Re: [AFMUG] Be careful out there!

[Ken Hohhof]

Maybe like OT we need to put FM at the beginning of the subject line.

-Original Message-
From: AF  On Behalf Of Bill Prince
Sent: Friday, June 19, 2020 6:51 PM
To: af@af.afmug.com
Subject: Re: [AFMUG] Be careful out there!

Two words:

Florida man.

bp


On 6/19/2020 3:40 PM, Robert wrote:
>
http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-t
o-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK
2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU 
>
>

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com



-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Be careful out there!

[Bill Prince]

Two words:

Florida man.

bp


On 6/19/2020 3:40 PM, Robert wrote:
http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-to-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU 





--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Be careful out there!

[Ken Hohhof]

Initially I assumed the 5G conspiracy theorists had graduated from destroying 
equipment to shooting phone company workers.

 

From: AF  On Behalf Of ch...@wbmfg.com
Sent: Friday, June 19, 2020 5:57 PM
To: AnimalFarm Microwave Users Group 
Subject: Re: [AFMUG] Be careful out there!

 

Burglary, Robbery gone bad.  

Killing witnesses to another crime.

Someone got disrespected.

 

From: Matt Hoppes 

Sent: Friday, June 19, 2020 4:52 PM

To: AnimalFarm Microwave Users Group 

Subject: Re: [AFMUG] Be careful out there!

 

Wait. What???

 

The site is in a relatively safe area of Jacksonville, neighbors say, but 
according to a number of social media posts of tower techs who have worked on 
that site or in the area, it’s not.





On Jun 19, 2020, at 6:41 PM, Robert mailto:i...@avantwireless.com> > wrote:

http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-to-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU

-- 
AF mailing list
AF@af.afmug.com  
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

  _  

-- 
AF mailing list
AF@af.afmug.com  
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Be careful out there!

[chuck]

Burglary, Robbery gone bad.  
Killing witnesses to another crime.
Someone got disrespected.

From: Matt Hoppes 
Sent: Friday, June 19, 2020 4:52 PM
To: AnimalFarm Microwave Users Group 
Subject: Re: [AFMUG] Be careful out there!

Wait. What???

The site is in a relatively safe area of Jacksonville, neighbors say, but 
according to a number of social media posts of tower techs who have worked on 
that site or in the area, it’s not.


  On Jun 19, 2020, at 6:41 PM, Robert  wrote:


  
http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-to-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU

  -- 
  AF mailing list
  AF@af.afmug.com
  http://af.afmug.com/mailman/listinfo/af_af.afmug.com




-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Be careful out there!

[Matt Hoppes]

Wait. What???

The site is in a relatively safe area of Jacksonville, neighbors say, but 
according to a number of social media posts of tower techs who have worked on 
that site or in the area, it’s not.

> On Jun 19, 2020, at 6:41 PM, Robert  wrote:
> 
> http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-to-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU
> 
> -- 
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] Be careful out there!

[Robert]

http://wirelessestimator.com/articles/2020/two-cell-site-electricians-shot-to-death-while-performing-an-att-upgrade-in-florida/?fbclid=IwAR16EUeS0qoLyKK2YabtO8S2kxl1xJGqraa36b_-UQmkBOZ3Fkk_jAIhGOU

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Ken Hohhof]

H, that sounds a little scarier than something I’d be willing to sign up 
for.

 

At least they weren’t uploading kiddie porn or making terrorist threats from 
your IPs.  But getting your customers semi-banned by Google is still uncool.

 

I don’t suppose Google was paying them to monitor their network.  I doubt it, 
but that would be a strange twist.

 

 

From: AF  On Behalf Of Mike Hammett
Sent: Friday, June 19, 2020 2:27 PM
To: AnimalFarm Microwave Users Group 
Subject: Re: [AFMUG] Issue with Google

 

AAaahh, yeah, DIVI...  

 

 

Every now and then something like this pops up with them.



-
Mike Hammett
  Intelligent Computing Solutions
   
  
  
 
  Midwest Internet Exchange
   
  
 
  The Brothers WISP
   
 




  _  

From: "Christopher Tyler" mailto:ch...@totalhighspeed.net> >
To: "AnimalFarm Microwave Users Group" mailto:af@af.afmug.com> >
Sent: Friday, June 19, 2020 1:54:15 PM
Subject: Re: [AFMUG] Issue with Google

Pretty sure that we traced it back to DiviNetworks.

They are supposed to use spare bandwidth to pseudonymously originate web 
requests. They use our IP addresses and in theory they are supposed to do this 
without disturbing our customers and only access web sites whose owners have 
contracted them to do so, generally to test connectivity.

We are currently in communication with them to get it fixed. 

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com  

- Original Message -
> From: "Chris Tyler"   >
> To: "AnimalFarm Microwave Users Group"   >
> Sent: Friday, June 19, 2020 12:23:22 PM
> Subject: Re: [AFMUG] Issue with Google

> No we are not pre-defining blocks at this time, I will look at implementing
> that, thank you.
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com  
> 
> - Original Message -
>> From: "afmug" mailto:af...@ics-il.net> >
>> To: "AnimalFarm Microwave Users Group" >  >
>> Sent: Friday, June 19, 2020 12:12:38 PM
>> Subject: Re: [AFMUG] Issue with Google
> 
>> Are you pre-defining blocks, though?
>> 
>> Inside IP Outside IP/Port range
>> 100.64.1.1 2.2.2.2:2000-2099
>> 100.64.1.2 2.2.2.2:2100-2199
>> 100.64.1.3 2.2.2.2:2200-2299
>> I'd do more than 100 ports, but table is just meant to express the concept.
>> 
>> Then you ALWAYS know IP:port to internal IP matching, without having to track
>> anything.
>> 
>> 
>> 
>> -
>> Mike Hammett
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>> [ https://www.facebook.com/ICSIL ] [
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>> https://twitter.com/ICSIL ]
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>> [ https://www.facebook.com/mdwestix ] [
>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>> https://twitter.com/mdwestix ]
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>> [ https://www.facebook.com/thebrotherswisp ] [
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>> 
>> From: "Christopher Tyler" >  >
>> To: "AnimalFarm Microwave Users Group" >  >
>> Sent: Friday, June 19, 2020 12:07:55 PM
>> Subject: Re: [AFMUG] Issue with Google
>> 
>> That is how we are doing it for the most part. We still have a lot of old
>> 172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have
>> been and still are steadily working towards that goal though.
>> 
>> --
>> Christopher Tyler
>> Senior Network Engineer
>> MTCRE/MTCNA/MTCTCE/MTCWE
>> 
>> Total Highspeed Internet Solutions
>> 1091 W. Kathryn Street
>> Nixa, MO 65714
>> (417) 851-1107 x. 9002
>> www.totalhighspeed.com  
>> 
>> - Original Message -
>>> From: "afmug" mailto:af...@ics-il.net> >
>>> To: "AnimalFarm Microwave Users Group" >>  >
>>> Sent: Friday, June 19, 2020 12:00:18 PM
>>> Subject: Re: [AFMUG] Issue with Google
>> 
>>> If you're NATing multiple customers behind a single IP 

Re: [AFMUG] ePMP and 450 co-sync

[Kurt Fankhauser]

thats good to know Josh

On Thu, Jun 18, 2020 at 1:41 PM Josh Luthman 
wrote:

> No one has said they have issues I don't believe.  Just sync up your
> settings and you're good to go.  Need to make sure you have certain
> versions+ to gain compatibility.
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
>
> On Thu, Jun 18, 2020 at 11:54 AM Kurt Fankhauser 
> wrote:
>
>> How well is the sync working between ePMP and PMP450 platforms for
>> co-locating equipment? I see Cambium has a co-location tool on their
>> website but looking for some real world feedback, thanks
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Mike Hammett]

AAaahh, yeah, DIVI... 




Every now and then something like this pops up with them. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Christopher Tyler"  
To: "AnimalFarm Microwave Users Group"  
Sent: Friday, June 19, 2020 1:54:15 PM 
Subject: Re: [AFMUG] Issue with Google 

Pretty sure that we traced it back to DiviNetworks. 

They are supposed to use spare bandwidth to pseudonymously originate web 
requests. They use our IP addresses and in theory they are supposed to do this 
without disturbing our customers and only access web sites whose owners have 
contracted them to do so, generally to test connectivity. 

We are currently in communication with them to get it fixed. 

