Re: Katrina response, private and public

2010-01-20 Thread Max Larson Henry
>
> "Bahamas Telecommunications Company (BTC), the service provider that runs
> the Bahamas Domestic Submarine Network (BDSNi) submarine cable system
> linking to Haiti, reported that service has been disrupted as a result of
> the earthquake that struck the Port-au-Prince area."


- The Teleco Facility that receive the fiber is completely broken (dust) but
must of the Technicians are alive and in Port au Prince


-M


Re: DOS attack assistance?

2008-11-26 Thread Max Larson Henry
Hi,


Please look for proxad.fr <-- Free

Free is an ADSL provider based in France and proxad is a hosting
company (please give a look at the "dig -x" below)

dig -x 88.191.63.28

; <<>> DiG 9.5.0b2 <<>> -x 88.191.63.28
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 131
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;28.63.191.88.in-addr.arpa. IN  PTR

;; ANSWER SECTION:
28.63.191.88.in-addr.arpa. 86400 IN PTR sd-11899.dedibox.fr.

;; AUTHORITY SECTION:
63.191.88.in-addr.arpa. 86400   IN  NS  dns2.dedibox.fr.
63.191.88.in-addr.arpa. 86400   IN  NS  dns1.dedibox.fr.

;; Query time: 390 msec
;; SERVER: 200.80.96.100#53(200.80.96.100)
;; WHEN: Wed Nov 26 08:46:38 2008
;; MSG SIZE  rcvd: 114

==

dig -x 88.191.63.28 +trace

; <<>> DiG 9.5.0b2 <<>> -x 88.191.63.28 +trace
;; global options:  printcmd
.   17574   IN  NS  d.root-servers.net.
.   17574   IN  NS  e.root-servers.net.
.   17574   IN  NS  f.root-servers.net.
.   17574   IN  NS  g.root-servers.net.
.   17574   IN  NS  h.root-servers.net.
.   17574   IN  NS  i.root-servers.net.
.   17574   IN  NS  j.root-servers.net.
.   17574   IN  NS  k.root-servers.net.
.   17574   IN  NS  l.root-servers.net.
.   17574   IN  NS  m.root-servers.net.
.   17574   IN  NS  a.root-servers.net.
.   17574   IN  NS  b.root-servers.net.
.   17574   IN  NS  c.root-servers.net.
;; Received 488 bytes from 200.80.96.100#53(200.80.96.100) in 31 ms

88.in-addr.arpa.86400   IN  NS  ns.lacnic.net.
88.in-addr.arpa.86400   IN  NS  ns3.nic.fr.
88.in-addr.arpa.86400   IN  NS  sec1.apnic.net.
88.in-addr.arpa.86400   IN  NS  sec3.apnic.net.
88.in-addr.arpa.86400   IN  NS  sunic.sunet.se.
88.in-addr.arpa.86400   IN  NS  ns-pri.ripe.net.
88.in-addr.arpa.86400   IN  NS  tinnie.arin.net.
;; Received 218 bytes from 199.7.83.42#53(l.root-servers.net) in 78 ms

191.88.in-addr.arpa.172800  IN  NS  ns.ripe.net.
191.88.in-addr.arpa.172800  IN  NS  ns0.proxad.net.
191.88.in-addr.arpa.172800  IN  NS  ns1.proxad.net.
;; Received 111 bytes from 193.0.0.195#53(ns-pri.ripe.net) in 187 ms

63.191.88.in-addr.arpa. 86400   IN  NS  dns1.dedibox.fr.
63.191.88.in-addr.arpa. 86400   IN  NS  dns2.dedibox.fr.
;; Received 123 bytes from 212.27.32.2#53(ns0.proxad.net) in 187 ms

28.63.191.88.in-addr.arpa. 86400 IN PTR sd-11899.dedibox.fr.
191.88.in-addr.arpa.7200IN  NS  dns1.dedibox.fr.
191.88.in-addr.arpa.7200IN  NS  dns2.dedibox.fr.
;; Received 146 bytes from 88.191.254.6#53(dns1.dedibox.fr) in 187 ms

-Max



2008/11/26 Pete Templin <[EMAIL PROTECTED]>:
> One of my customers, a host at 64.8.105.15, is feeling a "bonus" ~130kpps
> from 88.191.63.28.  I've null-routed the source, though our Engine2 GE cards
> don't seem to be doing a proper job of that, unfortunately.  The attack is a
> solid 300% more pps than our aggregate traffic levels.
>
> It's coming in via 6461, but they don't appear to have any ability to
> backtrack it.  Their only offer is to blackhole the destination until the
> attack subsides.  BGP tells me the source is in AS 12322, a RIPE AS that has
> little if any information publicly visible.
>
> Any pointers on what to do next?
>
> Thanks,
>
> Pete
>
>



Re: Bandwidth into Haiti

2010-10-31 Thread Max Larson Henry
> Has the landing station been repaired yet after last years earthquake ?
>

- Yes It's now in operation

-M


Re: And so it ends...

