RCN having DNS and Possibly other Issues nationwide
RCN is having issues nationwide. So far reports are: Lehigh Valley, PA Chicago NYC Can't tell if its a routing problem or a DNS failure Hopefully not solar flares.
Re: Well Lookie Here, Barracuda Networks tries to get me to fall into their trap again...
Actually, the unit still works as an e-mail filter. You can still access the Barracuda reputation list with it and it does SPF and Baysian filtering still. It also lets you configure black lists and other RBLs as well, so it still has utility. The thing that you don't get is updated SPAM and virus defs as well as updated software for the machine. Someone mentioned the fact that if the hardware is still working, then the renewal policy is reasonable since the machine still works. May I remind that person that Barracuda charges you for the hardware AND also the subscriptions to the spam and virus defs. If they provided the hardware for free, then I would agree with him about the renewal policy, but its NOT free. - Original Message - From: Michael Thomas m...@mtcc.com To: Jon Lewis jle...@lewis.org Cc: nanog@nanog.org Sent: Thursday, December 22, 2011 1:22 PM Subject: Re: Well Lookie Here, Barracuda Networks tries to get me to fall into their trap again... On 12/22/2011 11:07 AM, Jon Lewis wrote: On Thu, 22 Dec 2011, Michael Thomas wrote: At that point why should they sell iron at all? Seems like you get all of the downside of owning the iron, and all of the downside of paying for a cloud based service. Either you own what you own, or you pay for service that somebody else provides. This you bought useless hardware unless you pay up is really what's infuriating. Presumably, Barracuda's hardware is i386/i686 compatible commodity parts. It's probably not at all useless. Just attach a USB DVD drive or USB flash drive, wipe the disk(s) and install your favorite Linux distro. It may take some doing to get all/most of the features Barracuda provides setup on your own...but if you don't have the time/expertise to do it, that's why companies like Barracuda exist. If the spam filter stop working, it's presumably a pretty useless thing as a... spam filtering device which is presumably why most people are buying barracuda boxen. I suppose my larger point is that this is why companies like postini exist. At least there you know that if you don't pay the bill, mail stops flowing altogether much like any other service. It's this I paid for the hardware, but I don't really own what I paid for state that seems to stick in people's craw. Or maybe if they just leased the box it would be more clear what their business model was. Mike
Well Lookie Here, Barracuda Networks tries to get me to fall into their trap again...
Well look what was in my in-box this morning! Looks like Barracuda Networks is sending out spam again. Maybe word is getting around about their less that value-full renewal policy. Could it be that people are starting to resent being taken advantage of?? See my response below their message. Seems like they don't remember that I was a fish they already hooked and fleeced. --- SPAM from Barracuda Howdy, Just following up with you about a project you were working on with Barracuda Networks. Checking in to see how things are going for you. Have you had network changes recently or a issue pop up that we can help solve? Let me know if you would like a solution guide for reference. Happy December, --- Message sent in response to the sales droid message from Barracuda --- Hi Jaz, No, things are about the same. I see by your website that you haven't changed a bit and continue to think that it is an honest business practice to charge people for a service and then not to deliver it. When I renew my Barracuda Engergize subscription, THE RENEWAL SHOULD BE FROM THE DATE THAT I RENEW, NOT THE ANNIVERSARY DATE! Many small businesses have cash flow challenges and cannot renew their subscription right at the expirartion date. Where does that leave them? If they have to delay their renewal by three or four months, they then get greeted by your company charging them for an entire year of service when they only actually get 8 or 9 months, since the renewal goes from the anniversary date instead of the anniversary date being reset to the actual date of renewal. As it stands right now, If we were to renew our Energize subscription, We'd have to pay for FIVE YEARS of service but would only get THREE years. If that isn't a rip-off, I don't know what is. I think this is dishonest business practice. I will no longer give money to what I view as a crooked company such as yours. I have posted about this corrupt practice on my blog (http://www.john-palmer.net/wordpress/?p=46) and on facebook. Think I'll bump each of those postings to refresh them in the search engines so that people continue to be informed of this practice so that they won't fall into the trap of doing business with your company as we did. Perhaps for your collective New Year's resolution at Barracuda Networks, you can all resolve to operate your business in an honest fashion and provide FAIR value with FAIR business practices in 2012, both of which, in my opinion, you are severly lacking. Maybe then, PERHAPS, we may look at doing further business with you.