-- 
Christopher Tyler 
Senior Network Engineer 
MTCRE/MTCNA/MTCTCE/MTCWE 

Total Highspeed Internet Solutions 
1091 W. Kathryn Street 
Nixa, MO 65714 
(417) 851-1107 x. 9002 
www.totalhighspeed.com 

- Original Message - 
> From: "Chris Tyler"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 12:23:22 PM 
> Subject: Re: [AFMUG] Issue with Google 

> No we are not pre-defining blocks at this time, I will look at implementing 
> that, thank you. 
> 
> -- 
> Christopher Tyler 
> Senior Network Engineer 
> MTCRE/MTCNA/MTCTCE/MTCWE 
> 
> Total Highspeed Internet Solutions 
> 1091 W. Kathryn Street 
> Nixa, MO 65714 
> (417) 851-1107 x. 9002 
> www.totalhighspeed.com 
> 
> - Original Message - 
>> From: "afmug"  
>> To: "AnimalFarm Microwave Users Group"  
>> Sent: Friday, June 19, 2020 12:12:38 PM 
>> Subject: Re: [AFMUG] Issue with Google 
> 
>> Are you pre-defining blocks, though? 
>> 
>> Inside IP Outside IP/Port range 
>> 100.64.1.1 2.2.2.2:2000-2099 
>> 100.64.1.2 2.2.2.2:2100-2199 
>> 100.64.1.3 2.2.2.2:2200-2299 
>> I'd do more than 100 ports, but table is just meant to express the concept. 
>> 
>> Then you ALWAYS know IP:port to internal IP matching, without having to 
>> track 
>> anything. 
>> 
>> 
>> 
>> - 
>> Mike Hammett 
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] 
>> [ https://www.facebook.com/ICSIL ] [ 
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
>> https://twitter.com/ICSIL ] 
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ] 
>> [ https://www.facebook.com/mdwestix ] [ 
>> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
>> https://twitter.com/mdwestix ] 
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ] 
>> [ https://www.facebook.com/thebrotherswisp ] [ 
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
>> 
>> From: "Christopher Tyler"  
>> To: "AnimalFarm Microwave Users Group"  
>> Sent: Friday, June 19, 2020 12:07:55 PM 
>> Subject: Re: [AFMUG] Issue with Google 
>> 
>> That is how we are doing it for the most part. We still have a lot of old 
>> 172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have 
>> been and still are steadily working towards that goal though. 
>> 
>> -- 
>> Christopher Tyler 
>> Senior Network Engineer 
>> MTCRE/MTCNA/MTCTCE/MTCWE 
>> 
>> Total Highspeed Internet Solutions 
>> 1091 W. Kathryn Street 
>> Nixa, MO 65714 
>> (417) 851-1107 x. 9002 
>> www.totalhighspeed.com 
>> 
>> - Original Message - 
>>> From: "afmug"  
>>> To: "AnimalFarm Microwave Users Group"  
>>> Sent: Friday, June 19, 2020 12:00:18 PM 
>>> Subject: Re: [AFMUG] Issue with Google 
>> 
>>> If you're NATing multiple customers behind a single IP address, do it this 
>>> way: 
>>> 
>>> 
>>> [ 
>>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>>>  
>>> | 
>>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>>>  
>>> ] 
>>> 
>>> 
>>> 
>>> - 
>>> Mike Hammett 
>>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] 
>>> [ https://www.facebook.com/ICSIL ] [ 
>>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
>>> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
>>> https://twitter.com/ICSIL ] 
>>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ] 
>>> [ https://www.facebook.com/mdwestix ] [ 
>>> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
>>> https://twitter.com/mdwestix ] 
>>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ] 
>>> [ https://www.facebook.com/thebrotherswisp ] [ 
>>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
>>> 
>>> From: "Christopher Tyler"  
>>> To: "AnimalFarm Microwave Users Group"  
>>> Sent: Friday, June 19, 2020 11:46:07 AM 
>>> Subject: Re: [AFMUG] Issue with Google 
>>> 
>>> Yes, NAT is in play here, I just now increased the NAT pool to 128 
>>> addresses 
>>> based on TJ's theory that the NAT pool might be too small. 
>>> 
>>> The source IP's seem to be spoofed or proxied 

Re: [AFMUG] Issue with Google

[Christopher Tyler]

Pretty sure that we traced it back to DiviNetworks.

They are supposed to use spare bandwidth to pseudonymously originate web 
requests. They use our IP addresses and in theory they are supposed to do this 
without disturbing our customers and only access web sites whose owners have 
contracted them to do so, generally to test connectivity.

We are currently in communication with them to get it fixed. 

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "Chris Tyler" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 12:23:22 PM
> Subject: Re: [AFMUG] Issue with Google

> No we are not pre-defining blocks at this time, I will look at implementing
> that, thank you.
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> - Original Message -
>> From: "afmug" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 12:12:38 PM
>> Subject: Re: [AFMUG] Issue with Google
> 
>> Are you pre-defining blocks, though?
>> 
>> Inside IPOutside IP/Port range
>> 100.64.1.1   2.2.2.2:2000-2099
>> 100.64.1.2   2.2.2.2:2100-2199
>> 100.64.1.3   2.2.2.2:2200-2299
>> I'd do more than 100 ports, but table is just meant to express the concept.
>> 
>> Then you ALWAYS know IP:port to internal IP matching, without having to track
>> anything.
>> 
>> 
>> 
>> -
>> Mike Hammett
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>> [ https://www.facebook.com/ICSIL ] [
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>> https://twitter.com/ICSIL ]
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>> [ https://www.facebook.com/mdwestix ] [
>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>> https://twitter.com/mdwestix ]
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>> [ https://www.facebook.com/thebrotherswisp ] [
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>> 
>> From: "Christopher Tyler" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 12:07:55 PM
>> Subject: Re: [AFMUG] Issue with Google
>> 
>> That is how we are doing it for the most part. We still have a lot of old
>> 172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have
>> been and still are steadily working towards that goal though.
>> 
>> --
>> Christopher Tyler
>> Senior Network Engineer
>> MTCRE/MTCNA/MTCTCE/MTCWE
>> 
>> Total Highspeed Internet Solutions
>> 1091 W. Kathryn Street
>> Nixa, MO 65714
>> (417) 851-1107 x. 9002
>> www.totalhighspeed.com
>> 
>> - Original Message -
>>> From: "afmug" 
>>> To: "AnimalFarm Microwave Users Group" 
>>> Sent: Friday, June 19, 2020 12:00:18 PM
>>> Subject: Re: [AFMUG] Issue with Google
>> 
>>> If you're NATing multiple customers behind a single IP address, do it this 
>>> way:
>>> 
>>> 
>>> [
>>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>>> | 
>>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>>> ]
>>> 
>>> 
>>> 
>>> -
>>> Mike Hammett
>>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>>> [ https://www.facebook.com/ICSIL ] [
>>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>>> https://twitter.com/ICSIL ]
>>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>>> [ https://www.facebook.com/mdwestix ] [
>>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>>> https://twitter.com/mdwestix ]
>>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>>> [ https://www.facebook.com/thebrotherswisp ] [
>>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>>> 
>>> From: "Christopher Tyler" 
>>> To: "AnimalFarm Microwave Users Group" 
>>> Sent: Friday, June 19, 2020 11:46:07 AM
>>> Subject: Re: [AFMUG] Issue with Google
>>> 
>>> Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses
>>> based on TJ's theory that the NAT pool might be too small.
>>> 
>>> The source IP's seem to be spoofed or proxied somehow as the first IP 
>>> address in
>>> the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it
>>> hard to believe that our gateway router is scraping Google for content.
>>> 
>>> --
>>> Christopher Tyler
>>> Senior Network Engineer
>>> MTCRE/MTCNA/MTCTCE/MTCWE
>>> 
>>> Total Highspeed Internet Solutions
>>> 1091 W. Kathryn Street
>>> Nixa, MO 65714
>>> (417) 851-1107 x. 9002
>>> www.totalhighspeed.com
>>> 
>>> - Original Message -
 From: "afmug" 

Re: [AFMUG] Issue with Google

[Christopher Tyler]

No we are not pre-defining blocks at this time, I will look at implementing 
that, thank you.

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "afmug" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 12:12:38 PM
> Subject: Re: [AFMUG] Issue with Google

> Are you pre-defining blocks, though?
> 
> Inside IP Outside IP/Port range
> 100.64.1.12.2.2.2:2000-2099
> 100.64.1.22.2.2.2:2100-2199
> 100.64.1.32.2.2.2:2200-2299
> I'd do more than 100 ports, but table is just meant to express the concept.
> 
> Then you ALWAYS know IP:port to internal IP matching, without having to track
> anything.
> 
> 
> 
> -
> Mike Hammett
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
> [ https://www.facebook.com/ICSIL ] [
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
> https://www.linkedin.com/company/intelligent-computing-solutions ] [
> https://twitter.com/ICSIL ]
> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
> [ https://www.facebook.com/mdwestix ] [
> https://www.linkedin.com/company/midwest-internet-exchange ] [
> https://twitter.com/mdwestix ]
> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
> [ https://www.facebook.com/thebrotherswisp ] [
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
> 
> From: "Christopher Tyler" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 12:07:55 PM
> Subject: Re: [AFMUG] Issue with Google
> 
> That is how we are doing it for the most part. We still have a lot of old
> 172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have
> been and still are steadily working towards that goal though.
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> - Original Message -
>> From: "afmug" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 12:00:18 PM
>> Subject: Re: [AFMUG] Issue with Google
> 
>> If you're NATing multiple customers behind a single IP address, do it this 
>> way:
>> 
>> 
>> [
>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>> | 
>> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>> ]
>> 
>> 
>> 
>> -
>> Mike Hammett
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>> [ https://www.facebook.com/ICSIL ] [
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>> https://twitter.com/ICSIL ]
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>> [ https://www.facebook.com/mdwestix ] [
>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>> https://twitter.com/mdwestix ]
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>> [ https://www.facebook.com/thebrotherswisp ] [
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>> 
>> From: "Christopher Tyler" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 11:46:07 AM
>> Subject: Re: [AFMUG] Issue with Google
>> 
>> Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses
>> based on TJ's theory that the NAT pool might be too small.
>> 
>> The source IP's seem to be spoofed or proxied somehow as the first IP 
>> address in
>> the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it
>> hard to believe that our gateway router is scraping Google for content.
>> 
>> --
>> Christopher Tyler
>> Senior Network Engineer
>> MTCRE/MTCNA/MTCTCE/MTCWE
>> 
>> Total Highspeed Internet Solutions
>> 1091 W. Kathryn Street
>> Nixa, MO 65714
>> (417) 851-1107 x. 9002
>> www.totalhighspeed.com
>> 
>> - Original Message -
>>> From: "afmug" 
>>> To: "AnimalFarm Microwave Users Group" 
>>> Sent: Friday, June 19, 2020 11:37:58 AM
>>> Subject: Re: [AFMUG] Issue with Google
>> 
>>> You have the source IP, port, and time. What more do you need to determine 
>>> who's
>>> doing it?
>>> 
>>> I'm assuming you're NATing customers at the router in question.
>>> 
>>> 
>>> 
>>> -
>>> Mike Hammett
>>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>>> [ https://www.facebook.com/ICSIL ] [
>>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>>> https://twitter.com/ICSIL ]
>>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>>> [ https://www.facebook.com/mdwestix ] [
>>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>>> https://twitter.com/mdwestix ]
>>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>>> [ 

Re: [AFMUG] Issue with Google

[Mike Hammett]

Are you pre-defining blocks, though? 


