local routing problem...

2007-11-06 Thread Steven M. Bellovin

Somewhat OT, but this audience will appreciate it more than most.  This
item appeared in RISKS Digest.


Date: Mon, 5 Nov 2007 09:55:50 +0100
From: Stefan Alfredsson [EMAIL PROTECTED]
Subject: Cellphone in USB charger became default route

His cellphone charger was broken, so 17 year old Christoffer connected
his phone, a Sony Ericsson k800i, via USB to his parents computer and
left it to charge over night.

A month later, he got a bill of SEK 6911  (about USD $1100).

It turns out that the phone became the default broadband when plugged
in via USB, and his long-running downloads were done over the phone
instead of his broadband connection. The common price per Mbyte
GPRS/UMTS data traffic is SEK 10 to 15 (about USD $1.5 to $2.3), which
would correspond to about 500 Mbyte downloaded data.

Christoffer claims there was no warning to allow the phone to take
over the connection. I did not even know it was possible.  According
to the operator Tele2, he must pay the bill even if it was a mistake.
They concluded that the phone modem had been used, but could not tell
how it happened. The operator were not aware of previous incidents, but
claims that there is software to link the phone to the computer and
start the phone Internet function, but it's not possible for the
computer to do this on its own.

Original article in Swedish:
  http://www.aftonbladet.se/goteborg/article1141706.ab


UUnet routing problem

2002-09-26 Thread Sorin CONSTANTINESCU



Hi,

This morning we've discovered that one of our IP's was routed somewhere
towards an ALTER.NET customer.

All the experiments i'm going to show you are done from
route-server.exodus.net.

a show ip bgp 193.231.236.41 show that the originator of the IP Block from
where 193.231.236.41 belongs is AS8708 (RDSNET ROMANIA).

BGP routing table entry for 193.231.224.0/20, version 4439795
Paths: (8 available, best #1)
  Not advertised to any peer
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.40.63 from 209.1.40.63 (209.1.40.63)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate, best
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.40.129 from 209.1.40.129 (209.1.40.129)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.220.242 from 209.1.220.242 (209.1.220.242)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.220.134 from 209.1.220.134 (209.1.220.134)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.40.141 from 209.1.40.141 (209.1.40.141)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.220.7 from 209.1.220.7 (209.1.220.7)
  Origin IGP, localpref 1000, valid, internal, atomic-aggregate
  3561 701 702 8708, (aggregated by 8708 193.231.191.33)
209.1.220.7 from 209.1.220.84 (209.1.220.7)

But, somewhere on the way,

route-server.exodus.nettr 193.231.236.41

Type escape sequence to abort.
Tracing the route to FuckingLiveShow.home.ro (193.231.236.41)