Re: Barracuda Networks is at it again: Any Suggestions as to an Alternative?
Thanks to all for your suggestions. We've had several other problems with our Barracuda box as well including the fact that it is very under-powered and that the web interface for admin stuff seems to freeze up and only send partial http responses back after log queries. Think will probably move on to something else and abandon Barracuda Networks. I certainly would warn others away from their products based on my unpleasant experience.
Barracuda Networks is at it again: Any Suggestions as to an Alternative?
OK, its been a year since my Barracuda subscription expired. The unit still stops some spam. I figured that I would go and see what they would do if I tried to renew my subscription EXACTLY one year after it expired. Would their renewal website say Oh, you are at your anniversary date, and renew me for a year? No such luck: They want me to PAY FOR AN ENTIRE YEAR for which I did NOT receive service and then for the current (upcoming year). Sorry - I don't allow myself to be ripped off like that. Sorry Barracuda - you get no money from me and I'll tell everyone I know about this policy of yours. I posted an article about this unscrupulous practice on my blog last year at http://www.john-palmer.net/wordpress/?p=46 My question is - does anyone have any suggestions for another e-mail appliance like the Barracuda Spam Firewall that doesn't try to charge their customers for time not used. I should be able to shut off the unit for a year or whatever and simply renew from the point that I re-activate the unit instead of having to pay for back-years that I didn't use. Thanks
Re: MTS contact
MTS? Michigan Terminal System? - Original Message - From: Hector Herrera hect...@pobox.com To: NANOG list nanog@nanog.org Sent: Friday, April 08, 2011 1:24 PM Subject: MTS contact Could somebody with MTS please contact me off-list? I am not getting anywhere with their level 1 support and they won't escalate. Thanks, -- Hector Herrera Network Engineering PlayFullScreen Internet Broadcasting
Re: iabelle francois
- Original Message - From: Ted Cooper ml-nanog0903...@elcsplace.com To: nanog@nanog.org Sent: Thursday, April 22, 2010 11:33 PM Subject: Re: iabelle francois Posting so many URLs which either are or should be listed in domain block lists to a list with as many subscribers as this is probably not wise. I'm guessing you just caused a wonderful bounce storm as the NANOG servers attempted to send that out, depending of course on how many people whitelist NANOG to URI filtering. ... The analysis of the domain is solid though, so good work there. Perhaps NANOG is not the correct forum though? Spam-L seems like a better fit. Spam-watch.com is the proper place for it.