Inside IP   Outside IP/Port range 
100.64.1.1  2.2.2.2:2000-2099 
100.64.1.2  2.2.2.2:2100-2199 
100.64.1.3  2.2.2.2:2200-2299 
I'd do more than 100 ports, but table is just meant to express the concept. 


Then you ALWAYS know IP:port to internal IP matching, without having to track 
anything. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Christopher Tyler"  
To: "AnimalFarm Microwave Users Group"  
Sent: Friday, June 19, 2020 12:07:55 PM 
Subject: Re: [AFMUG] Issue with Google 

That is how we are doing it for the most part. We still have a lot of old 
172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have 
been and still are steadily working towards that goal though. 

-- 
Christopher Tyler 
Senior Network Engineer 
MTCRE/MTCNA/MTCTCE/MTCWE 

Total Highspeed Internet Solutions 
1091 W. Kathryn Street 
Nixa, MO 65714 
(417) 851-1107 x. 9002 
www.totalhighspeed.com 

- Original Message - 
> From: "afmug"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 12:00:18 PM 
> Subject: Re: [AFMUG] Issue with Google 

> If you're NATing multiple customers behind a single IP address, do it this 
> way: 
> 
> 
> [ 
> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>  
> | 
> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
>  
> ] 
> 
> 
> 
> - 
> Mike Hammett 
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] 
> [ https://www.facebook.com/ICSIL ] [ 
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
> https://twitter.com/ICSIL ] 
> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ] 
> [ https://www.facebook.com/mdwestix ] [ 
> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
> https://twitter.com/mdwestix ] 
> [ http://www.thebrotherswisp.com/ | The Brothers WISP ] 
> [ https://www.facebook.com/thebrotherswisp ] [ 
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
> 
> From: "Christopher Tyler"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 11:46:07 AM 
> Subject: Re: [AFMUG] Issue with Google 
> 
> Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses 
> based on TJ's theory that the NAT pool might be too small. 
> 
> The source IP's seem to be spoofed or proxied somehow as the first IP address 
> in 
> the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it 
> hard to believe that our gateway router is scraping Google for content. 
> 
> -- 
> Christopher Tyler 
> Senior Network Engineer 
> MTCRE/MTCNA/MTCTCE/MTCWE 
> 
> Total Highspeed Internet Solutions 
> 1091 W. Kathryn Street 
> Nixa, MO 65714 
> (417) 851-1107 x. 9002 
> www.totalhighspeed.com 
> 
> - Original Message - 
>> From: "afmug"  
>> To: "AnimalFarm Microwave Users Group"  
>> Sent: Friday, June 19, 2020 11:37:58 AM 
>> Subject: Re: [AFMUG] Issue with Google 
> 
>> You have the source IP, port, and time. What more do you need to determine 
>> who's 
>> doing it? 
>> 
>> I'm assuming you're NATing customers at the router in question. 
>> 
>> 
>> 
>> - 
>> Mike Hammett 
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] 
>> [ https://www.facebook.com/ICSIL ] [ 
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
>> https://twitter.com/ICSIL ] 
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ] 
>> [ https://www.facebook.com/mdwestix ] [ 
>> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
>> https://twitter.com/mdwestix ] 
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ] 
>> [ https://www.facebook.com/thebrotherswisp ] [ 
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
>> 
>> From: "Christopher Tyler"  
>> To: "AnimalFarm Microwave Users Group"  
>> Sent: Friday, June 19, 2020 10:59:30 AM 
>> Subject: [AFMUG] Issue with Google 
>> 
>> So the other day we got an email (excerpt below) from Google's automated 
>> tool... 
>> 
>> We are seeing automated scraping of Google Web Search from a large 
>> number of your IPs. Automated scraping violates our /robots.txt file 
>> and also our Terms of Service. We request that you terminate this 
>> traffic immediately. Failure to do so may cause your network to be 
>> blocked by our abuse systems. 
>> 
>> To allow you to identify the traffic, we are providing a list of 
>> your IPs they used today (Source field), as well as the most common 
>> destination (Google) IP and port and a timestamp of a recent request 
>> (in UTC) to aid in your identification. Note that this list may not 
>> be exhaustive, and we request that you terminate all such 

Re: [AFMUG] Issue with Google

[Christopher Tyler]

It is a Mikrotik router. Nothing appears to be out of the ordinary.

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "Ken Hohhof" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 11:53:21 AM
> Subject: Re: [AFMUG] Issue with Google

> Normally you can't spoof source addresses for TCP connections, the return
> traffic would go to the real IP, unless there's some exotic BCP hijack
> involved.
> 
> Are you sure that your router has not been compromised and a proxy server
> installed?  Like SOCKS if it's a Mikrotik?
> 
> -Original Message-
> From: AF  On Behalf Of Christopher Tyler
> Sent: Friday, June 19, 2020 11:46 AM
> To: AnimalFarm Microwave Users Group 
> Subject: Re: [AFMUG] Issue with Google
> 
> Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses
> based on TJ's theory that the NAT pool might be too small.
> 
> The source IP's seem to be spoofed or proxied somehow as the first IP
> address in the list from Google is our ARIN /20 Network address (x.x.0.0)
> and I find it hard to believe that our gateway router is scraping Google for
> content.
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> - Original Message -
>> From: "afmug" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 11:37:58 AM
>> Subject: Re: [AFMUG] Issue with Google
> 
>> You have the source IP, port, and time. What more do you need to
>> determine who's doing it?
>> 
>> I'm assuming you're NATing customers at the router in question.
>> 
>> 
>> 
>> -
>> Mike Hammett
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] [
>> https://www.facebook.com/ICSIL ] [
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>> https://twitter.com/ICSIL ] [ http://www.midwest-ix.com/ | Midwest
>> Internet Exchange ] [ https://www.facebook.com/mdwestix ] [
>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>> https://twitter.com/mdwestix ] [ http://www.thebrotherswisp.com/ | The
>> Brothers WISP ] [ https://www.facebook.com/thebrotherswisp ] [
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>> 
>> From: "Christopher Tyler" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 10:59:30 AM
>> Subject: [AFMUG] Issue with Google
>> 
>> So the other day we got an email (excerpt below) from Google's automated
> tool...
>> 
>> We are seeing automated scraping of Google Web Search from a large
>> number of your IPs. Automated scraping violates our /robots.txt file
>> and also our Terms of Service. We request that you terminate this
>> traffic immediately. Failure to do so may cause your network to be
>> blocked by our abuse systems.
>> 
>> To allow you to identify the traffic, we are providing a list of your
>> IPs they used today (Source field), as well as the most common
>> destination (Google) IP and port and a timestamp of a recent request
>> (in UTC) to aid in your identification. Note that this list may not be
>> exhaustive, and we request that you terminate all such traffic, not
>> just traffic from IPs in this list.
>> 
>> All of the destination ports (to Google) are either 80 or 443, so they
>> at least appear to be legit web traffic on the surface. They are
>> obviously spoofed IP address as there are network addresses in the
>> list and the IP belongs to a router that doesn't appear to be
>> compromised in any way. The initial letter included 700+ IP addresses from
> our network.
>> 
>> It's now affecting our customers as they are now getting Captcha's for
>> every couple of Google searches that they perform.
>> 
>> Does anyone know of a good way to track the perpetrator(s) down and/or
>> know of a way to mitigate this?
>> 
>> --
>> Christopher Tyler
>> Senior Network Engineer
>> MTCRE/MTCNA/MTCTCE/MTCWE
>> 
>> Total Highspeed Internet Solutions
>> 1091 W. Kathryn Street
>> Nixa, MO 65714
>> (417) 851-1107 x. 9002
>> www.totalhighspeed.com
>> 
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>> 
>> 
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> 
> 
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Christopher Tyler]

That is how we are doing it for the most part. We still have a lot of old 
172.16.0.0/12 addresses that need to be converted to 100.64.0.0/10. We have 
been and still are steadily working towards that goal though.

