Re: Cogent input

2009-06-15 Thread Stef Walter
Justin Shore wrote:
> I'm in search of some information about Cogent, it's past, present and
> future.  I've heard bits and pieces about Cogent's past over the years
> but by no means have I actively been keeping up.

We've used cogent for the past year, 100 over GigE.

 - Clueful and responsive tech support.
 - Active monitoring of faults.
 - Helpful people at billing (even when trying to give them
   less money).

We were affected by one depeering during the last year (Telia). We're
multihomed and that mitigated the problem. Obviously, you'd never want
to go exclusively with them.

Cheers,

Stef




ADMIN: List FAQ/Monthly Post.

2009-06-15 Thread NANOG Mail List Committee
This 100-line document contains 62% of what you need to know to avoid
annoying 10,000 people in your email to the NANOG list. It also contains
pointers to another 23%. Please take 5 minutes to read it before
you post [again].

General Information
===

About NANOG:http://www.nanog.org/about/
NANOG News: http://www.nanog.org/
NANOG lists and AUP:http://www.nanog.org/mailinglist/
NANOG List FAQ: http://www.nanog.org/mailinglist/listfaqs/

To Subscribe or Unsubscribe from the list:
http://mailman.nanog.org/mailman/listinfo/nanog

To contact the list's admins:   adm...@nanog.org


Posting Policy
==

The NANOG list has over 10,000 subscribers so it is very easy for a 
thread to have scores of posts while being off-topic and only of 
interest to only a small proportion of subscribers. Please consider 
before each post if your email will be of interest to the majority of 
members or might alternatively be emailed directly the people of 
interest or posted to another forum.

Please read the FAQ and AUP policy before posting for more details.


Especially the following are discouraged:

* Is a certain site down? Other Outages not affecting half the Internet.

  Please use http://downforeveryoneorjustme.com/ or a similar site.
  Please post to the Outages mailing list: http://wiki.outages.org

* Spam 

  Please use SPAM-L - http://www.claws-and-paws.com/spam-l

* Contacting People

  * http://puck.nether.net/netops/
  * http://www.peeringdb.com
  * Please try other methods of contacting sites before you post to 
NANOG. Saying something like "I tried calling 213-555- but no 
answer" shows you _have_ tried alternative methods first.

* Political Issues

  * Topics such as ICANN policy, Government Policy or Law changes that 
do not have short term Operational impact should be avoided.

* Operation topics with more specific lists

  * DNS - http://lists.oarci.net/mailman/listinfo/dns-operations
  * Email - http://www.mailop.org/

* NANOG Mailing list policy 

  Please use the nanog-futures list or contact adm...@nanog.org
  

Please also avoid
=

* Sending posts to the list relevant to only one or two people on this list,
  such as tests or traceroutes in response to another post for comparison
  to those originally posted.

* Jokes, Puns, amusing observations, spelling corrections.

Other NANOG related lists
=

* NANOG-futures - for discussion of the evolution of NANOG, including
  organizational structure, policies and procedures, and agendas for
  NANOG meetings. Such topics aren't appropriate for the main NANOG
  mailing list. 

  http://mailman.nanog.org/mailman/listinfo/nanog-futures

* nanog-attendee - For discussion of venue-specific issues relevant
  to attendees of the current NANOG physical meeting.

  http://mailman.nanog.org/mailman/listinfo/nanog-attendee

* nanog-announce - For announcements of NANOG meetings an other 
  Important NANOG related announcements. Low traffic and all posts are 
  also sent to main list.

  http://mailman.nanog.org/mailman/listinfo/nanog-announce


Other Mailing Lists
===

Information about related lists:

http://www.nanog.org/mailinglist/listfaqs/otherlists.php




Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Stephen Repetski
On Mon, Jun 15, 2009 at 7:39 PM, Erik Fichtner  wrote:

> Stephen Repetski wrote:
> > Yep, that's what it says. Things like "critical network upgrades"
> sometimes
> > don't wait for good timing - they make their own special event.
>
> And yet, all upgrades can be postponed with the right... motivation.
>
> http://blog.twitter.com/2009/06/down-time-rescheduled.html
>
> Nice save, NTT.


But not without a nice plug from Twitter, though it's a nice gesture. Which
brings me back to the question why Twitter isn't multi-homed, or what the
nature of the "network upgrade" is that it brings down their entire network.


Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Erik Fichtner
Stephen Repetski wrote:
> Yep, that's what it says. Things like "critical network upgrades" sometimes
> don't wait for good timing - they make their own special event.

And yet, all upgrades can be postponed with the right... motivation.

http://blog.twitter.com/2009/06/down-time-rescheduled.html

Nice save, NTT.




signature.asc
Description: OpenPGP digital signature


Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Jeremy L. Gaddis
On Mon, Jun 15, 2009 at 7:22 PM, Stephen Repetski wrote:
> Yep, that's what it says. Things like "critical network upgrades" sometimes
> don't wait for good timing - they make their own special event.