Re: Running out of IPv6 (Re: ARIN IP6 policy for those with legacyIP4 Space)
What I would need if I were to go with IP6 would be to have a parallel address for every one of my current addresses. Right now we have 2 - legacy /24's and one legacy /23 - thats it. I'd just need the equivalent IP6 space. We could just get that from our current provider (Steadfast in this case), but it would not be portable and with our root servers, (INS - please, not interested in discussing the merits of ICANN vs Inclusive Namespace), we would need portable IPs that wouldn't change. ARIN does provide microallocations, but ICANN forced them to put for ICANN approved root service only into their policy for microallocations, so that leaves us out. John - Original Message - From: Owen DeLong o...@delong.com To: Chris Grundemann cgrundem...@gmail.com Cc: NANOG list nanog@nanog.org; Joe Greco jgr...@ns.sol.net Sent: Thursday, April 08, 2010 3:54 PM Subject: Re: Running out of IPv6 (Re: ARIN IP6 policy for those with legacyIP4 Space) On Apr 8, 2010, at 12:10 PM, Chris Grundemann wrote: On Thu, Apr 8, 2010 at 12:47, Jeroen Massar jer...@unfix.org wrote: [changing topics, so that it actually reflects the content] On 2010-04-08 20:33, William Herrin wrote: Yes, with suitably questionable delegations, it is possible to run out of IPv6 quickly. The bottom line (IMHO) is that IPv6 is NOT infinite and propagating that myth will lead to waste. That being said, the IPv6 space is MUCH larger than IPv4. Somewhere between 16 million and 17 billion times larger based on current standards by my math[1]. Agreed Ever noticed that fat /13 for a certain military network in the ARIN region!? At least those /19 are justifyiable under the HD rules (XX million customers times a /48 and voila). A /13 though, very hard to justify... Not every customer needs a /48. In fact most probably don't. Whether they need it or not, it is common allocation/assignment practice. I agree that smaller (SOHO, for example) customers should get a /56 by default and a /48 on request, but, this is by no means a universal truth of current practice. Owen
ARIN IP6 policy for those with legacy IP4 Space
Was looking at the ARIN IP6 policy and cannot find any reference to those who have IP4 legacy space. Isn't there an automatic allocation for those of us who have legacy IP space. If not, is ARIN saying we have to pay them a fee to use IP6? Isn't this a disincentive for us to move up to IP6? Those with legacy IP4 space should have the equivalent IP6 space under the same terms. Or am I missing something?
Re: ARIN IP6 policy for those with legacy IP4 Space
Yah, thats what we are thinking here. We'll probably stick with IP4 only. Sounds like ARIN has set a trap, so that virtually any contact with them will result in the ceding of legacy rights. We'll be sure to avoid any such contact. Thanks everyone for the info. John - Original Message - From: Joe Greco jgr...@ns.sol.net To: Owen DeLong o...@delong.com Cc: NANOG list nanog@nanog.org Sent: Wednesday, April 07, 2010 3:31 PM Subject: Re: ARIN IP6 policy for those with legacy IP4 Space It's not the initial assignment fee that's really an impediment, it's moving from a model where the address space is free (or nearly so) to a model where you're paying a significant annual fee for the space. We'd be doing IPv6 here if not for the annual fee. As it stands, there isn't that much reason to do IPv6, and a significant disincentive in the form of the fees. ... JG --
Re: ARIN IP6 policy for those with legacy IP4 Space
I kind of thought that was something that had already been worked out. Thats what I get for not paying close enough attention. - Original Message - From: Deepak Jain dee...@ai.net To: Lee Howard l...@asgard.org; 'Gary E. Miller' g...@rellim.com; 'OwenDeLong' o...@delong.com Cc: 'NANOG list' nanog@nanog.org Sent: Wednesday, April 07, 2010 5:31 PM Subject: RE: ARIN IP6 policy for those with legacy IP4 Space Now I may be talking crazy... IIRC, all of IPv4 space maps to a section of IPv6 space. mad hat on If one has legacy IPv4 space, but actually talks IPv6 couldn't one announce a prefix much longer than a /64 to map them onto the IPv6 universe (assuming people would allow such craziness... perhaps on their IPv4 speaking routers) and originate/terminate traffic as normal? /mad hat off Isn't this all left to the networks to enforce, as usual, but unlike the status quo, these are all valid allocations... Technical note: I know this breaks lots of IPv6 goodness (no need to enumerate it here). DJ
Re: ARIN IP6 policy for those with legacy IP4 Space
But its not portable. Thats a deal breaker for some applications. - Original Message - From: Scott Leibrand scottleibr...@gmail.com To: nanog@nanog.org Sent: Wednesday, April 07, 2010 5:57 PM Subject: Re: ARIN IP6 policy for those with legacy IP4 Space Also, don't forget that if you want to pay less (i.e. nothing) for your IPv6 assignment, you can get a /48 for free from just about any ISP that does IPv6. -Scott
Re: interop show network (was: legacy /8)