2011-02-03 Thread Max Larson Henry
Still a few LEGACY in the status column ;-)

-M

On Thu, Feb 3, 2011 at 9:35 AM, Scott Howard  wrote:

> 102/8   AfriNIC2011-02whois.afrinic.net ALLOCATED
> 103/8   APNIC  2011-02whois.apnic.net   ALLOCATED
> 104/8   ARIN   2011-02whois.arin.netALLOCATED
> 179/8   LACNIC 2011-02whois.lacnic.net  ALLOCATED
> 185/8   RIPE NCC   2011-02whois.ripe.netALLOCATED
>


Re: Significant Announcement (re: IPv4) 3 February - Watch it Live!

2011-02-03 Thread Max Larson Henry
http://www.nro.net/supplemental/icann-nro-low-bandwidth

-M

On Thu, Feb 3, 2011 at 9:44 AM, Brian Johnson  wrote:

> I think they were under a TCP-SYN attack :)
>
> The video was super choppy from here and I have bandwidth to burn at this
> time of the day. A little disappointing, but I'm sure (fingers crossed)
> someone will have a clean recording of it that they will make available.
>
>  - Brian J.
>
>
>
> >-Original Message-
> >From: Sameer Khosla [mailto:skho...@neutraldata.com]
> >Sent: Thursday, February 03, 2011 8:37 AM
> >To: nanog@nanog.org
> >Subject: RE: Significant Announcement (re: IPv4) 3 February - Watch it
> Live!
> >
> >Anyone else getting Error establishing a database connection trying to
> >bring this up?
> >
> >Thanks
> >Sameer
> >
> >-Original Message-
> >From: John Curran [mailto:jcur...@arin.net]
> >Sent: Tuesday, February 01, 2011 8:24 AM
> >To: nanog@nanog.org list
> >Subject: Significant Announcement (re: IPv4) 3 February - Watch it Live!
> >
> >FYI - Some people in this community may want to watch this event (either
> >in person or via webcast) /John
> >
> >John Curran
> >President and CEO
> >ARIN
> >
> >Begin forwarded message:
> >
> >From: ARIN mailto:i...@arin.net>>
> >Date: February 1, 2011 7:09:02 AM EST
> >To: mailto:arin-annou...@arin.net>>
> >Subject: [arin-announce] Significant Announcement 3 February - Watch it
> >Live!
> >
> >On Thursday, 3 February 2011, at 9:30 AM Eastern Standard Time (EST),
> >the Number Resource Organization (NRO), along with the Internet
> >Corporation for Assigned Names and Numbers, the Internet Society (ISOC)
> >and the Internet Architecture Board (IAB) will be holding a ceremony and
> >press conference to make a significant announcement and to discuss the
> >global transition to the next generation of Internet addresses.
> >
> >Much has been written in the international media over the last few weeks
> >about the dwindling pool of Internet addresses using the original
> >Internet protocol, called IPv4 (Internet Protocol version 4), and this
> >topic will be addressed at the event.
> >
> >We invite all interested community members to view the webcast of this
> >event at: http://www.nro.net/news/icann-nro-live-stream
> >
> >In the event you happen to be at the Intercontinental Hotel in Miami on
> >Thursday, there will be limited public seating available to attend (with
> >press receiving seating priority) in Room "Concourse II" at 9:30 AM EST
> >for the ceremony and 10:00 AM for press conference which follows.
> >
> >Regards,
> >
> >Communications and Member Services
> >American Registry for Internet Numbers (ARIN)
> >
>
>
>


Re: Significant Announcement (re: IPv4) 3 February - Watch it Live!