  1 dcr01-p0-1.sntc08.exodus.net (209.1.169.182) 0 msec 0 msec 0 msec
  2 ibr01-g0-0.sntc08.exodus.net (66.35.194.197) 0 msec 0 msec 0 msec
  3 dcr2-so-3-0-0.SantaClara.cw.net (208.172.156.197) [AS 3561] 0 msec 0
msec 4 msec
  4 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
agr4-so-6-0-0.SantaClara.cw.net (208.172.156.158) [AS 3561] 0 msec
agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
  5 acr1-loopback.SanFrancisco.cw.net (206.24.210.61) [AS 3561] 4 msec 4
msec 4 msec
  6 bpr2.SanJoseEquinix.cw.net (206.24.210.27) [AS 3561] 4 msec 4 msec 8
msec
  7 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
3561] 4 msec
cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.46) [AS
3561] 224 msec
cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
3561] 4 msec
  8 POS2-0.XR2.SJC7.ALTER.NET (152.63.56.166) [AS 701] 8 msec 4 msec 4
msec
  9 POS5-0.XR2.SJC1.ALTER.NET (152.63.52.141) [AS 701] 8 msec 4 msec 4
msec
 10 0.so-0-0-0.XL2.SJC1.ALTER.NET (152.63.55.126) [AS 701] 8 msec 4 msec 4
msec
 11 0.so-3-0-0.TL2.SAC1.ALTER.NET (152.63.54.10) [AS 701] 8 msec 8 msec 8
msec
 12 0.so-4-0-0.TL2.DCA6.ALTER.NET (152.63.10.61) [AS 701] 84 msec 84 msec
84 msec
 13 0.so-6-0-0.XL2.DCA6.ALTER.NET (152.63.38.74) [AS 701] 88 msec 88 msec
88 msec
 14 0.so-7-0-0.XR2.DCA6.ALTER.NET (152.63.38.90) [AS 701] 88 msec 88 msec
88 msec
 15 284.at-2-0-0.CL2.IAD5.ALTER.NET (152.63.35.58) [AS 701] 88 msec 88
msec 92 msec
 16 501.ATM5-0.GW5.IAD5.ALTER.NET (152.63.43.141) [AS 701] 92 msec 92 msec
88 msec
 17 xa-gw2.customer.alter.net (157.130.13.70) [AS 701] 120 msec 92 msec 92
msec
 18 s1.home.ro (193.231.236.41) [AS 8708] 92 msec 92 msec 92
msec
route-server.exodus.net

Has anyone ever experienced this kind of problems? We've written to UUNET
Europe, and they've answered to us that it's a problem at UUNET USA. It's
been almost 8 hours since they replied to us, but the problem persists.


PS: If there are any technicians from UUNET on this list, please give us
a hand.

Thank you,
---
Sorin ConstantinescuTel: +402 13 010 850
Network Administrator   Fax: +402 13 010 892
RDS Bucharest   Email: [EMAIL PROTECTED]

Privileged/Confidential Information may be contained in this message. If
you are not the addressee indicated in this message (or responsible for
delivery of the message to such person), you may not copy or deliver this
message to anyone. In such a case, you should destroy this message and
kindly notify the sender by reply e-mail.





Re: UUnet routing problem

2002-09-26 Thread dies




Have you contacted 701?


On Thu, 26 Sep 2002, Sorin CONSTANTINESCU wrote:



 Hi,

 This morning we've discovered that one of our IP's was routed somewhere
 towards an ALTER.NET customer.

 All the experiments i'm going to show you are done from
 route-server.exodus.net.

 a show ip bgp 193.231.236.41 show that the originator of the IP Block from
 where 193.231.236.41 belongs is AS8708 (RDSNET ROMANIA).

 BGP routing table entry for 193.231.224.0/20, version 4439795
 Paths: (8 available, best #1)
   Not advertised to any peer
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.40.63 from 209.1.40.63 (209.1.40.63)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate, best
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.40.129 from 209.1.40.129 (209.1.40.129)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.220.242 from 209.1.220.242 (209.1.220.242)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.220.134 from 209.1.220.134 (209.1.220.134)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.40.141 from 209.1.40.141 (209.1.40.141)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.220.7 from 209.1.220.7 (209.1.220.7)
   Origin IGP, localpref 1000, valid, internal, atomic-aggregate
   3561 701 702 8708, (aggregated by 8708 193.231.191.33)
 209.1.220.7 from 209.1.220.84 (209.1.220.7)

 But, somewhere on the way,

 route-server.exodus.nettr 193.231.236.41

 Type escape sequence to abort.
 Tracing the route to FuckingLiveShow.home.ro (193.231.236.41)

