ARIN & RADB

2002-05-26 Thread Ralph Doncaster


Did someone at Merit see my posts and decide to start mirroring the ARIN
RR (see the source line at the bottom)?

[ralph@cpu1693 lralph]$ whois [EMAIL PROTECTED]
[whois.radb.net]
route:  66.11.160.0/23
descr:  ISTOP-Montreal
Doncaster Consulting Inc.
2720 Queensview Dr
Ottawa, ON K2B 1A5
CA
origin: AS21936
notify: [EMAIL PROTECTED]
mnt-by: MNT-ISTOP
changed:[EMAIL PROTECTED] 20020525
source: ALTDB

route: 66.11.160.0/20
descr: Doncaster Consulting Inc.
   2720 Queensview Dr
   Ottawa, ON K2B 1A5
   CA
origin:AS21936
notify:[EMAIL PROTECTED]
mnt-by:MNT-ISTOP
changed:   [EMAIL PROTECTED] 20020517
source:ARIN

Ralph Doncaster
principal, IStop.com 
div. of Doncaster Consulting Inc.




OK barge-bridge collision and collapse

2002-05-26 Thread Sean Donelan



A few people asked the interstate-40 bridge collapse in Oklahoma across
the Arkansas river.  11 and possible as many as 20 people are believed
dead.

Although I-40 is a major cross-country interstate, the bridge collapse
had no apparent impact on cross-country telecommunications traffic.  I'm
not aware of any fiber routes across that bridge.





Re: Selective DNS replies

2002-05-26 Thread jeffrey arnold



:: On Wed, Apr 24, 2002 at 08:55:15PM +0100, Avleen Vig wrote:
:: >
:: > This subject has probably been talked to death, so I apologise in advance
:: > for bringing it up!
:: >
:: > Is there any DNS server currently availible that can reply to DNS lookups
:: > based on the source IP address?
::

djbdns (tinydns) can do this via location tags.

http://cr.yp.to/djbdns/faq/tinydns.html
(see question: "How do I send different clients to different clusters of
servers?")

-jba
__
 [[EMAIL PROTECTED]] :: analogue.networks.nyc :: http://analogue.net




Re: proposed government regulation of .za namespace

2002-05-26 Thread David Ulevitch


bert hubert said:

>[SNIP]

> I argued about this with them *at length* and they kept inventing more
> reasons why I was breaking RFC compliance. They even told me they
> couldn't accept my nameservers as these would 'waste bandwidth' which
> was 'terriby expensive' in South Africa. It probably is, but that has
> nothing to do with my nameservers and their reverse delegation!
>
> In the end sanity more or less broke out and one of them stated that
> they were very busy with legislation &c and unable to change a script
> that was only causing problems for me and for nobody else.

You are not the only one,

We also have had many problems with them regarding this issue and were
essentially stonewalled.  Any of our users in the .co.za namespace are
unable to use ns3 or ns4 of our nameservers.  It's a shame especially
because it seems to be such a worthless requirement.  (Then again there
are some registrars which require AXFR access from you)
-davidu

---
"Never doubt that a small group of thoughtful citizens can change the
world. Indeed, it is the only thing that ever has." --Margaret Mead






Re: proposed government regulation of .za namespace

2002-05-26 Thread bert hubert


On Sat, May 25, 2002 at 09:04:40AM -0700, Randy Bush wrote:
> 
> > ISC has had very little in the way of problems as a .ZA slave
> 
> its the ac.za and co.za messes

Try registering a domain with co.za if any of your nameservers sits on an
RFC2317 classlessly delegated reverse, and where your nameserver does not
recurse. They have a script that checks if YOUR nameserver knows about ITS
ip address and they query for the 1:1 in.addr-arpa mapping.

If your nameserver does not provide an answer they like, they are unable to
let registration go through. Our nameservers reply with a SERVFAIL as they
are not authoritative for their 1:1 in.addr-arpa mapping and only know about
the RFC2317 indirected one.