2011-02-03 Thread Max Larson Henry
News conference starts now

-M


On Thu, Feb 3, 2011 at 9:47 AM, Randy Carpenter wrote:

>
> It didn't work too bad.  Does anyone know why it was pretty much over at
> 9:30, when they said it would start? Did they start a half-hour early or
> something?
>
>
> -Randy
>
> --
> | Randy Carpenter
> | Vice President - IT Services
> | Red Hat Certified Engineer
> | First Network Group, Inc.
> | (800)578-6381, Opt. 1
> 
>
> - Original Message -
> > Once upon a time, Sameer Khosla  said:
> > > Anyone else getting Error establishing a database connection trying
> > > to
> > > bring this up?
> >
> > It was posted to /. this morning, so it is probably overloaded (I
> > didn't
> > even try).
> > --
> > Chris Adams 
> > Systems and Network Administrator - HiWAAY Internet Services
> > I don't speak for anybody but myself - that's enough trouble.
>
>
>


Re: eircom.net contact

2012-05-10 Thread Max Larson Henry
maybe

 hostmas...@eircom.net  :)

 or
  1 Heuston South Quarter
  St Johns Road, Dublin 8 ie
  IE

or
  +35316008010


whois Eircom.net


Registrant:
Eircom Ltd
   1 Heuston South Quarter
   St Johns Road, Dublin 8 ie
   IE
  Domain Name: EIRCOM.NET

   Administrative Contact, Technical Contact:
  Eircom Ltdhostmas...@eircom.net
  1 Heuston South Quarter
  St Johns Road, Dublin 8 ie
  IE
  +35316008010

-Max
On Thu, May 10, 2012 at 12:52 PM, Christopher Singhaus
 wrote:
> Not sure if this is the right list to send this out to, but I figured
> I'd give it a try. I'm looking for anyone with a contact at Eircom.net.
> Customers on their network are continually trying to brute force RDP
> machines on our network. Fail2ban does automatically null route them and
> send them an email, however all I get is a rfc-ignorant auto reply
> stating to fill out a form on their website. In fact, they have been
> listed as rfc ignorant since 2006.
>
> http://www.rfc-ignorant.org/tools/detail.php?domain=eircom.net&submitted=1140112265&table=abuse
>
> I've also sent emails to n...@eircom.net but received no reply whatsoever.
>
> Just looking for a human to talk to at this point or any other advice.
>
> --
> Christopher Singhaus,
> Systems Administrator / Abuse Dept
> HopOne Internet Corp. - AS 14361 - www.hopone.net
>
> "Yesterday's weirdness is tomorrow's reason why." -Hunter S Thompson
>
>



Re: DNS anycasting - multiple DNS servers on same subnet Vs registrar/registry policies

2012-05-28 Thread Max Larson Henry
off topic.
I have to do a better job to prevent my 5 year old daughter from
touching my phone :)

-M

On Mon, May 28, 2012 at 4:17 PM, Randy Bush  wrote:
> maxlarson.he...@transversal.ht wrote:
>> Q
>> --Message d'origine--
>> De : Randy Bush
>> À : Anurag Bhatia
>> Cc : NANOG Mailing List
>> Objet : Re: DNS anycasting - multiple DNS servers on same subnet Vs 
>> registrar/registry policies
>> Envoyé : 28 mai, 2012 17:03
>> ...
>> Envoyé par mon BlackBerry de Digicel
>
> QED, eh?



Re: IPv4 ANYCAST setup

2010-03-26 Thread Max Larson Henry
> > has someone experience in anycast ipv4 networks (to support DNS)?
>
> "Never been done" "Dangerous" "TCP does not work" etc etc etc.
>

- Yes but as for DNS, anycast is essentially used for user requests (UDP)
not to perform zone transfer(TCP).

-M


Re: Using Region-X assigned IP space in Region-Y?

2011-03-27 Thread Max Larson Henry
>
>
> As far as I can see, this is all fine and good assuming that these two
> sites are in the same RIR's domain.
>
> Is it possible/allowable to move one of these datacenters to a different
> geographical region with a different RIR and keep using the same two
> subnets, or will a new /24 need to be requested from the new RIR?
>
> If there's a book or reference that answers this question, please let me
> know - I'm willing to do as much research on my own as I can.


 -
RIR Comparative Policy Overview

http://www.nro.net/category/documents/rir-comparative-policy-overview

and

AfriNIC http://www.afrinic.net/policy.htm
APNIC http://www.apnic.net/policy/current
ARIN http://www.arin.net/policy
LACNIC http://lacnic.net/en/politicas
RIPE NCC http://www.ripe.net/ripe/policies/

-M