When do you think that 1/8, 2/8 and 50/8 will start showing up as live, assigned addresses. I don't see any of them coming in on my core routers yet. - Original Message - From: Leo Vegoda leo.veg...@icann.org To: Jon Lewis jle...@lewis.org Cc: nanog@nanog.org Sent: Monday, April 05, 2010 1:04 PM Subject: Re: interop show network (was: legacy /8) On 5 Apr 2010, at 9:13, Jon Lewis wrote: On Sun, 4 Apr 2010, Christopher Morrow wrote: [...] If we could recover them all, how many more years of IPv4 allocations would that buy us? We allocate RIRs approximately one /8 per month. So you'd have to reclaim 12 /8s to extend the allocation pool by one year. Regards, Leo
Re: legacy /8
On the topic of IP4 exhaustion: 1/8, 2/8 and 5/8 have all been assigned in the last 3 months yet I don't see them being allocated out to customers (users) yet. Is this perhaps a bit of hoarding in advance of the complete depletion of /8's? - Original Message - From: Majdi S. Abbas m...@latt.net To: Jeroen van Aart jer...@mompl.net Cc: NANOG list nanog@nanog.org Sent: Friday, April 02, 2010 4:06 PM Subject: Re: legacy /8 On Fri, Apr 02, 2010 at 02:01:45PM -0700, Jeroen van Aart wrote: I am curious. Once we're nearing exhausting all IPv4 space will there ever come a time to ask/demand/force returning all these legacy /8 allocations? I think I understand the difficulty in that, but then running out of IPs is also a difficult issue. :-) For some reason I sooner see all IPv4 space being exhausted than IPv6 being actually implemented globally. Because it's no more than a delaying action. Even presuming you get people to cooperate (and they really, have no incentive to because they don't necessarily have any agreement covering the space with the RIRs) rather than fire up their legal department A couple of /8s doesn't last long enough to really make a dent in the pain. You might buy yourself a few months at most. It might actually do more harm than good, by convincing people that they can still get v4 space rather than worry about what they are going to do in the future. --msa
Re: legacy /8
- Original Message - From: Majdi S. Abbas m...@latt.net To: John Palmer (NANOG Acct) nan...@adns.net Cc: NANOG list nanog@nanog.org Sent: Friday, April 02, 2010 5:52 PM Subject: Re: legacy /8 On Fri, Apr 02, 2010 at 05:48:44PM -0500, John Palmer (NANOG Acct) wrote: On the topic of IP4 exhaustion: 1/8, 2/8 and 5/8 have all been assigned in the last 3 months yet I don't see them being allocated out to customers (users) yet. Is this perhaps a bit of hoarding in advance of the complete depletion of /8's? Doubt it. 1/8 is still being evaluated to determine just how usable portions of it are, thanks to silly people of the world that decided 1.1.1.x and the like were 1918 space. As for the others, the RIR requests it when they are running low, but certainly not exhausted, and as slow as people are to update their bogon filters, it sounds like general good practice not to assign out of a new /8 until pre-existing resources are exhausted. Was looking for the allocated file on the ARIN website, but can't remember where it is. They used to have a file with one line per allocation that started like this arin|US|ipv4. Is that still public somewhere? Can we put the tinfoil hats away and let this thread die now? --msa Good luck with that one :-
Re: legacy /8
Is someone volunteering to work on an RFC? Or, has someone done so for this already? - Original Message - From: jim deleskie deles...@gmail.com To: nanog@nanog.org Sent: Friday, April 02, 2010 9:17 PM Subject: Re: legacy /8 I'm old but maybe not old nuff to know if this was discussed before or not, but I've been asking people last few months why we don't just do something like this. don't even need to get rid of BGP, just add some extension, we see ok to add extensions to BGP to do other things, this makes at least if not more sence. -jim On Fri, Apr 2, 2010 at 11:13 PM, George Bonser gbon...@seven.com wrote: -Original Message- From: Jim Burwell [mailto:j...@jsbc.cc] Sent: Friday, April 02, 2010 6:00 PM To: nanog@nanog.org Subject: Re: legacy /8 So, jump through hoops to kludge up IPv4 so it continues to provide address space for new allocations through multiple levels of NAT (or whatever), and buy a bit more time, or jump through the hoops required to deploy IPv6 and eliminate the exhaustion problem? And also, if the IPv4 space is horse-traded among RIRs and customers as you allude to above, IPv6 will look even more attactive as the price and preciousness of IPv4 addresses increases. No problem, everyone tunnels v4 in v4 and the outer ip address is your 32-bit ASN and you get an entire /0 of legacy ip space inside your ASN. Just need to get rid of BGP and go to some sort of label switching with the border routers having an ASN to upstream label table and there ya go. Oh, and probably create an AA RR in DNS that is in ASN:x.x.x.x format. Increase the MTU a little and whammo! There ya go! Done. :)
Re: History of 4.2.2.2. What's the story?
