Google's security.txt

2024-03-19 Thread Marco Davids (Private) via NANOG

Anyone from Google,

You might want to fix a tiny typo in your security.txt.

RFC9116 uses American spelling, not British spelling, like you did.

Check here:

https://www.uriports.com/tools?method=securitytxt=google.com

It's only a small issue, but it might spread when people start using 
Google's security.txt for inspiration.


--
퓜퓪퓻퓬퓸


IPv6 connectivity to mx[1-4].smtp.goog.

2024-02-27 Thread Marco Davids (Private) via NANOG

Hi,

At https://internet.nl we're seeing IPv6 connection issues on TCP port 
25 (SMTP) to mx[1-4].smtp.goog.


Either 100% DROP (so no TCP connection) or ⅔ failure to setup connection.

Further testing seems to confirm the problem is bigger and on Google's side.

So, this fails:

echo 'quit' | nc -6 -w 3 mx1.smtp.goog. 25

and this works:

echo 'quit' | nc -4 -w 3 mx1.smtp.goog. 25

(on MacOS use -G instead of -w)

Is anyone else seeing this? Any idea what is causing this?

--
Marco


Re: starlink ixp peering progress

2024-02-27 Thread Marco Davids (Private) via NANOG

Or this?

https://bgp.he.net/AS14593#_peers6

Op 27/02/2024 om 13:17 schreef b...@uu3.net:

Well, for some basic overview you can use CAIDA AS rank.

You can use it directly, or you may try my (more user friendly)
frontend for it: http://as-rank.uu3.net/?as=14593


-- Original message --

From: Dave Taht 
To: NANOG 
Subject: starlink ixp peering progress
Date: Tue, 27 Feb 2024 02:54:44 -0500

One of the things I learned today was that starlink has published an
extensive guide as to how existing BGP AS holders can peer with them
to get better service.

https://starlink-enterprise-guide.readme.io/docs/peering-with-starlink

I am curious if there is a way to see how many have peered already,
how many they could actually peer with?, and progress over time since
inception what would be the right tools for that? This is pretty
impressive for peering so far:

https://www.peeringdb.com/net/18747

Is there a better email list to discuss ixp stuff?




--
Marco


Re: Anyone else seeing DNSSEC failures from EU Commission ? (european-union.europa.eu)

2021-12-08 Thread Marco Davids (Private) via NANOG

Hi Laura,

Something seems the matter, indeed:

https://dnsviz.net/d/european-union.europa.eu/YbCzrQ/dnssec/

It's weird; 1.1.1.1 resolves, 8.8.8.8 and 9.9.9.9 return SERVFAIL.

--
Marco


Op 08-12-2021 om 14:27 schreef Laura Smith via NANOG:


Bit of a long stretch given the US audience, but I'm seeing lots of things like 
this at the moment:

info: validation failure : key for validation 
european-union.europa.eu. is marked as invalid because of a previous validation failure 
: DS got unsigned CNAME answer from 
2600:9000:5301:a200::1 and 34.255.155.194 for DS european-union.europa.eu. while building 
chain of trust

info: validation failure : DS got unsigned 
CNAME answer from 2600:9000:5302:9a00::1 and 34.255.155.194 for DS 
european-union.europa.eu. while building chain of trust

validation failure : signatures from unknown keys from 
147.67.12.3

info: validation failure : signatures from unknown keys 
from 147.67.12.3



Trying to get in touch: ntp.org sites broken

2021-08-03 Thread Marco Davids (Private) via NANOG

Hello,

I'm trying to get in touch with webmas...@ntp.org. But so far without 
luck. Maybe this route will help.


I noticed that quit a number of pages you mention on 
https://www.ntp.org/ are no longer functioning.


Like http://lists.ntp.org/ and http://support.ntp.org/.

If anyone knows a way to get this fixed, please help.

Thank you.

--
Marco


Re: Update to BCP-38?

2019-10-03 Thread Marco Davids (Private) via NANOG


On 03/10/2019 15:51, Stephen Satchell wrote:

> For a start, *add* IPv6 examples in parallel with the IPv4 examples.

1000 times +1

We need (much) more IPv6 examples!

--
Marco
(pushing for IPv6 examples since 2007 or so
 like in: https://youtu.be/OLEizGPoB5w?t=30)