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "afmug" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 12:00:18 PM
> Subject: Re: [AFMUG] Issue with Google

> If you're NATing multiple customers behind a single IP address, do it this 
> way:
> 
> 
> [
> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
> |
> https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
> ]
> 
> 
> 
> -
> Mike Hammett
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
> [ https://www.facebook.com/ICSIL ] [
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
> https://www.linkedin.com/company/intelligent-computing-solutions ] [
> https://twitter.com/ICSIL ]
> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
> [ https://www.facebook.com/mdwestix ] [
> https://www.linkedin.com/company/midwest-internet-exchange ] [
> https://twitter.com/mdwestix ]
> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
> [ https://www.facebook.com/thebrotherswisp ] [
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
> 
> From: "Christopher Tyler" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 11:46:07 AM
> Subject: Re: [AFMUG] Issue with Google
> 
> Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses
> based on TJ's theory that the NAT pool might be too small.
> 
> The source IP's seem to be spoofed or proxied somehow as the first IP address 
> in
> the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it
> hard to believe that our gateway router is scraping Google for content.
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> - Original Message -
>> From: "afmug" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 11:37:58 AM
>> Subject: Re: [AFMUG] Issue with Google
> 
>> You have the source IP, port, and time. What more do you need to determine 
>> who's
>> doing it?
>> 
>> I'm assuming you're NATing customers at the router in question.
>> 
>> 
>> 
>> -
>> Mike Hammett
>> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
>> [ https://www.facebook.com/ICSIL ] [
>> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
>> https://www.linkedin.com/company/intelligent-computing-solutions ] [
>> https://twitter.com/ICSIL ]
>> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
>> [ https://www.facebook.com/mdwestix ] [
>> https://www.linkedin.com/company/midwest-internet-exchange ] [
>> https://twitter.com/mdwestix ]
>> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
>> [ https://www.facebook.com/thebrotherswisp ] [
>> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
>> 
>> From: "Christopher Tyler" 
>> To: "AnimalFarm Microwave Users Group" 
>> Sent: Friday, June 19, 2020 10:59:30 AM
>> Subject: [AFMUG] Issue with Google
>> 
>> So the other day we got an email (excerpt below) from Google's automated 
>> tool...
>> 
>> We are seeing automated scraping of Google Web Search from a large
>> number of your IPs. Automated scraping violates our /robots.txt file
>> and also our Terms of Service. We request that you terminate this
>> traffic immediately. Failure to do so may cause your network to be
>> blocked by our abuse systems.
>> 
>> To allow you to identify the traffic, we are providing a list of
>> your IPs they used today (Source field), as well as the most common
>> destination (Google) IP and port and a timestamp of a recent request
>> (in UTC) to aid in your identification. Note that this list may not
>> be exhaustive, and we request that you terminate all such traffic, not
>> just traffic from IPs in this list.
>> 
>> All of the destination ports (to Google) are either 80 or 443, so they at 
>> least
>> appear to be legit web traffic on the surface. They are obviously spoofed IP
>> address as there are network addresses in the list and the IP belongs to a
>> router that doesn't appear to be compromised in any way. The initial letter
>> included 700+ IP addresses from our network.
>> 
>> It's now affecting our customers as they are now getting Captcha's for every
>> couple of Google searches that they perform.
>> 
>> Does anyone know of a good way to track the perpetrator(s) down and/or know 
>> of a
>> way to mitigate this?
>> 
>> --
>> Christopher Tyler
>> Senior Network Engineer
>> 

Re: [AFMUG] Issue with Google

[Mike Hammett]

Unimus would show the changes and alerted to them, if one was using Unimus and 
their router was compromised. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Ken Hohhof"  
To: "AnimalFarm Microwave Users Group"  
Sent: Friday, June 19, 2020 11:53:21 AM 
Subject: Re: [AFMUG] Issue with Google 

Normally you can't spoof source addresses for TCP connections, the return 
traffic would go to the real IP, unless there's some exotic BCP hijack 
involved. 

Are you sure that your router has not been compromised and a proxy server 
installed? Like SOCKS if it's a Mikrotik? 

-Original Message- 
From: AF  On Behalf Of Christopher Tyler 
Sent: Friday, June 19, 2020 11:46 AM 
To: AnimalFarm Microwave Users Group  
Subject: Re: [AFMUG] Issue with Google 

Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses 
based on TJ's theory that the NAT pool might be too small. 

The source IP's seem to be spoofed or proxied somehow as the first IP 
address in the list from Google is our ARIN /20 Network address (x.x.0.0) 
and I find it hard to believe that our gateway router is scraping Google for 
content. 

-- 
Christopher Tyler 
Senior Network Engineer 
MTCRE/MTCNA/MTCTCE/MTCWE 

Total Highspeed Internet Solutions 
1091 W. Kathryn Street 
Nixa, MO 65714 
(417) 851-1107 x. 9002 
www.totalhighspeed.com 

- Original Message - 
> From: "afmug"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 11:37:58 AM 
> Subject: Re: [AFMUG] Issue with Google 

> You have the source IP, port, and time. What more do you need to 
> determine who's doing it? 
> 
> I'm assuming you're NATing customers at the router in question. 
> 
> 
> 
> - 
> Mike Hammett 
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] [ 
> https://www.facebook.com/ICSIL ] [ 
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
> https://twitter.com/ICSIL ] [ http://www.midwest-ix.com/ | Midwest 
> Internet Exchange ] [ https://www.facebook.com/mdwestix ] [ 
> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
> https://twitter.com/mdwestix ] [ http://www.thebrotherswisp.com/ | The 
> Brothers WISP ] [ https://www.facebook.com/thebrotherswisp ] [ 
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
> 
> From: "Christopher Tyler"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 10:59:30 AM 
> Subject: [AFMUG] Issue with Google 
> 
> So the other day we got an email (excerpt below) from Google's automated 
tool... 
> 
> We are seeing automated scraping of Google Web Search from a large 
> number of your IPs. Automated scraping violates our /robots.txt file 
> and also our Terms of Service. We request that you terminate this 
> traffic immediately. Failure to do so may cause your network to be 
> blocked by our abuse systems. 
> 
> To allow you to identify the traffic, we are providing a list of your 
> IPs they used today (Source field), as well as the most common 
> destination (Google) IP and port and a timestamp of a recent request 
> (in UTC) to aid in your identification. Note that this list may not be 
> exhaustive, and we request that you terminate all such traffic, not 
> just traffic from IPs in this list. 
> 
> All of the destination ports (to Google) are either 80 or 443, so they 
> at least appear to be legit web traffic on the surface. They are 
> obviously spoofed IP address as there are network addresses in the 
> list and the IP belongs to a router that doesn't appear to be 
> compromised in any way. The initial letter included 700+ IP addresses from 
our network. 
> 
> It's now affecting our customers as they are now getting Captcha's for 
> every couple of Google searches that they perform. 
> 
> Does anyone know of a good way to track the perpetrator(s) down and/or 
> know of a way to mitigate this? 
> 
> -- 
> Christopher Tyler 
> Senior Network Engineer 
> MTCRE/MTCNA/MTCTCE/MTCWE 
> 
> Total Highspeed Internet Solutions 
> 1091 W. Kathryn Street 
> Nixa, MO 65714 
> (417) 851-1107 x. 9002 
> www.totalhighspeed.com 
> 
> -- 
> AF mailing list 
> AF@af.afmug.com 
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com 
> 
> 
> -- 
> AF mailing list 
> AF@af.afmug.com 
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list 
AF@af.afmug.com 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 



-- 
AF mailing list 
AF@af.afmug.com 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Mike Hammett]

If you're NATing multiple customers behind a single IP address, do it this way: 




https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CGNAT.29_or_NAT444
 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Christopher Tyler"  
To: "AnimalFarm Microwave Users Group"  
Sent: Friday, June 19, 2020 11:46:07 AM 
Subject: Re: [AFMUG] Issue with Google 

Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses 
based on TJ's theory that the NAT pool might be too small. 

The source IP's seem to be spoofed or proxied somehow as the first IP address 
in the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it 
hard to believe that our gateway router is scraping Google for content. 