   1 dcr01-p0-1.sntc08.exodus.net (209.1.169.182) 0 msec 0 msec 0 msec
   2 ibr01-g0-0.sntc08.exodus.net (66.35.194.197) 0 msec 0 msec 0 msec
   3 dcr2-so-3-0-0.SantaClara.cw.net (208.172.156.197) [AS 3561] 0 msec 0
 msec 4 msec
   4 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
 agr4-so-6-0-0.SantaClara.cw.net (208.172.156.158) [AS 3561] 0 msec
 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
   5 acr1-loopback.SanFrancisco.cw.net (206.24.210.61) [AS 3561] 4 msec 4
 msec 4 msec
   6 bpr2.SanJoseEquinix.cw.net (206.24.210.27) [AS 3561] 4 msec 4 msec 8
 msec
   7 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
 3561] 4 msec
 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.46) [AS
 3561] 224 msec
 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
 3561] 4 msec
   8 POS2-0.XR2.SJC7.ALTER.NET (152.63.56.166) [AS 701] 8 msec 4 msec 4
 msec
   9 POS5-0.XR2.SJC1.ALTER.NET (152.63.52.141) [AS 701] 8 msec 4 msec 4
 msec
  10 0.so-0-0-0.XL2.SJC1.ALTER.NET (152.63.55.126) [AS 701] 8 msec 4 msec 4
 msec
  11 0.so-3-0-0.TL2.SAC1.ALTER.NET (152.63.54.10) [AS 701] 8 msec 8 msec 8
 msec
  12 0.so-4-0-0.TL2.DCA6.ALTER.NET (152.63.10.61) [AS 701] 84 msec 84 msec
 84 msec
  13 0.so-6-0-0.XL2.DCA6.ALTER.NET (152.63.38.74) [AS 701] 88 msec 88 msec
 88 msec
  14 0.so-7-0-0.XR2.DCA6.ALTER.NET (152.63.38.90) [AS 701] 88 msec 88 msec
 88 msec
  15 284.at-2-0-0.CL2.IAD5.ALTER.NET (152.63.35.58) [AS 701] 88 msec 88
 msec 92 msec
  16 501.ATM5-0.GW5.IAD5.ALTER.NET (152.63.43.141) [AS 701] 92 msec 92 msec
 88 msec
  17 xa-gw2.customer.alter.net (157.130.13.70) [AS 701] 120 msec 92 msec 92
 msec
  18 s1.home.ro (193.231.236.41) [AS 8708] 92 msec 92 msec 92
 msec
 route-server.exodus.net

 Has anyone ever experienced this kind of problems? We've written to UUNET
 Europe, and they've answered to us that it's a problem at UUNET USA. It's
 been almost 8 hours since they replied to us, but the problem persists.


 PS: If there are any technicians from UUNET on this list, please give us
 a hand.

 Thank you,
 ---
 Sorin Constantinescu  Tel: +402 13 010 850
 Network Administrator Fax: +402 13 010 892
 RDS Bucharest Email: [EMAIL PROTECTED]

 Privileged/Confidential Information may be contained in this message. If
 you are not the addressee indicated in this message (or responsible for
 delivery of the message to such person), you may not copy or deliver this
 message to anyone. In such a case, you should destroy this message and
 kindly notify the sender by reply e-mail.






Re: UUnet routing problem

2002-09-26 Thread Sorin Constantinescu




Yes, we did. The e-mail was addressed to [EMAIL PROTECTED] and [EMAIL PROTECTED] We
also called at  1-800-900-0241 option 2 3 1. All we got was some ticket
numbers.

Bye,

On Thu, 26 Sep 2002, dies wrote:

 Date: Thu, 26 Sep 2002 14:06:50 -0400 (EDT)
 From: dies [EMAIL PROTECTED]
 To: Sorin CONSTANTINESCU [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: Re: UUnet routing problem




 Have you contacted 701?


 On Thu, 26 Sep 2002, Sorin CONSTANTINESCU wrote:

 
 
  Hi,
 
  This morning we've discovered that one of our IP's was routed somewhere
  towards an ALTER.NET customer.
 
  All the experiments i'm going to show you are done from
  route-server.exodus.net.
 
  a show ip bgp 193.231.236.41 show that the originator of the IP Block from
  where 193.231.236.41 belongs is AS8708 (RDSNET ROMANIA).
 