4.2.2.2 is stunted just like any other resolvers that use only the USG root. A more useful resolver is ASLAN [199.5.157.128] which is an inclusive namespace resolver which shows users a complete map of the internet, not just what ICANN wants them to see. - Original Message - From: Steve Ryan au...@mind.net To: nanog@nanog.org Sent: Sunday, February 14, 2010 6:43 AM Subject: Re: History of 4.2.2.2. What's the story? I think around 10 years ago Slashdot had a few stories (and still do, actually) about how great these resolvers were. I think that propelled quite a bit of their growth and popularity. On 2/14/2010 1:16 AM, Sean Reifschneider wrote: I've wondered about this for years, but only this evening did I start searching for details. And I really couldn't find any. Can anyone point me at distant history about how 4.2.2.2 came to be, in my estimation, the most famous DNS server on the planet? I know that it was originally at BBN, what I'm looking for is things like: How the IP was picked. (I'd guess it was one of the early DNS servers, and the people behind it realized that if there was one IP address that really needed to be easy to remember, it was the DNS server, for obvious reasons). Was it always meant to be a public resolver? How it continued to remain an open resolver, even in the face of amplifier attacks using DNS resolvers. Perhaps it has had rate-limiting on it for a long time. There's a lot of conjecture about it using anycast, anyone know anything about it's current configuration? So, if anyone has any stories about 4.2.2.2, I'd love to hear them. Thanks, Sean
Level 3 DC issues?
Anyone see any connectivity issues with Level-3 in the DC area? This issue is causing big latency problems that appeared to have taken out Bank of America's website.
Re: Anyone having issues updating RADB tonight?
Updates completing is fine for everyone but Level 3. Switched to a new data center and both they and I updated our records and Level 3 still hasn't picked up the updates and its been 9 days. Sigh - Original Message - From: Courtney Smith courtneysm...@comcast.net To: nanog@nanog.org Sent: Thursday, January 14, 2010 12:00 AM Subject: RE: Anyone having issues updating RADB tonight? My update completed eventually. Not sure if the delay had any relation to the URL issues. Sorry for top post. Haven't figured how to put inline when using my Droid. Joe Blanchard jbfixu...@gmail.com wrote: Looks like someone messed up permissions on the directories and/or files. Even the images for the buttons don't appear to work.. http://www.radb.net/images/navbar_bottom_off_02.jpg 403 permission denied... Game over. :o -Joe -Original Message- From: courtneysm...@comcast.net [mailto:courtneysm...@comcast.net] Sent: Wednesday, January 13, 2010 10:51 PM To: nanog@nanog.org Subject: Anyone having issues updating RADB tonight? Anyone having issues updating RADB tonight? I am getting 403 message from URL to web form. No response from two updates I submitted this evening via email. I noticed a few other URL's are also giving a 403 message. http://www.radb.net/cgi-bin/radb/irr-web.cgi http://www.radb.net/faq.html http://www.radb.net/emailupdates.html
Colocation needed in the Chicago area (I know, second request)
Looking for 24U space 5Mbps bandwidth BGP Peer 15amps Chicago or Chicago suburbs (including Northern Indiana (Merrillville, Hammond, etc). Budget NO MORE THAN $750/month. If you know of colocation space that meets these parameters, please let me know. Sorry this is my second request, I wasn't specific on price and was getting ourageous quotes. Thanks John (promise - this is the last time).