-- 
Christopher Tyler 
Senior Network Engineer 
MTCRE/MTCNA/MTCTCE/MTCWE 

Total Highspeed Internet Solutions 
1091 W. Kathryn Street 
Nixa, MO 65714 
(417) 851-1107 x. 9002 
www.totalhighspeed.com 

- Original Message - 
> From: "afmug"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 11:37:58 AM 
> Subject: Re: [AFMUG] Issue with Google 

> You have the source IP, port, and time. What more do you need to determine 
> who's 
> doing it? 
> 
> I'm assuming you're NATing customers at the router in question. 
> 
> 
> 
> - 
> Mike Hammett 
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] 
> [ https://www.facebook.com/ICSIL ] [ 
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
> https://twitter.com/ICSIL ] 
> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ] 
> [ https://www.facebook.com/mdwestix ] [ 
> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
> https://twitter.com/mdwestix ] 
> [ http://www.thebrotherswisp.com/ | The Brothers WISP ] 
> [ https://www.facebook.com/thebrotherswisp ] [ 
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] 
> 
> From: "Christopher Tyler"  
> To: "AnimalFarm Microwave Users Group"  
> Sent: Friday, June 19, 2020 10:59:30 AM 
> Subject: [AFMUG] Issue with Google 
> 
> So the other day we got an email (excerpt below) from Google's automated 
> tool... 
> 
> We are seeing automated scraping of Google Web Search from a large 
> number of your IPs. Automated scraping violates our /robots.txt file 
> and also our Terms of Service. We request that you terminate this 
> traffic immediately. Failure to do so may cause your network to be 
> blocked by our abuse systems. 
> 
> To allow you to identify the traffic, we are providing a list of 
> your IPs they used today (Source field), as well as the most common 
> destination (Google) IP and port and a timestamp of a recent request 
> (in UTC) to aid in your identification. Note that this list may not 
> be exhaustive, and we request that you terminate all such traffic, not 
> just traffic from IPs in this list. 
> 
> All of the destination ports (to Google) are either 80 or 443, so they at 
> least 
> appear to be legit web traffic on the surface. They are obviously spoofed IP 
> address as there are network addresses in the list and the IP belongs to a 
> router that doesn't appear to be compromised in any way. The initial letter 
> included 700+ IP addresses from our network. 
> 
> It's now affecting our customers as they are now getting Captcha's for every 
> couple of Google searches that they perform. 
> 
> Does anyone know of a good way to track the perpetrator(s) down and/or know 
> of a 
> way to mitigate this? 
> 
> -- 
> Christopher Tyler 
> Senior Network Engineer 
> MTCRE/MTCNA/MTCTCE/MTCWE 
> 
> Total Highspeed Internet Solutions 
> 1091 W. Kathryn Street 
> Nixa, MO 65714 
> (417) 851-1107 x. 9002 
> www.totalhighspeed.com 
> 
> -- 
> AF mailing list 
> AF@af.afmug.com 
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com 
> 
> 
> -- 
> AF mailing list 
> AF@af.afmug.com 
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list 
AF@af.afmug.com 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Ken Hohhof]

Normally you can't spoof source addresses for TCP connections, the return
traffic would go to the real IP, unless there's some exotic BCP hijack
involved.

Are you sure that your router has not been compromised and a proxy server
installed?  Like SOCKS if it's a Mikrotik?

-Original Message-
From: AF  On Behalf Of Christopher Tyler
Sent: Friday, June 19, 2020 11:46 AM
To: AnimalFarm Microwave Users Group 
Subject: Re: [AFMUG] Issue with Google

Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses
based on TJ's theory that the NAT pool might be too small.

The source IP's seem to be spoofed or proxied somehow as the first IP
address in the list from Google is our ARIN /20 Network address (x.x.0.0)
and I find it hard to believe that our gateway router is scraping Google for
content.

--
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "afmug" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 11:37:58 AM
> Subject: Re: [AFMUG] Issue with Google

> You have the source IP, port, and time. What more do you need to 
> determine who's doing it?
> 
> I'm assuming you're NATing customers at the router in question.
> 
> 
> 
> -
> Mike Hammett
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ] [ 
> https://www.facebook.com/ICSIL ] [ 
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [ 
> https://www.linkedin.com/company/intelligent-computing-solutions ] [ 
> https://twitter.com/ICSIL ] [ http://www.midwest-ix.com/ | Midwest 
> Internet Exchange ] [ https://www.facebook.com/mdwestix ] [ 
> https://www.linkedin.com/company/midwest-internet-exchange ] [ 
> https://twitter.com/mdwestix ] [ http://www.thebrotherswisp.com/ | The 
> Brothers WISP ] [ https://www.facebook.com/thebrotherswisp ] [ 
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
> 
> From: "Christopher Tyler" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 10:59:30 AM
> Subject: [AFMUG] Issue with Google
> 
> So the other day we got an email (excerpt below) from Google's automated
tool...
> 
> We are seeing automated scraping of Google Web Search from a large 
> number of your IPs. Automated scraping violates our /robots.txt file 
> and also our Terms of Service. We request that you terminate this 
> traffic immediately. Failure to do so may cause your network to be 
> blocked by our abuse systems.
> 
> To allow you to identify the traffic, we are providing a list of your 
> IPs they used today (Source field), as well as the most common 
> destination (Google) IP and port and a timestamp of a recent request 
> (in UTC) to aid in your identification. Note that this list may not be 
> exhaustive, and we request that you terminate all such traffic, not 
> just traffic from IPs in this list.
> 
> All of the destination ports (to Google) are either 80 or 443, so they 
> at least appear to be legit web traffic on the surface. They are 
> obviously spoofed IP address as there are network addresses in the 
> list and the IP belongs to a router that doesn't appear to be 
> compromised in any way. The initial letter included 700+ IP addresses from
our network.
> 
> It's now affecting our customers as they are now getting Captcha's for 
> every couple of Google searches that they perform.
> 
> Does anyone know of a good way to track the perpetrator(s) down and/or 
> know of a way to mitigate this?
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> 
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com



-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Christopher Tyler]

The ratio was about half that, about to 218:1 NAT, just decreased to about 55:1.

And no, we are not recording sessions.

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "Robert" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 11:44:45 AM
> Subject: Re: [AFMUG] Issue with Google

> He has an IP address that translates to 700 addresses in his customer base. He
> doesn't record sessions. He doesn't have what's needed to track and individual
> customer down. Probably wouldn't matter if he only had 27 customers behind the
> IP address.
> 
> On 6/19/20 9:37 AM, Mike Hammett wrote:
> 
> 
> 
> You have the source IP, port, and time. What more do you need to determine 
> who's
> doing it?
> 
> I'm assuming you're NATing customers at the router in question.
> 
> 
> 
> -
> Mike Hammett
> [ http://www.ics-il.com/ | Intelligent
>  Computing Solutions ]
> [ https://www.facebook.com/ICSIL ] [
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
> https://www.linkedin.com/company/intelligent-computing-solutions ] [
> https://twitter.com/ICSIL ]
> [ http://www.midwest-ix.com/ | Midwest
>  Internet Exchange ]
> [ https://www.facebook.com/mdwestix ] [
> https://www.linkedin.com/company/midwest-internet-exchange ] [
> https://twitter.com/mdwestix ]
> [ http://www.thebrotherswisp.com/ | The
>  Brothers WISP ]
> [ https://www.facebook.com/thebrotherswisp ] [
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg |
>  
>  
> ]
> 
> From: "Christopher Tyler" [ mailto:ch...@totalhighspeed.net |
>  ]
> To: "AnimalFarm Microwave Users Group" [ mailto:af@af.afmug.com |
>  ]
> Sent: Friday, June 19, 2020 10:59:30 AM
> Subject: [AFMUG] Issue with Google
> 
> So the other day we got an email (excerpt below) from Google's automated 
> tool...
> 
> We are seeing automated scraping of Google Web Search from a large
> number of your IPs. Automated scraping violates our /robots.txt file
> and also our Terms of Service. We request that you terminate this
> traffic immediately. Failure to do so may cause your network to be
> blocked by our abuse systems.
> 
> To allow you to identify the traffic, we are providing a list of
> your IPs they used today (Source field), as well as the most common
> destination (Google) IP and port and a timestamp of a recent request
> (in UTC) to aid in your identification. Note that this list may not
> be exhaustive, and we request that you terminate all such traffic, not
> just traffic from IPs in this list.
> 
> All of the destination ports (to Google) are either 80 or 443, so they at 
> least
> appear to be legit web traffic on the surface. They are obviously spoofed IP
> address as there are network addresses in the list and the IP belongs to a
> router that doesn't appear to be compromised in any way. The initial letter
> included 700+ IP addresses from our network.
> 
> It's now affecting our customers as they are now getting Captcha's for every
> couple of Google searches that they perform.
> 
> Does anyone know of a good way to track the perpetrator(s) down and/or know 
> of a
> way to mitigate this?
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> [ http://www.totalhighspeed.com/ | www.totalhighspeed.com ]
> 
> --
> AF mailing list
> [ mailto:AF@af.afmug.com | AF@af.afmug.com ]
> [ http://af.afmug.com/mailman/listinfo/af_af.afmug.com |
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com ]
> 
> 
> 
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Christopher Tyler]

Yes, NAT is in play here, I just now increased the NAT pool to 128 addresses 
based on TJ's theory that the NAT pool might be too small.

The source IP's seem to be spoofed or proxied somehow as the first IP address 
in the list from Google is our ARIN /20 Network address (x.x.0.0) and I find it 
hard to believe that our gateway router is scraping Google for content.

