IP ranges, re- announcing 'PA space' via BGP, etc

2006-04-07 Thread Alexander Koch
Folks, I see very often that customers in the US send morespecs all over the place, deaggregate whole /14s or such scary crap, ask us to accept random stuff out of 4/8 and 8/8 (L3 space) by example. I am practically asking what is (if any) the normal way for any of this. I am working by the

Re: IP ranges, re- announcing 'PA space' via BGP, etc

2006-04-07 Thread Patrick W. Gilmore
On Apr 7, 2006, at 5:06 AM, Alexander Koch wrote: I see very often that customers in the US send morespecs all over the place, deaggregate whole /14s or such scary crap, ask us to accept random stuff out of 4/8 and 8/8 (L3 space) by example. I am practically asking what is (if any) the normal

Re: IP ranges, re- announcing 'PA space' via BGP, etc

2006-04-07 Thread Alexander Koch
On Fri, 7 April 2006 07:03:09 -0400, Patrick W. Gilmore wrote: Can you give us some examples so us dumb Americans can more precisely explain the problem? :) When a random customer (content hoster) asks you to accept something out of 8/8 that is Level(3) space, and there is no route at this

Re: Proxy/Caching Servers

2006-04-07 Thread Joseph S D Yao
On Thu, Apr 06, 2006 at 04:41:26PM -0400, Alain Hebert wrote: Hummm squid. With a touch of haproxy... (Or for those with money ServerIron's) ... Do Foundry ServerIrons proxy and cache, or just switch? -- Joe Yao

Re: Proxy/Caching Servers

2006-04-07 Thread Joe Abley
On 7-Apr-2006, at 12:06, Joseph S D Yao wrote: On Thu, Apr 06, 2006 at 04:41:26PM -0400, Alain Hebert wrote: Hummm squid. With a touch of haproxy... (Or for those with money ServerIron's) ... Do Foundry ServerIrons proxy and cache, or just switch? ServerIrons don't

Re: Proxy/Caching Servers

2006-04-07 Thread Alain Hebert
Just switch but 2 (of more) of them makes for a good frontend to a farm of squid. With both incoming and outgoing resilience. Joseph S D Yao wrote: On Thu, Apr 06, 2006 at 04:41:26PM -0400, Alain Hebert wrote: Hummm squid. With a touch of haproxy... (Or for those with

Re: IP ranges, re- announcing 'PA space' via BGP, etc

2006-04-07 Thread Stephen Sprunk
Thus spake Alexander Koch [EMAIL PROTECTED] On Fri, 7 April 2006 07:03:09 -0400, Patrick W. Gilmore wrote: Can you give us some examples so us dumb Americans can more precisely explain the problem? :) When a random customer (content hoster) asks you to accept something out of 8/8 that is

Weekly Routing Table Report

2006-04-07 Thread Routing Table Analysis
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to [EMAIL PROTECTED] If you have any comments please contact Philip Smith [EMAIL PROTECTED]. Routing Table Report 04:00 +10GMT Sat 08 Apr, 2006

Kind of an odd contact request. NNTP @ Time Warner Telecom

2006-04-07 Thread Drew Weaver
I need an NNTP contact at Time Warner Telecom :-) This is sort of an odd request, normally I would've just looked it up but this sort of thing isn't exactly published. If anyone here is a representative of TWT and can get a message to a person in that area I'd appreciate it if

Re: Kind of an odd contact request. NNTP @ Time Warner Telecom

2006-04-07 Thread joshua sahala
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I need an NNTP contact at Time Warner Telecom :-) did you try newsadmin at twtelecom.net? This is sort of an odd request, normally I would've just looked it up but this sort of thing isn't exactly published. If anyone here is a

Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Etaoin Shrdlu
Well, this is at least marginally on topic, and I think it deserves a wider audience. It is written by Poul-Henning Kamp (the affected party). Please read it. http://people.freebsd.org/~phk/dlink/ It ends with the following: Didn't something like this happen before? Yes, D-Link is not the

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Rubens Kuhl Jr.
GPS.dix.dk service is described as: DK Denmark GPS.dix.dk (192.38.7.240) Location: Lyngby, Denmark Geographic Coordinates: 55:47:03.36N, 12:03:21.48E Synchronization: NTP V4 GPS with OCXO timebase Service Area: Networks BGP-announced on the DIX Access Policy: open access to servers, please, no

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Jeff Shultz
Rubens Kuhl Jr. wrote: GPS.dix.dk service is described as: DK Denmark GPS.dix.dk (192.38.7.240) Location: Lyngby, Denmark Geographic Coordinates: 55:47:03.36N, 12:03:21.48E Synchronization: NTP V4 GPS with OCXO timebase Service Area: Networks BGP-announced on the DIX Access Policy: open access