Rescheduled:  http://blog.twitter.com/2009/06/down-time-rescheduled.html

-- 
Jeremy L. Gaddis
http://evilrouters.net/



Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Adam Fields
On Mon, Jun 15, 2009 at 07:22:33PM -0400, Stephen Repetski wrote:
> Yep, that's what it says. Things like "critical network upgrades" sometimes
> don't wait for good timing - they make their own special event.

Rescheduled:

http://blog.twitter.com/2009/06/down-time-rescheduled.html


-- 
- Adam

** Expert Technical Project and Business Management
 System Performance Analysis and Architecture
** [ http://www.adamfields.com ]

[ http://workstuff.tumblr.com ] ... Technology Blog
[ http://www.aquick.org/blog ]  Personal Blog
[ http://www.adamfields.com/resume.html ].. Experience
[ http://www.flickr.com/photos/fields ] ... Photos
[ http://www.twitter.com/fields ].. Twitter
[ http://www.morningside-analytics.com ] .. Latest Venture
[ http://www.confabb.com ]  Founder



Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Stephen Repetski
Yep, that's what it says. Things like "critical network upgrades" sometimes
don't wait for good timing - they make their own special event.

On Mon, Jun 15, 2009 at 5:36 PM, Erik Fichtner  wrote:

>
>
> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific
>
> Am I reading that right?   Is someone at Verio seriously going to take
> twitter out
> for 90 minutes at 9am in Tehran?
>
>
>
>


Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Jason Dearborn
Twitter doesn't run their own core or edge.  It's all in the NTT "cloud".

On Mon, Jun 15, 2009 at 5:59 PM, Erik Fichtner wrote:
> Brandon Galbraith wrote:
>
>>> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific
>
>> You sure it's their network, and not Twitter's core/edge?
>
> They're blaming it on their upstream.
>
>
>



Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Erik Fichtner
Brandon Galbraith wrote:

>> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific

> You sure it's their network, and not Twitter's core/edge?

They're blaming it on their upstream.




signature.asc
Description: OpenPGP digital signature


Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Marc Manthey


Am 15.06.2009 um 23:50 schrieb Alex Thurlow:


I know they're not actually making any money, so they may not be  
able to afford it, but shouldn't a service that's trying to be as  
big as twitter be multihomed?


they got 35 million lately and there was arumor that apple wnted to  
buy twitter for 700 million so i think money is not an issue!!!


http://bits.blogs.nytimes.com/2009/02/13/twitter-raises-35-million/

--  
Les enfants teribbles - research / deployment

Marc Manthey
Vogelsangerstrasse 97
D - 50823 Köln - Germany
Vogelsangerstrasse 97
Geo: 50.945554, 6.920293
PGP/GnuPG: 0x1ac02f3296b12b4d
Tel.:0049-221-29891489
Mobil:0049-1577-3329231
web : http://www.let.de

Opinions expressed may not even be mine by the time you read them, and  
certainly don't reflect those of any other entity (legal or otherwise).


Please note that according to the German law on data retention,  
information on every electronic information exchange with me is  
retained for a period of six months.





Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Alex Thurlow

On 6/15/2009 4:45 PM, Erik Fichtner wrote:

Erik Fichtner wrote:
   

http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific
 



I am reading it wrong, partially.  It's NTT America, not Verio.  Missed a layer.


Anyway...

   
I know they're not actually making any money, so they may not be able to 
afford it, but shouldn't a service that's trying to be as big as twitter 
be multihomed?


Re: Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Ben Carleton
Why would NTT take it out for the whole world when DCI could just  
block it from Iran?


--b

On Jun 15, 2009, at 5:45 PM, Erik Fichtner wrote:


Erik Fichtner wrote:

http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific

Am I reading that right?   Is someone at Verio seriously going to  
take twitter out

for 90 minutes at 9am in Tehran?



I am reading it wrong, partially.  It's NTT America, not Verio.   
Missed a layer.



Anyway...






Make that NTT America (was Re: Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Erik Fichtner
Erik Fichtner wrote:
> http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific
> 
> Am I reading that right?   Is someone at Verio seriously going to take 
> twitter out
> for 90 minutes at 9am in Tehran?


I am reading it wrong, partially.  It's NTT America, not Verio.  Missed a layer.


Anyway...



signature.asc
Description: OpenPGP digital signature


Verio taking twitter down during Iran Election Riots?