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

- Original Message -
> From: "afmug" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 11:37:58 AM
> Subject: Re: [AFMUG] Issue with Google

> You have the source IP, port, and time. What more do you need to determine 
> who's
> doing it?
> 
> I'm assuming you're NATing customers at the router in question.
> 
> 
> 
> -
> Mike Hammett
> [ http://www.ics-il.com/ | Intelligent Computing Solutions ]
> [ https://www.facebook.com/ICSIL ] [
> https://plus.google.com/+IntelligentComputingSolutionsDeKalb ] [
> https://www.linkedin.com/company/intelligent-computing-solutions ] [
> https://twitter.com/ICSIL ]
> [ http://www.midwest-ix.com/ | Midwest Internet Exchange ]
> [ https://www.facebook.com/mdwestix ] [
> https://www.linkedin.com/company/midwest-internet-exchange ] [
> https://twitter.com/mdwestix ]
> [ http://www.thebrotherswisp.com/ | The Brothers WISP ]
> [ https://www.facebook.com/thebrotherswisp ] [
> https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ]
> 
> From: "Christopher Tyler" 
> To: "AnimalFarm Microwave Users Group" 
> Sent: Friday, June 19, 2020 10:59:30 AM
> Subject: [AFMUG] Issue with Google
> 
> So the other day we got an email (excerpt below) from Google's automated 
> tool...
> 
> We are seeing automated scraping of Google Web Search from a large
> number of your IPs. Automated scraping violates our /robots.txt file
> and also our Terms of Service. We request that you terminate this
> traffic immediately. Failure to do so may cause your network to be
> blocked by our abuse systems.
> 
> To allow you to identify the traffic, we are providing a list of
> your IPs they used today (Source field), as well as the most common
> destination (Google) IP and port and a timestamp of a recent request
> (in UTC) to aid in your identification. Note that this list may not
> be exhaustive, and we request that you terminate all such traffic, not
> just traffic from IPs in this list.
> 
> All of the destination ports (to Google) are either 80 or 443, so they at 
> least
> appear to be legit web traffic on the surface. They are obviously spoofed IP
> address as there are network addresses in the list and the IP belongs to a
> router that doesn't appear to be compromised in any way. The initial letter
> included 700+ IP addresses from our network.
> 
> It's now affecting our customers as they are now getting Captcha's for every
> couple of Google searches that they perform.
> 
> Does anyone know of a good way to track the perpetrator(s) down and/or know 
> of a
> way to mitigate this?
> 
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
> 
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
> 
> 
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Robert]

He has an IP address that translates to 700 addresses in his customer 
base.  He doesn't record sessions.  He doesn't have what's needed to 
track and individual customer down.   Probably wouldn't matter if he 
only had 27 customers behind the IP address.


On 6/19/20 9:37 AM, Mike Hammett wrote:
You have the source IP, port, and time. What more do you need to 
determine who's doing it?


I'm assuming you're NATing customers at the router in question.



-
Mike Hammett
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 





*From: *"Christopher Tyler" 
*To: *"AnimalFarm Microwave Users Group" 
*Sent: *Friday, June 19, 2020 10:59:30 AM
*Subject: *[AFMUG] Issue with Google

So the other day we got an email (excerpt below) from Google's 
automated tool...


We are seeing automated scraping of Google Web Search from a large
number of your IPs.  Automated scraping violates our /robots.txt file
and also our Terms of Service.  We request that you terminate this
traffic immediately.  Failure to do so may cause your network to be
blocked by our abuse systems.

To allow you to identify the traffic, we are providing a list of
your IPs they used today (Source field), as well as the most common
destination (Google) IP and port and a timestamp of a recent request
(in UTC) to aid in your identification.  Note that this list may not
be exhaustive, and we request that you terminate all such traffic, not
just traffic from IPs in this list.

All of the destination ports (to Google) are either 80 or 443, so they 
at least appear to be legit web traffic on the surface. They are 
obviously spoofed IP address as there are network addresses in the 
list and the IP belongs to a router that doesn't appear to be 
compromised in any way. The initial letter included 700+ IP addresses 
from our network.


It's now affecting our customers as they are now getting Captcha's for 
every couple of Google searches that they perform.


Does anyone know of a good way to track the perpetrator(s) down and/or 
know of a way to mitigate this?


--
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

--
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com




-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[Mike Hammett]

You have the source IP, port, and time. What more do you need to determine 
who's doing it? 


I'm assuming you're NATing customers at the router in question. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "Christopher Tyler"  
To: "AnimalFarm Microwave Users Group"  
Sent: Friday, June 19, 2020 10:59:30 AM 
Subject: [AFMUG] Issue with Google 

So the other day we got an email (excerpt below) from Google's automated 
tool... 

We are seeing automated scraping of Google Web Search from a large 
number of your IPs. Automated scraping violates our /robots.txt file 
and also our Terms of Service. We request that you terminate this 
traffic immediately. Failure to do so may cause your network to be 
blocked by our abuse systems. 

To allow you to identify the traffic, we are providing a list of 
your IPs they used today (Source field), as well as the most common 
destination (Google) IP and port and a timestamp of a recent request 
(in UTC) to aid in your identification. Note that this list may not 
be exhaustive, and we request that you terminate all such traffic, not 
just traffic from IPs in this list. 

All of the destination ports (to Google) are either 80 or 443, so they at least 
appear to be legit web traffic on the surface. They are obviously spoofed IP 
address as there are network addresses in the list and the IP belongs to a 
router that doesn't appear to be compromised in any way. The initial letter 
included 700+ IP addresses from our network. 

It's now affecting our customers as they are now getting Captcha's for every 
couple of Google searches that they perform. 

Does anyone know of a good way to track the perpetrator(s) down and/or know of 
a way to mitigate this? 

-- 
Christopher Tyler 
Senior Network Engineer 
MTCRE/MTCNA/MTCTCE/MTCWE 

Total Highspeed Internet Solutions 
1091 W. Kathryn Street 
Nixa, MO 65714 
(417) 851-1107 x. 9002 
www.totalhighspeed.com 

-- 
AF mailing list 
AF@af.afmug.com 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com 

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] Issue with Google

[TJ Trout]

most likely too many nat hosts behind too few publics?

On Fri, Jun 19, 2020 at 9:00 AM Christopher Tyler 
wrote:

> So the other day we got an email (excerpt below) from Google's automated
> tool...
>
> We are seeing automated scraping of Google Web Search from a large
> number of your IPs.  Automated scraping violates our /robots.txt file
> and also our Terms of Service.  We request that you terminate this
> traffic immediately.  Failure to do so may cause your network to be
> blocked by our abuse systems.
>
> To allow you to identify the traffic, we are providing a list of
> your IPs they used today (Source field), as well as the most common
> destination (Google) IP and port and a timestamp of a recent request
> (in UTC) to aid in your identification.  Note that this list may not
> be exhaustive, and we request that you terminate all such traffic, not
> just traffic from IPs in this list.
>
> All of the destination ports (to Google) are either 80 or 443, so they at
> least appear to be legit web traffic on the surface. They are obviously
> spoofed IP address as there are network addresses in the list and the IP
> belongs to a router that doesn't appear to be compromised in any way. The
> initial letter included 700+ IP addresses from our network.
>
> It's now affecting our customers as they are now getting Captcha's for
> every couple of Google searches that they perform.
>
> Does anyone know of a good way to track the perpetrator(s) down and/or
> know of a way to mitigate this?
>
> --
> Christopher Tyler
> Senior Network Engineer
> MTCRE/MTCNA/MTCTCE/MTCWE
>
> Total Highspeed Internet Solutions
> 1091 W. Kathryn Street
> Nixa, MO 65714
> (417) 851-1107 x. 9002
> www.totalhighspeed.com
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] Issue with Google

[Christopher Tyler]

So the other day we got an email (excerpt below) from Google's automated tool...

We are seeing automated scraping of Google Web Search from a large
number of your IPs.  Automated scraping violates our /robots.txt file
and also our Terms of Service.  We request that you terminate this
traffic immediately.  Failure to do so may cause your network to be
blocked by our abuse systems.

To allow you to identify the traffic, we are providing a list of
your IPs they used today (Source field), as well as the most common
destination (Google) IP and port and a timestamp of a recent request
(in UTC) to aid in your identification.  Note that this list may not
be exhaustive, and we request that you terminate all such traffic, not
just traffic from IPs in this list.

All of the destination ports (to Google) are either 80 or 443, so they at least 
appear to be legit web traffic on the surface. They are obviously spoofed IP 
address as there are network addresses in the list and the IP belongs to a 
router that doesn't appear to be compromised in any way. The initial letter 
included 700+ IP addresses from our network.

It's now affecting our customers as they are now getting Captcha's for every 
couple of Google searches that they perform.

Does anyone know of a good way to track the perpetrator(s) down and/or know of 
a way to mitigate this?

-- 
Christopher Tyler
Senior Network Engineer
MTCRE/MTCNA/MTCTCE/MTCWE

Total Highspeed Internet Solutions
1091 W. Kathryn Street
Nixa, MO 65714
(417) 851-1107 x. 9002
www.totalhighspeed.com

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] [ External ] Re: PacketFlux Sync for PTP 450i 900 MHz?

[Matt Mangriotis via AF]

Just wanted to clarify a couple things here (sorry, I am so late in getting to 
this)…

The 900 MHz 450 product is kind of a hybrid between 450 and 450i.

The AP is 450i hardware (using 48 VDC input, same housing, etc.).

The SM is 450 hardware (having a “candy bar” form factor, 30 VDC input, 
timing/default port RJ-11 6-pin).

The typical PTP version is created using 2 of the SMs. (Part number 
C009045B001A).

There is a PTP variant that can be purchased that uses the 450i hardware, but 
it is much more expensive and not typically deployed.

Hope this clarifies things a bit.

Matt

From: AF  On Behalf Of Mathew Howard
Sent: Friday, June 19, 2020 10:25 AM
To: AnimalFarm Microwave Users Group 
Subject: [ External ] Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

Yeah, the problem with 900mhz PTP is that unlike 2.4ghz or 5ghz, you can't run 
any higher power in ptp mode than you can in ptmp, so 2.4ghz often does work 
better... but there are some cases where 900mhz PTP does make sense.