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Alain Hebert
Hi, Should not be hard to fix... Its clearly a missuses of dix.dk services. Couple of thinks: Since its bgp and DIX customers surely have to provide a list of subnets to announce (filter and such), add those the the ntp server, or use ipf/ipfw/iptables to filter in the dix

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Rubens Kuhl Jr.
I think he should use dns views to answer the queries to gps.dix.dk and either: ( a ) answer 127.0.0.1 to all queries from outside his service area ( b ) answer a D-Link IP address to all queries from outside his service area (which could lead to getting their attention; dunno if

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread David Hubbard
From: Rubens Kuhl Jr. It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers. How about serve back bogus NTP data to non-BIX customer prefixes? Maybe if people's computers start

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Todd Vierling
On Fri, 7 Apr 2006, David Hubbard wrote: How about serve back bogus NTP data to non-BIX customer prefixes? Maybe if people's computers start setting themselves to the year 2004 D-Link will do something. :-) Perhaps return back a time value that is ~10 seconds from wrapping around? Where

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Jeff Shultz
Rubens Kuhl Jr. wrote: big snip It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers. Oh, I see two things here - the first is that he's in charge of his DNS, which he probably isn't.

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Richard A Steenbergen
On Fri, Apr 07, 2006 at 12:52:29PM -0700, Etaoin Shrdlu wrote: Well, this is at least marginally on topic, and I think it deserves a wider audience. It is written by Poul-Henning Kamp (the affected party). Please read it. http://people.freebsd.org/~phk/dlink/ *sigh* Yes yes everyone

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Steven M. Bellovin
On Fri, 7 Apr 2006 18:49:18 -0400, Richard A Steenbergen [EMAIL PROTECTED] wrote: Its just NTP, I can't imagine that it is *really* enough traffic to care all that much. There are probably a hundred people on this list who could donate free transit for this and not give it a second

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Mark Boolootian
Its just NTP, I can't imagine that it is *really* enough traffic to care all that much. You're kidding, right? Do you know what happened to wisc.edu: http://www.cs.wisc.edu/~plonka/netgear-sntp/

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Nicholas Suan
+[EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: [EMAIL PROTECTED] User-Agent: Mutt/1.5.9i On Fri, Apr 07, 2006 at 06:49:18PM -0400, Richard A Steenbergen wrote: Its just NTP, I can't imagine that it is *really* enough

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Tony Finch
On Fri, 7 Apr 2006, Richard A Steenbergen wrote: Its just NTP, I can't imagine that it is *really* enough traffic to care all that much. According to Richard Clayton (who helped Poul-Henning track the problem down) it's about 37pps continuously for each stratum-1 NTP server. (Remember there

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Kevin Day
On Apr 7, 2006, at 6:02 PM, Mark Boolootian wrote: Its just NTP, I can't imagine that it is *really* enough traffic to care all that much. You're kidding, right? Do you know what happened to wisc.edu: http://www.cs.wisc.edu/~plonka/netgear-sntp/ Correct me if I'm wrong, but...

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Jared Mauch
On Fri, Apr 07, 2006 at 06:49:18PM -0400, Richard A Steenbergen wrote: Seriously now, there are a million viable solutions here, ranging from mild inconvenience to attempting to screw dlink for being dumbasses, all of which are free. Point the A record else where and have people who care

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread goemon
On Fri, 7 Apr 2006, David Hubbard wrote: From: Rubens Kuhl Jr. It still would require him to answer the DNS requests. Only way to addres that is everybody outside DIX declare gps.dix.de as www.dlink.com in their resolvers. How about serve back bogus NTP data to non-BIX customer prefixes?

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Matt Ghali
On Fri, 7 Apr 2006, Kevin Day wrote: I think the lesson here is that any service you make available to the public (NTP, DNS, IRC, SMTP, whatever) is going to be used in ways that do not match with your desires. If you're not willing to ACL/police the service, you're going to have to accept

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Todd Vierling
On Fri, 7 Apr 2006, Matt Ghali wrote: I think the lesson here is that any service you make available to the public (NTP, DNS, IRC, SMTP, whatever) is going to be used in ways that do not match with your desires. If you're not willing to ACL/police the service, you're going to have to

RE: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Mark Borchers
Jeff Shultz wrote: By no means am I encouraging legally actionable activity, however, and as noted, (b) just might be. LOL! Did you read down to the end?... /quote/ I can't afford to sue D-Link. It seems that they have managed to arrange their corporate affairs so that there is no way I

Re: Open Letter to D-Link about their NTP vandalism

2006-04-07 Thread Richard A Steenbergen
Ok let me answer two at once here: On Fri, Apr 07, 2006 at 06:57:50PM -0400, Steven M. Bellovin wrote: Did you read the posting? His ISP is charging him. He's also put in a fair amount of time trying to get this resolved. As for transit -- NTP works much better with short RTTs, which is