  BGP routing table entry for 193.231.224.0/20, version 4439795
  Paths: (8 available, best #1)
Not advertised to any peer
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.63 from 209.1.40.63 (209.1.40.63)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate, best
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.129 from 209.1.40.129 (209.1.40.129)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.242 from 209.1.220.242 (209.1.220.242)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.134 from 209.1.220.134 (209.1.220.134)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.141 from 209.1.40.141 (209.1.40.141)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.7 from 209.1.220.7 (209.1.220.7)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.7 from 209.1.220.84 (209.1.220.7)
 
  But, somewhere on the way,
 
  route-server.exodus.nettr 193.231.236.41
 
  Type escape sequence to abort.
  Tracing the route to FuckingLiveShow.home.ro (193.231.236.41)
 
1 dcr01-p0-1.sntc08.exodus.net (209.1.169.182) 0 msec 0 msec 0 msec
2 ibr01-g0-0.sntc08.exodus.net (66.35.194.197) 0 msec 0 msec 0 msec
3 dcr2-so-3-0-0.SantaClara.cw.net (208.172.156.197) [AS 3561] 0 msec 0
  msec 4 msec
4 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
  agr4-so-6-0-0.SantaClara.cw.net (208.172.156.158) [AS 3561] 0 msec
  agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
5 acr1-loopback.SanFrancisco.cw.net (206.24.210.61) [AS 3561] 4 msec 4
  msec 4 msec
6 bpr2.SanJoseEquinix.cw.net (206.24.210.27) [AS 3561] 4 msec 4 msec 8
  msec
7 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
  3561] 4 msec
  cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.46) [AS
  3561] 224 msec
  cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
  3561] 4 msec
8 POS2-0.XR2.SJC7.ALTER.NET (152.63.56.166) [AS 701] 8 msec 4 msec 4
  msec
9 POS5-0.XR2.SJC1.ALTER.NET (152.63.52.141) [AS 701] 8 msec 4 msec 4
  msec
   10 0.so-0-0-0.XL2.SJC1.ALTER.NET (152.63.55.126) [AS 701] 8 msec 4 msec 4
  msec
   11 0.so-3-0-0.TL2.SAC1.ALTER.NET (152.63.54.10) [AS 701] 8 msec 8 msec 8
  msec
   12 0.so-4-0-0.TL2.DCA6.ALTER.NET (152.63.10.61) [AS 701] 84 msec 84 msec
  84 msec
   13 0.so-6-0-0.XL2.DCA6.ALTER.NET (152.63.38.74) [AS 701] 88 msec 88 msec
  88 msec
   14 0.so-7-0-0.XR2.DCA6.ALTER.NET (152.63.38.90) [AS 701] 88 msec 88 msec
  88 msec
   15 284.at-2-0-0.CL2.IAD5.ALTER.NET (152.63.35.58) [AS 701] 88 msec 88
  msec 92 msec
   16 501.ATM5-0.GW5.IAD5.ALTER.NET (152.63.43.141) [AS 701] 92 msec 92 msec
  88 msec
   17 xa-gw2.customer.alter.net (157.130.13.70) [AS 701] 120 msec 92 msec 92
  msec
   18 s1.home.ro (193.231.236.41) [AS 8708] 92 msec 92 msec 92
  msec
  route-server.exodus.net
 
  Has anyone ever experienced this kind of problems? We've written to UUNET
  Europe, and they've answered to us that it's a problem at UUNET USA. It's
  been almost 8 hours since they replied to us, but the problem persists.
 
 
  PS: If there are any technicians from UUNET on this list, please give us
  a hand.
 
  Thank you,
  ---
  Sorin ConstantinescuTel: +402 13 010 850
  Network Administrator   Fax: +402 13 010 892
  RDS Bucharest   Email: [EMAIL PROTECTED]
 
  Privileged/Confidential Information may be contained in this message. If
  you are not the addressee indicated in this message (or responsible for
  delivery of the message to such person), you may not copy or deliver this
  message to anyone

RE: UUnet routing problem

2002-09-26 Thread Michael Hallgren


.ro -- try their London or Amsterdam guys. In an earlier life --
Teleglobe -- I
found them quite responsive (at least EU daytime :).

