mil tld is down

2014-05-20 Thread Brian Henson
Looks like it has been corrected now On Tue, May 20, 2014 at 12:30 AM, Anurag Bhatia m...@anuragbhatia.com wrote: Hi Clark It's down when looked upon from our DNS recursors in India as well. I have seen in past with many domains (not TLDs though) that when they are down due to

Re: All of .mil tld is down

2014-05-20 Thread Stephane Bortzmeyer
On Tue, May 20, 2014 at 02:35:49PM -0400, Brian Henson marin...@gmail.com wrote a message of 107 lines which said: Looks like it has been corrected now Not from everywhere. From two different networks in France, I get: % check-soa -i nipr.mil CON1.nipr.mil. 199.252.157.234: ERROR:

Re: NAT IP and Google

2014-05-20 Thread William Waites
On Tue, May 20, 2014 at 10:35:56AM -0400, Harald Koch wrote: Might help if all your hosts have their own IPv6 addresses That was meant to be implied... But... On Tue, May 20, 2014 at 09:10:56AM -0600, Derek Andrew wrote: They take out our campus, both IPv4 and IPv6. That's interesting, I

RE: NAT IP and Google

2014-05-20 Thread Tony Wicks
Some of the networks I work with do the everything behind NAT thing and get bitten by this. Using a pool of addresses helps but... This is only going to get more painful with more people doing Carrier Grade NAT... I Run CGN with tens of thousands of broadband users being translated behind /24

rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Brandon Applegate
Is anyone using this and having failed login for a few days now ? I’ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the Verisign website but so far dead air. If anyone knows of a more pointed email POC that would

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Nick Hilliard
On 20/05/2014 22:21, Brandon Applegate wrote: Is anyone using this and having failed login for a few days now ? I’ve been mirroring the root zone(s) for years and I just started getting failures in my logs. ftp://rs.internic.net/domain/root.zone Nick

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread jamie
I have access; my last success was today at 12:27am est Wait; Do you have a userid or are you trying to log in anonymous? I'm pretty sure this is a closed system.. On Tue, May 20, 2014 at 4:21 PM, Brandon Applegate bran...@burn.net wrote: Is anyone using this and having failed login for a

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Brandon Applegate
On May 20, 2014, at 5:32 PM, jamie 260...@gmail.com wrote: I have access; my last success was today at 12:27am est Wait; Do you have a userid or are you trying to log in anonymous? I'm pretty sure this is a closed system.. I have a username/pass. Got it by signing the agreement years

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread John Levine
In article 904ce971-b779-4c9e-af8d-8dafcce01...@burn.net you write: -=-=-=-=-=- Is anyone using this and having failed login for a few days now ? I�ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the Verisign website

Re: NAT IP and Google

2014-05-20 Thread Mark Andrews
Deploy IPv6. This is the solution to this problem. Google supports IPv6 on all their services AFAIK. Mark In message 537b64f7.5020...@edylie.net, Pui Edylie writes: Hi Everyone, May I know what is the best approach so that Google would not ban our Natted IP from time to time as it

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread jamie rishaw
Some output deleted to save spamminess: }~/ ftp rz.verisign-grs.net Connected to rz.verisign-grs.net. 220- Welcome to the VeriSign Global Registry Services gTLD Zone FTP Server Name (rz.verisign-grs.net:jamie): [myusername] 331 Please specify the password. Password: 230 Login successful.

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Blaine Fleming
On 5/20/14, 4:21 PM, Brandon Applegate wrote: Is anyone using this and having failed login for a few days now ? I’ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the Verisign website but so far dead air. If

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread John Levine
In article 537c1f17.6070...@digital-z.com you write: On 5/20/14, 4:21 PM, Brandon Applegate wrote: Is anyone using this and having failed login for a few days now ? I�ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/20/2014 02:21 PM, Brandon Applegate wrote: | Is anyone using this and having failed login for a few days now ? I?ve been mirroring the root zone(s) for years and I just started getting failures in my logs. I emailed an address I found on the

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Mehmet Akcin
F-root also allows you to axfr root-zone ( dig @f.root-servers.net . axfr ) On May 20, 2014, at 10:32 PM, Doug Barton do...@dougbarton.us wrote: Signed PGP part On 05/20/2014 02:21 PM, Brandon Applegate wrote: | Is anyone using this and having failed login for a few days now ? I?ve been

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Doug Barton
The last time I asked them, F-root had a we allow it because it's the right thing to do but we don't like it policy. Given that ICANN operates an infrastructure purposely built for doing zone transfers, and given that they offer more zones than are on the roots, that's the way I recommend

Re: rz.verisign-grs.com root zone ftp access

2014-05-20 Thread Mehmet Akcin
Yeah, I was just suggesting alternatives just incase. I have setup ICANN's axfr servers :) mehmet On May 20, 2014, at 10:50 PM, Doug Barton do...@dougbarton.us wrote: The last time I asked them, F-root had a we allow it because it's the right thing to do but we don't like it policy. Given