If it's PTP, you definitely don't want the AUX port version, since there's no 
aux port on those radios, just a standard timing port.

I believe the 900mhz 450i SM/PTP is actually based on the original 450 SM 
hardware (not the 450i... it runs on 24v, for example, which I don't think any 
other 450i radio does), so my guess is that the changes Forrest is talking 
about don't apply, and it would work fine with the syncpipes you have, but I'm 
just guessing.

On Fri, Jun 19, 2020 at 6:52 AM Forrest Christian (List Account) 
mailto:li...@packetflux.com>> wrote:
What they did in the 'i' hardware was change the drive strength require.  I'm 
not sure if that applies to the SM hardware or not, or the 900Mhz.

The safest item would be the 'syncbox junior deluxe' which has a port you can 
power it with and then 6p6c ports to hook into the timing port on the radio.

On Fri, Jun 19, 2020 at 5:46 AM 
mailto:cg...@graytechsoftware.com>> wrote:
It is actually the PTP 450i that I’m talking about. I probably wouldn’t use it 
again because it seems once you have enough power to use 900 MHz in PTP, then 
you have plenty of power to use 2.4 GHz in PTP.

I was going to get the Syncbox Junior Aux Port, but there is no “uGPS power” 
option in the firmware, so I’m not sure the radio can power it.

I only have one of these, it is 1 hour away and already running. Otherwise, I 
would just test it with what I have here.



From: AF mailto:af-boun...@af.afmug.com>> On Behalf Of 
Forrest Christian (List Account)
Sent: Friday, June 19, 2020 5:55 AM
To: AnimalFarm Microwave Users Group mailto:af@af.afmug.com>>
Subject: Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

Yes, with the caveat that they changed some stuff in the 450i *AP* hardware 
which makes it incompatible with pipes before revision I0.

If it works and gets sync, it's good to go.  If it doesn't, then you'll just 
need to find a syncpipe or syncbox I0 or later.   (That's the letter I, it's 
kinda nice how that ended up landing = I0 = 450i.  Would have been better if 
they hadn't mangled the sync port to need a different circuit, but that's the 
way it goes).



On Thu, Jun 18, 2020 at 8:20 PM Mathew Howard 
mailto:mhoward...@gmail.com>> wrote:
The 900mhz PTP is definitely SM hardware.
Apparently I was wrong about them supporting sync over power... looks like you 
would indeed need a timing port device. But in that case, any old sync pipe 
should work, shouldn't it?

http://community.cambiumnetworks.com/t5/Sub-6-GHz/PTP450-900-BHM-Sync-Options/td-p/74379

I suspect we are actually talking about a PMP AP though, so we'd need to 
clarify that

On Thu, Jun 18, 2020 at 8:53 PM Forrest Christian (List Account) 
mailto:li...@packetflux.com>> wrote:
I see that everyone else is as confused as I am about some of these PTP Radios.

I'm about 100% certain that the 900Mhz PTP is be the AP hardware, in which case 
it should support any timing method you throw at it:  Canopy sync, cambium 
sync, or aux port sync.

For a single radio,the Syncbox Aux Port is probably the least expensive option, 
although I personally would throw the combination of a syncbox basic, 
sitemonitor base 3, and powerinjector+canopy sync at it as that will allow you 
to power and control any other radios at the site and gain temperature and 
telemetry for the site.

On the syncbox only option, The Syncbox Aux Port get's its power from the 
radio, just turn on uGPS power in the AP, and run a cat5 from the aux port to 
this unit.

If this isn't based on the AP hardware, then we need to go to plan B, which 
will probably be a timing port device, but I'll need to research more.

On 

Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

[Mathew Howard]

Yeah, the problem with 900mhz PTP is that unlike 2.4ghz or 5ghz, you can't
run any higher power in ptp mode than you can in ptmp, so 2.4ghz often does
work better... but there are some cases where 900mhz PTP does make sense.

If it's PTP, you definitely don't want the AUX port version, since there's
no aux port on those radios, just a standard timing port.

I believe the 900mhz 450i SM/PTP is actually based on the original 450 SM
hardware (not the 450i... it runs on 24v, for example, which I don't think
any other 450i radio does), so my guess is that the changes Forrest is
talking about don't apply, and it would work fine with the syncpipes you
have, but I'm just guessing.

On Fri, Jun 19, 2020 at 6:52 AM Forrest Christian (List Account) <
li...@packetflux.com> wrote:

> What they did in the 'i' hardware was change the drive strength require.
> I'm not sure if that applies to the SM hardware or not, or the 900Mhz.
>
> The safest item would be the 'syncbox junior deluxe' which has a port you
> can power it with and then 6p6c ports to hook into the timing port on the
> radio.
>
> On Fri, Jun 19, 2020 at 5:46 AM  wrote:
>
>> It is actually the PTP 450i that I’m talking about. I probably wouldn’t
>> use it again because it seems once you have enough power to use 900 MHz in
>> PTP, then you have plenty of power to use 2.4 GHz in PTP.
>>
>>
>>
>> I was going to get the Syncbox Junior Aux Port, but there is no “uGPS
>> power” option in the firmware, so I’m not sure the radio can power it.
>>
>>
>>
>> I only have one of these, it is 1 hour away and already running.
>> Otherwise, I would just test it with what I have here.
>>
>>
>>
>>
>>
>>
>>
>> *From:* AF  *On Behalf Of *Forrest Christian
>> (List Account)
>> *Sent:* Friday, June 19, 2020 5:55 AM
>> *To:* AnimalFarm Microwave Users Group 
>> *Subject:* Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?
>>
>>
>>
>> Yes, with the caveat that they changed some stuff in the 450i *AP*
>> hardware which makes it incompatible with pipes before revision I0.
>>
>>
>>
>> If it works and gets sync, it's good to go.  If it doesn't, then you'll
>> just need to find a syncpipe or syncbox I0 or later.   (That's the letter
>> I, it's kinda nice how that ended up landing = I0 = 450i.  Would have been
>> better if they hadn't mangled the sync port to need a different circuit,
>> but that's the way it goes).
>>
>>
>>
>>
>>
>>
>>
>> On Thu, Jun 18, 2020 at 8:20 PM Mathew Howard 
>> wrote:
>>
>> The 900mhz PTP is definitely SM hardware.
>>
>> Apparently I was wrong about them supporting sync over power... looks
>> like you would indeed need a timing port device. But in that case, any old
>> sync pipe should work, shouldn't it?
>>
>>
>>
>>
>> http://community.cambiumnetworks.com/t5/Sub-6-GHz/PTP450-900-BHM-Sync-Options/td-p/74379
>>
>>
>>
>> I suspect we are actually talking about a PMP AP though, so we'd need to
>> clarify that
>>
>>
>>
>> On Thu, Jun 18, 2020 at 8:53 PM Forrest Christian (List Account) <
>> li...@packetflux.com> wrote:
>>
>> I see that everyone else is as confused as I am about some of these PTP
>> Radios.
>>
>>
>>
>> I'm about 100% certain that the 900Mhz PTP is be the AP hardware, in
>> which case it should support any timing method you throw at it:  Canopy
>> sync, cambium sync, or aux port sync.
>>
>>
>>
>> For a single radio,the Syncbox Aux Port is probably the least expensive
>> option, although I personally would throw the combination of a syncbox
>> basic, sitemonitor base 3, and powerinjector+canopy sync at it as that will
>> allow you to power and control any other radios at the site and gain
>> temperature and telemetry for the site.
>>
>>
>>
>> On the syncbox only option, The Syncbox Aux Port get's its power from the
>> radio, just turn on uGPS power in the AP, and run a cat5 from the aux port
>> to this unit.
>>
>>
>>
>> If this isn't based on the AP hardware, then we need to go to plan B,
>> which will probably be a timing port device, but I'll need to research more.
>>
>>
>>
>> On Thu, Jun 18, 2020 at 12:30 PM  wrote:
>>
>> I have a site where I need sync only for a PTP 450i 900 MHz AP. Any
>> recommendation for which PacketFlux injector to use?
>>
>> [I have some old syncpipes, but they are not new enough.]
>>
>> Thank you, Chris
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>>
>>
>>
>> --
>>
>> - Forrest
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>>
>>
>>
>> --
>>
>> - Forrest
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
>
>
> --
> - Forrest
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

[AFMUG] For Sale - TVWS PTP Setup - Redline RDL-3000

[cgray]

Redline RDL-3000 TVWS PTP setup. I have both ends and a full bandwidth key.
It was purchased for a specific project and then not used. I powered both
ends up, but never configured them. 

 

Includes 2x radios, 2x PoEs, 2x speed keys, 4x log periodic antennas.
[Gravity mount is for show, probably easier to just buy one than for me to
ship it.]

 

These could be used for the PTP, or they could each be used as SMs.

 

Located in western MA. Could ship, but that may be cost prohibitive with the
size. Asking $1,200 (I think list is $2000+, but I haven't checked in a
while).

 

-Chris

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

[Forrest Christian (List Account)]

What they did in the 'i' hardware was change the drive strength require.
I'm not sure if that applies to the SM hardware or not, or the 900Mhz.

The safest item would be the 'syncbox junior deluxe' which has a port you
can power it with and then 6p6c ports to hook into the timing port on the
radio.