Cheers

mh

-Message d'origine-
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de
Sorin Constantinescu
Envoye : jeudi 26 septembre 2002 20:21
A : dies
Cc : [EMAIL PROTECTED]; [EMAIL PROTECTED]
Objet : Re: UUnet routing problem





Yes, we did. The e-mail was addressed to [EMAIL PROTECTED] and [EMAIL PROTECTED] We
also called at  1-800-900-0241 option 2 3 1. All we got was some ticket
numbers.

Bye,

On Thu, 26 Sep 2002, dies wrote:

 Date: Thu, 26 Sep 2002 14:06:50 -0400 (EDT)
 From: dies [EMAIL PROTECTED]
 To: Sorin CONSTANTINESCU [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
 Subject: Re: UUnet routing problem




 Have you contacted 701?


 On Thu, 26 Sep 2002, Sorin CONSTANTINESCU wrote:

 
 
  Hi,
 
  This morning we've discovered that one of our IP's was routed somewhere
  towards an ALTER.NET customer.
 
  All the experiments i'm going to show you are done from
  route-server.exodus.net.
 
  a show ip bgp 193.231.236.41 show that the originator of the IP Block
from
  where 193.231.236.41 belongs is AS8708 (RDSNET ROMANIA).
 
  BGP routing table entry for 193.231.224.0/20, version 4439795
  Paths: (8 available, best #1)
Not advertised to any peer
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.63 from 209.1.40.63 (209.1.40.63)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate,
best
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.129 from 209.1.40.129 (209.1.40.129)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.242 from 209.1.220.242 (209.1.220.242)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.134 from 209.1.220.134 (209.1.220.134)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.40.141 from 209.1.40.141 (209.1.40.141)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.7 from 209.1.220.7 (209.1.220.7)
Origin IGP, localpref 1000, valid, internal, atomic-aggregate
3561 701 702 8708, (aggregated by 8708 193.231.191.33)
  209.1.220.7 from 209.1.220.84 (209.1.220.7)
 
  But, somewhere on the way,
 
  route-server.exodus.nettr 193.231.236.41
 
  Type escape sequence to abort.
  Tracing the route to FuckingLiveShow.home.ro (193.231.236.41)
 
1 dcr01-p0-1.sntc08.exodus.net (209.1.169.182) 0 msec 0 msec 0 msec
2 ibr01-g0-0.sntc08.exodus.net (66.35.194.197) 0 msec 0 msec 0 msec
3 dcr2-so-3-0-0.SantaClara.cw.net (208.172.156.197) [AS 3561] 0 msec 0
  msec 4 msec
4 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
  agr4-so-6-0-0.SantaClara.cw.net (208.172.156.158) [AS 3561] 0 msec
  agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
5 acr1-loopback.SanFrancisco.cw.net (206.24.210.61) [AS 3561] 4 msec 4
  msec 4 msec
6 bpr2.SanJoseEquinix.cw.net (206.24.210.27) [AS 3561] 4 msec 4 msec 8
  msec
7 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
  3561] 4 msec
  cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.46) [AS
  3561] 224 msec
  cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
  3561] 4 msec
8 POS2-0.XR2.SJC7.ALTER.NET (152.63.56.166) [AS 701] 8 msec 4 msec 4
  msec
9 POS5-0.XR2.SJC1.ALTER.NET (152.63.52.141) [AS 701] 8 msec 4 msec 4
  msec
   10 0.so-0-0-0.XL2.SJC1.ALTER.NET (152.63.55.126) [AS 701] 8 msec 4 msec
4
  msec
   11 0.so-3-0-0.TL2.SAC1.ALTER.NET (152.63.54.10) [AS 701] 8 msec 8 msec
8
  msec
   12 0.so-4-0-0.TL2.DCA6.ALTER.NET (152.63.10.61) [AS 701] 84 msec 84
msec
  84 msec
   13 0.so-6-0-0.XL2.DCA6.ALTER.NET (152.63.38.74) [AS 701] 88 msec 88
msec
  88 msec
   14 0.so-7-0-0.XR2.DCA6.ALTER.NET (152.63.38.90) [AS 701] 88 msec 88
msec
  88 msec
   15 284.at-2-0-0.CL2.IAD5.ALTER.NET (152.63.35.58) [AS 701] 88 msec 88
  msec 92 msec
   16 501.ATM5-0.GW5.IAD5.ALTER.NET (152.63.43.141) [AS 701] 92 msec 92
msec
  88 msec
   17 xa-gw2.customer.alter.net (157.130.13.70) [AS 701] 120 msec 92 msec
92
  msec
   18 s1.home.ro (193.231.236.41) [AS 8708] 92 msec 92 msec 92
  msec
  route-server.exodus.net
 