I argued about this with them *at length* and they kept inventing more
reasons why I was breaking RFC compliance. They even told me they couldn't
accept my nameservers as these would 'waste bandwidth' which was 'terriby
expensive' in South Africa. It probably is, but that has nothing to do with
my nameservers and their reverse delegation!

In the end sanity more or less broke out and one of them stated that they
were very busy with legislation &c and unable to change a script that was
only causing problems for me and for nobody else.

Now I doubt the last part, but I can understand them being undermanned. And
then we gave it up. Good luck to them all.

Regards,

bert

-- 
http://www.PowerDNS.com  Versatile DNS Software & Services
http://www.tk  the dot in .tk
http://lartc.org   Linux Advanced Routing & Traffic Control HOWTO



RE: Selective DNS replies

2002-05-26 Thread South Valley Internet



Bind version 9 has the "view" config statement that may do what you want


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
bert hubert
Sent: Sunday, May 26, 2002 9:11 AM
To: Avleen Vig
Cc: [EMAIL PROTECTED]
Subject: Re: Selective DNS replies



On Wed, Apr 24, 2002 at 08:55:15PM +0100, Avleen Vig wrote:
> 
> This subject has probably been talked to death, so I apologise in advance
> for bringing it up!
> 
> Is there any DNS server currently availible that can reply to DNS lookups
> based on the source IP address?

http://www.powerdns.com/pdns and especially 
http://doc.powerdns.com/a1405.html#PIPEBACKEND

and
http://doc.powerdns.com/backend-writers-guide.html

But beware, it is not free, not as in beer and not as in speech! Free for
not-for-profit use though.

The pipebackend will let you do this in perl or in python or whatever. You
could also code more complete backends in C++ using the third URL.

Regards,

bert 

-- 
http://www.PowerDNS.com  Versatile DNS Software & Services
http://www.tk  the dot in .tk
http://lartc.org   Linux Advanced Routing & Traffic Control HOWTO





Re: Selective DNS replies

2002-05-26 Thread bert hubert


On Wed, Apr 24, 2002 at 08:55:15PM +0100, Avleen Vig wrote:
> 
> This subject has probably been talked to death, so I apologise in advance
> for bringing it up!
> 
> Is there any DNS server currently availible that can reply to DNS lookups
> based on the source IP address?

http://www.powerdns.com/pdns and especially 
http://doc.powerdns.com/a1405.html#PIPEBACKEND

and
http://doc.powerdns.com/backend-writers-guide.html

But beware, it is not free, not as in beer and not as in speech! Free for
not-for-profit use though.

The pipebackend will let you do this in perl or in python or whatever. You
could also code more complete backends in C++ using the third URL.

Regards,

bert 

-- 
http://www.PowerDNS.com  Versatile DNS Software & Services
http://www.tk  the dot in .tk
http://lartc.org   Linux Advanced Routing & Traffic Control HOWTO



Re: Certification or College degrees?

2002-05-26 Thread Arnold Nipper


On Sun, May 26, 2002 at 08:33:11AM +0200, M?ns Nilsson wrote:
> 
>   (this is actually my first NANOG post ever...) 
> 
> At the Royal Institute of Technology in Stockholm, Sweden, we have a series
> of courses that focus on networking. The starting one can be seen as
> "getting the programmer to know IP's quirks", but as we progress, we teach
> deeper and deeper into the technicalities of routing, including theory of
> routing (discussion of Dijkstra, and similar) and practice; we have a
> routing lab where we first make them understand that static routes don't
> work and then progress into understanding first OSPF, then BGP. 
> 

Nothing is more stable and cuases less pain than static routing. And it
always works. Ofc ourse it doesn't scale very and also doesn't support
alternate paths very well ;-))

-- 
Arnold Nipper / nIPper consulting  mailto:[EMAIL PROTECTED]