On Fri, Jun 19, 2020 at 5:46 AM  wrote:

> It is actually the PTP 450i that I’m talking about. I probably wouldn’t
> use it again because it seems once you have enough power to use 900 MHz in
> PTP, then you have plenty of power to use 2.4 GHz in PTP.
>
>
>
> I was going to get the Syncbox Junior Aux Port, but there is no “uGPS
> power” option in the firmware, so I’m not sure the radio can power it.
>
>
>
> I only have one of these, it is 1 hour away and already running.
> Otherwise, I would just test it with what I have here.
>
>
>
>
>
>
>
> *From:* AF  *On Behalf Of *Forrest Christian
> (List Account)
> *Sent:* Friday, June 19, 2020 5:55 AM
> *To:* AnimalFarm Microwave Users Group 
> *Subject:* Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?
>
>
>
> Yes, with the caveat that they changed some stuff in the 450i *AP*
> hardware which makes it incompatible with pipes before revision I0.
>
>
>
> If it works and gets sync, it's good to go.  If it doesn't, then you'll
> just need to find a syncpipe or syncbox I0 or later.   (That's the letter
> I, it's kinda nice how that ended up landing = I0 = 450i.  Would have been
> better if they hadn't mangled the sync port to need a different circuit,
> but that's the way it goes).
>
>
>
>
>
>
>
> On Thu, Jun 18, 2020 at 8:20 PM Mathew Howard 
> wrote:
>
> The 900mhz PTP is definitely SM hardware.
>
> Apparently I was wrong about them supporting sync over power... looks like
> you would indeed need a timing port device. But in that case, any old sync
> pipe should work, shouldn't it?
>
>
>
>
> http://community.cambiumnetworks.com/t5/Sub-6-GHz/PTP450-900-BHM-Sync-Options/td-p/74379
>
>
>
> I suspect we are actually talking about a PMP AP though, so we'd need to
> clarify that
>
>
>
> On Thu, Jun 18, 2020 at 8:53 PM Forrest Christian (List Account) <
> li...@packetflux.com> wrote:
>
> I see that everyone else is as confused as I am about some of these PTP
> Radios.
>
>
>
> I'm about 100% certain that the 900Mhz PTP is be the AP hardware, in which
> case it should support any timing method you throw at it:  Canopy sync,
> cambium sync, or aux port sync.
>
>
>
> For a single radio,the Syncbox Aux Port is probably the least expensive
> option, although I personally would throw the combination of a syncbox
> basic, sitemonitor base 3, and powerinjector+canopy sync at it as that will
> allow you to power and control any other radios at the site and gain
> temperature and telemetry for the site.
>
>
>
> On the syncbox only option, The Syncbox Aux Port get's its power from the
> radio, just turn on uGPS power in the AP, and run a cat5 from the aux port
> to this unit.
>
>
>
> If this isn't based on the AP hardware, then we need to go to plan B,
> which will probably be a timing port device, but I'll need to research more.
>
>
>
> On Thu, Jun 18, 2020 at 12:30 PM  wrote:
>
> I have a site where I need sync only for a PTP 450i 900 MHz AP. Any
> recommendation for which PacketFlux injector to use?
>
> [I have some old syncpipes, but they are not new enough.]
>
> Thank you, Chris
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
>
>
>
> --
>
> - Forrest
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
>
>
>
> --
>
> - Forrest
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>


-- 
- Forrest
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

[cgray]

It is actually the PTP 450i that I’m talking about. I probably wouldn’t use it 
again because it seems once you have enough power to use 900 MHz in PTP, then 
you have plenty of power to use 2.4 GHz in PTP.

 

I was going to get the Syncbox Junior Aux Port, but there is no “uGPS power” 
option in the firmware, so I’m not sure the radio can power it. 

 

I only have one of these, it is 1 hour away and already running. Otherwise, I 
would just test it with what I have here.

 

 

 

From: AF  On Behalf Of Forrest Christian (List Account)
Sent: Friday, June 19, 2020 5:55 AM
To: AnimalFarm Microwave Users Group 
Subject: Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

 

Yes, with the caveat that they changed some stuff in the 450i *AP* hardware 
which makes it incompatible with pipes before revision I0.   

 

If it works and gets sync, it's good to go.  If it doesn't, then you'll just 
need to find a syncpipe or syncbox I0 or later.   (That's the letter I, it's 
kinda nice how that ended up landing = I0 = 450i.  Would have been better if 
they hadn't mangled the sync port to need a different circuit, but that's the 
way it goes).

 

 

 

On Thu, Jun 18, 2020 at 8:20 PM Mathew Howard mailto:mhoward...@gmail.com> > wrote:

The 900mhz PTP is definitely SM hardware.

Apparently I was wrong about them supporting sync over power... looks like you 
would indeed need a timing port device. But in that case, any old sync pipe 
should work, shouldn't it?

 

http://community.cambiumnetworks.com/t5/Sub-6-GHz/PTP450-900-BHM-Sync-Options/td-p/74379

 

I suspect we are actually talking about a PMP AP though, so we'd need to 
clarify that

 

On Thu, Jun 18, 2020 at 8:53 PM Forrest Christian (List Account) 
mailto:li...@packetflux.com> > wrote:

I see that everyone else is as confused as I am about some of these PTP Radios.

 

I'm about 100% certain that the 900Mhz PTP is be the AP hardware, in which case 
it should support any timing method you throw at it:  Canopy sync, cambium 
sync, or aux port sync.

 

For a single radio,the Syncbox Aux Port is probably the least expensive option, 
although I personally would throw the combination of a syncbox basic, 
sitemonitor base 3, and powerinjector+canopy sync at it as that will allow you 
to power and control any other radios at the site and gain temperature and 
telemetry for the site.

 

On the syncbox only option, The Syncbox Aux Port get's its power from the 
radio, just turn on uGPS power in the AP, and run a cat5 from the aux port to 
this unit.

 

If this isn't based on the AP hardware, then we need to go to plan B, which 
will probably be a timing port device, but I'll need to research more.

 

On Thu, Jun 18, 2020 at 12:30 PM mailto:cg...@graytechsoftware.com> > wrote:

I have a site where I need sync only for a PTP 450i 900 MHz AP. Any 
recommendation for which PacketFlux injector to use? 

[I have some old syncpipes, but they are not new enough.]

Thank you, Chris

-- 
AF mailing list
AF@af.afmug.com  
http://af.afmug.com/mailman/listinfo/af_af.afmug.com




 

-- 

- Forrest

-- 
AF mailing list
AF@af.afmug.com  
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

-- 
AF mailing list
AF@af.afmug.com  
http://af.afmug.com/mailman/listinfo/af_af.afmug.com




 

-- 

- Forrest

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Re: [AFMUG] PacketFlux Sync for PTP 450i 900 MHz?

[Forrest Christian (List Account)]

Yes, with the caveat that they changed some stuff in the 450i *AP* hardware
which makes it incompatible with pipes before revision I0.

If it works and gets sync, it's good to go.  If it doesn't, then you'll
just need to find a syncpipe or syncbox I0 or later.   (That's the letter
I, it's kinda nice how that ended up landing = I0 = 450i.  Would have been
better if they hadn't mangled the sync port to need a different circuit,
but that's the way it goes).



On Thu, Jun 18, 2020 at 8:20 PM Mathew Howard  wrote:

> The 900mhz PTP is definitely SM hardware.
> Apparently I was wrong about them supporting sync over power... looks like
> you would indeed need a timing port device. But in that case, any old sync
> pipe should work, shouldn't it?
>
>
> http://community.cambiumnetworks.com/t5/Sub-6-GHz/PTP450-900-BHM-Sync-Options/td-p/74379
>
> I suspect we are actually talking about a PMP AP though, so we'd need to
> clarify that
>
> On Thu, Jun 18, 2020 at 8:53 PM Forrest Christian (List Account) <
> li...@packetflux.com> wrote:
>
>> I see that everyone else is as confused as I am about some of these PTP
>> Radios.
>>
>> I'm about 100% certain that the 900Mhz PTP is be the AP hardware, in
>> which case it should support any timing method you throw at it:  Canopy
>> sync, cambium sync, or aux port sync.
>>
>> For a single radio,the Syncbox Aux Port is probably the least expensive
>> option, although I personally would throw the combination of a syncbox
>> basic, sitemonitor base 3, and powerinjector+canopy sync at it as that will
>> allow you to power and control any other radios at the site and gain
>> temperature and telemetry for the site.
>>
>> On the syncbox only option, The Syncbox Aux Port get's its power from the
>> radio, just turn on uGPS power in the AP, and run a cat5 from the aux port
>> to this unit.
>>
>> If this isn't based on the AP hardware, then we need to go to plan B,
>> which will probably be a timing port device, but I'll need to research more.
>>
>> On Thu, Jun 18, 2020 at 12:30 PM  wrote:
>>
>>> I have a site where I need sync only for a PTP 450i 900 MHz AP. Any
>>> recommendation for which PacketFlux injector to use?
>>>
>>> [I have some old syncpipes, but they are not new enough.]
>>>
>>> Thank you, Chris
>>> --
>>> AF mailing list
>>> AF@af.afmug.com
>>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>>
>>
>>
>> --
>> - Forrest
>> --
>> AF mailing list
>> AF@af.afmug.com
>> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>>
> --
> AF mailing list
> AF@af.afmug.com
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>


-- 
- Forrest
-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com