  Has anyone ever experienced this kind of problems? We've written to
UUNET
  Europe, and they've answered to us that it's a problem at UUNET USA.
It's
  been almost 8 hours since they replied to us, but the problem persists.
 
 
  PS: If there are any technicians from UUNET on this list, please give us
  a hand.
 
  Thank you,
  ---
  Sorin ConstantinescuTel: +402 13 010 850
  Network Administrator

RE: UUnet routing problem

2002-09-26 Thread Christopher L. Morrow


If the owner of the ip address would like to contact the UUNET NOC in EU
and ask for: Mr. Beechey he can connect you with the person attempting to
contact you about this.

--Chris
([EMAIL PROTECTED])
###
## UUNET Technologies, Inc.  ##
## Manager   ##
## Customer Router Security Engineering Team ##
## (W)703-886-3823 (C)703-338-7319   ##
###

On Thu, 26 Sep 2002, Michael Hallgren wrote:


 .ro -- try their London or Amsterdam guys. In an earlier life --
 Teleglobe -- I
 found them quite responsive (at least EU daytime :).

 Cheers

 mh

 -Message d'origine-
 De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de
 Sorin Constantinescu
 Envoye : jeudi 26 septembre 2002 20:21
 A : dies
 Cc : [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Objet : Re: UUnet routing problem





 Yes, we did. The e-mail was addressed to [EMAIL PROTECTED] and [EMAIL PROTECTED] We
 also called at  1-800-900-0241 option 2 3 1. All we got was some ticket
 numbers.

 Bye,

 On Thu, 26 Sep 2002, dies wrote:

  Date: Thu, 26 Sep 2002 14:06:50 -0400 (EDT)
  From: dies [EMAIL PROTECTED]
  To: Sorin CONSTANTINESCU [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
  Subject: Re: UUnet routing problem
 
 
 
 
  Have you contacted 701?
 
 
  On Thu, 26 Sep 2002, Sorin CONSTANTINESCU wrote:
 
  
  
   Hi,
  
   This morning we've discovered that one of our IP's was routed somewhere
   towards an ALTER.NET customer.
  
   All the experiments i'm going to show you are done from
   route-server.exodus.net.
  
   a show ip bgp 193.231.236.41 show that the originator of the IP Block
 from
   where 193.231.236.41 belongs is AS8708 (RDSNET ROMANIA).
  