Re: EU elections - piratenpartei.net censored
Thats fine - but one thing that I can't tolerate about the Pirates party is this apparent non-sense that there should be no such thing as copyright. AFAIC, making an illegal download of software or music is stealing and is no different from going into a shop and shoplifting some merchandise. Someone is making a living from writing that code or making that music. John - Original Message - From: Peter Dambier pe...@peter-dambier.de To: nanog@nanog.org Sent: Sunday, June 07, 2009 5:36 PM Subject: Re: EU elections - piratenpartei.net censored Thank you Arnold. Yes, we have not put all our eggs in the same nest :) As far as we could find out somebody has put us into an adult filter. That is what triggered the reaction of the hoster. There is a movement of the governing parties in germany to install a mandatory adult filter controled only by a single policeman. That is excactly what the pirates party is opposing. Kind regards Peter Arnold Nipper wrote: On 08.06.2009 00:16 Peter Dambier wrote right during the election the website piratenpartei.net of the german pirates party gets censored by the hoster. really censored. Do you know why alfahosting.info turned down the site? alfahosting.info Good advertising, isn't it? Interestingly enough their website is down too. Afraid of emails I guess. try http://www.piratenpartei.de/ instead. Arnold -- Peter and Karin Dambier Cesidian Root - Radice Cesidiana Rimbacher Strasse 16 D-69509 Moerlenbach-Bonsweiher +49(6209)795-816 (Telekom) +49(6252)750-308 (VoIP: sipgate.de) mail: pe...@peter-dambier.de http://www.peter-dambier.de/ http://iason.site.voila.fr/ https://sourceforge.net/projects/iason/ ULA= fd80:4ce1:c66a::/48
Akamai wierdness
Most of the sites served by Akamai seem to be wacky this afternoon from Chicago. Probably the March Madness stuff, but its really bad today - Chicagotribune.com wont load at all from here and SunTimes.com is missing all of its images. Are others seeing this problem from other locations? Getting alot of support calls from folks
Re: Akamai wierdness
Its something to do with Akamai in Chicago. Been flakey all day. - Original Message - From: Paul Stewart pstew...@nexicomgroup.net To: John Palmer (NANOG Acct) nan...@adns.net Cc: NANOG list nanog@nanog.org Sent: Sunday, March 22, 2009 7:05 PM Subject: RE: Akamai wierdness Hi there.. Chicagotribune.com is coming up from here (Toronto area) but very slow loading suntimes.com loads nice and fast from here. Having said that, we're an Akamai powered network here so presume most/all is coming from local caches didn't break down each page to see sources... Paul -Original Message- From: John Palmer (NANOG Acct) [mailto:nan...@adns.net] Sent: March 22, 2009 8:01 PM To: nanog@nanog.org Subject: Akamai wierdness Most of the sites served by Akamai seem to be wacky this afternoon from Chicago. Probably the March Madness stuff, but its really bad today - Chicagotribune.com wont load at all from here and SunTimes.com is missing all of its images. Are others seeing this problem from other locations? Getting alot of support calls from folks The information transmitted is intended only for the person or entity to which it is addressed and contains confidential and/or privileged material. If you received this in error, please contact the sender immediately and then destroy this transmission, including all attachments, without copying, distributing or disclosing same. Thank you.
100MB connectivity in Detroit area
Wondering about the availability of 100mb connectivity in Macomb county (Clinton Twp) Michigan. Please reply off-list.