2009-06-15 Thread Erik Fichtner

http://status.twitter.com/post/124145031/maintenance-window-tonight-9-45p-pacific

Am I reading that right?   Is someone at Verio seriously going to take twitter 
out
for 90 minutes at 9am in Tehran?





signature.asc
Description: OpenPGP digital signature


Apple SSL CA cert Fail (MacOS 10.5.7)

2009-06-15 Thread Robert E. Seastrom

Hi foks,

Ordinarily I wouldn't send reports of operating system bugs that pose
no security risk to this list, but I'm making an exception in this
case due to the following conditions:

   1) There are a lot of Mac users in the NANOG community.
   2) There is a preponderance of folks here who run their own CAs
   3) CA software, particularly OpenSSL, is byzantine enough that
  upon running into a problem, one is likely to think he is the
  faulty party.
   4) I just burned three evenings last week chasing this bug.  I
  don't have sufficient extra hair to be spending my evenings
  tearing it out and you might not either.

Summary: MacOSX's keychain access application mishandles importing
root CA certs.  This only happens under 10.5.7; other versions are
fine.  There is a workaround using command line tools.

Details at http://support.apple.com/kb/TS2747

-r




Re: spamhaus drop list

2009-06-15 Thread Chris Adams
Once upon a time, Fred Baker  said:
> On Jun 15, 2009, at 1:16 PM, Quinn Mahoney wrote:
> >Or use this script which null routes the traffic (I guess it's not a  
> >big deal getting the syn packets, as long as the mail won't send  
> >because of the null route)
> 
> I you are using uRPF, the SYN packets won't get through either,  
> because they came from an interface other than the null interface. Not  
> so helpful interddomain, but it protects your customers from each  
> other (as BCP 38 does in other cases).

Not true for JUNOS; "discard" routes are still in the forwarding table
and are treated as a valid destination when it comes to loose-mode uRPF.
-- 
Chris Adams 
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.



Re: spamhaus drop list

2009-06-15 Thread Fred Baker


On Jun 15, 2009, at 1:16 PM, Quinn Mahoney wrote:

Or use this script which null routes the traffic (I guess it's not a  
big deal getting the syn packets, as long as the mail won't send  
because of the null route)


I you are using uRPF, the SYN packets won't get through either,  
because they came from an interface other than the null interface. Not  
so helpful interddomain, but it protects your customers from each  
other (as BCP 38 does in other cases).




spamhaus drop list

2009-06-15 Thread Quinn Mahoney
I'm looking to implement the Spamhaus drop list.
http://www.spamhaus.org/drop/index.lasso

 

On their FAQ they have a script that looks like it grabs the lists text
file and connects to a given router, and tells you what has changed in
the list, and what your router is null routing.  I'm not sure if it then
removes the null routes if a list entry has been removed.  I haven't
found much documentation on the net regarding this.  In the future it
looks like you will be able to peer with them and null route traffic
from a private AS, which will be routes from the drop list.  Right now
though, it looks like you'd have to update an ACL manually for any
changes to the list.  Or use this script which null routes the traffic
(I guess it's not a big deal getting the syn packets, as long as the
mail won't send because of the null route).  I am not sure if this
script updates the null routes automatically, or how to use it, I can't
find to much documentation. 

 

Any documentation on this script or another script available.  What are
your suggestions?

 

thanks

 

 



GoDaddy DNS Contact

2009-06-15 Thread Curtis Maurand

Would a GoDaddy DNS registration rep contact me off list, please?

Thanks in advance,
Curtis Maurand
207-252-7748


Tom, get closer to the mike !!!!

2009-06-15 Thread Jorge Amodio
ouch



Re: Cogent input

2009-06-15 Thread Valdis . Kletnieks
On Sun, 14 Jun 2009 17:56:51 EDT, German Martinez said:

> I guess the blackholing could come from Cogent having a route to you but *YOU*
> not having a route back to Cogent as a consequence of the depeering.

Wouldn't that only happen if some AS was foolish enough to single-home upstream
of a Tier-1?

Consider it evolution in action...


pgpsiPjeDWq4w.pgp
Description: PGP signature


Re: for the DNS inclined

2009-06-15 Thread bmanning
On Mon, Jun 15, 2009 at 01:39:53PM +0200, Stefan Schmidt wrote:
> Hi Bill,
> 
> On Sat, Jun 13, 2009 at 09:51:45AM +, bmann...@vacation.karoshi.com wrote:
> > There is a public mailing list:  root-scal...@icann.org
> 
> I fear from the ICANN Website it's not apparent how to subscribe to this
> list, can you give me or nanog/dnsop a hint?
> 
>   Stefan
> -- 
> Truman's Law: If you can't convince them, confuse them.


i am sorry for the confusion.  Threw me for a loop as well...
i wrote:  


There is a public mailing list:  root-scal...@icann.org
and
There is a comment site:
+http://www.icann.org/en/public-comment/public-comment-200907.html#root-scaling


which in ICANN parlance is:

send mail to  and your mail shows
up on the ICANN website at:

http://www.icann.org/en/public-comment/public-comment-200907.html#root-scaling

so  its not really a forum or format for discussion, its more of a 
forum where
one can vent.  not the cleanest design, but that's ICANN view of 
gaining public
inputs.   i suspect if you sent mail to any of the members of the study 
team,
inputs would be considered, but it would not be public.

--bill