   BGP routing table entry for 193.231.224.0/20, version 4439795
   Paths: (8 available, best #1)
 Not advertised to any peer
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.40.63 from 209.1.40.63 (209.1.40.63)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate,
 best
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.40.129 from 209.1.40.129 (209.1.40.129)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.220.242 from 209.1.220.242 (209.1.220.242)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.220.134 from 209.1.220.134 (209.1.220.134)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.40.141 from 209.1.40.141 (209.1.40.141)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.220.7 from 209.1.220.7 (209.1.220.7)
 Origin IGP, localpref 1000, valid, internal, atomic-aggregate
 3561 701 702 8708, (aggregated by 8708 193.231.191.33)
   209.1.220.7 from 209.1.220.84 (209.1.220.7)
  
   But, somewhere on the way,
  
   route-server.exodus.nettr 193.231.236.41
  
   Type escape sequence to abort.
   Tracing the route to FuckingLiveShow.home.ro (193.231.236.41)
  
 1 dcr01-p0-1.sntc08.exodus.net (209.1.169.182) 0 msec 0 msec 0 msec
 2 ibr01-g0-0.sntc08.exodus.net (66.35.194.197) 0 msec 0 msec 0 msec
 3 dcr2-so-3-0-0.SantaClara.cw.net (208.172.156.197) [AS 3561] 0 msec 0
   msec 4 msec
 4 agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
   agr4-so-6-0-0.SantaClara.cw.net (208.172.156.158) [AS 3561] 0 msec
   agr3-so-2-0-0.SantaClara.cw.net (208.172.156.138) [AS 3561] 4 msec
 5 acr1-loopback.SanFrancisco.cw.net (206.24.210.61) [AS 3561] 4 msec 4
   msec 4 msec
 6 bpr2.SanJoseEquinix.cw.net (206.24.210.27) [AS 3561] 4 msec 4 msec 8
   msec
 7 cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
   3561] 4 msec
   cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.46) [AS
   3561] 224 msec
   cable-and-wireless-peering.SanJoseEquinix.cw.net (208.173.55.2) [AS
   3561] 4 msec
 8 POS2-0.XR2.SJC7.ALTER.NET (152.63.56.166) [AS 701] 8 msec 4 msec 4
   msec
 9 POS5-0.XR2.SJC1.ALTER.NET (152.63.52.141) [AS 701] 8 msec 4 msec 4
   msec
10 0.so-0-0-0.XL2.SJC1.ALTER.NET (152.63.55.126) [AS 701] 8 msec 4 msec
 4
   msec
11 0.so-3-0-0.TL2.SAC1.ALTER.NET (152.63.54.10) [AS 701] 8 msec 8 msec
 8
   msec
12 0.so-4-0-0.TL2.DCA6.ALTER.NET (152.63.10.61) [AS 701] 84 msec 84
 msec
   84 msec
13 0.so-6-0-0.XL2.DCA6.ALTER.NET (152.63.38.74) [AS 701] 88 msec 88
 msec
   88 msec
14 0.so-7-0-0.XR2.DCA6.ALTER.NET (152.63.38.90) [AS 701] 88 msec 88
 msec
   88 msec
15 284.at-2-0-0.CL2.IAD5.ALTER.NET (152.63.35.58) [AS 701] 88 msec 88
   msec 92 msec
16

Routing problem

2002-05-10 Thread Arturo Lev Servin Niembro
Hi,

I have a strange question because this is not very common. Lets asume the following scenario to simplify it:


net A -- RTA --- RT1-ISP1 --- IP Cloud --- RT2-ISP1 -- RTB -- net b
--- RT1-ISP2 --- IP cloud --- RT2-ISP2 --


RTA and RTB are in differents ASs. ISP1 is preferred via BGP (local preference). Sometimes we lost reachability between net A and net B but we can stiil see the routes trough ISP1, so the BGP can not converge to ISP2. The problem is because the ISP1 have troubles with their IP-MPLS network, so, sometime they lost traffic.

Do you now about some trick that can be used to know that the path to net b is not good despite the route is still in RTA?

I was thinking to force the loopback from ISP1 to be learned in RTA to some route learned from RTB, but how. I think that if I make a tunnel interface it would still depend from BGP to work and BGP depend form tunnel, so it would not work.

Any idea that do not imply to change ISP1 nor use ISP2 as default?

Thanks in Advance,
-as