RE: What is the most standard subnet length on internet

2008-12-22 Thread Church, Charles
I help a buddy who works for a small ISP. I believe they're ignoring or null routing large chunks of APNIC. Their customers are aware of the policy, and cool with it. Port scanning and other malicious stuff dropped 50% afterwards. Chuck -Original Message- From: Skywing [mailto:skyw..

Re: What is the most standard subnet length on internet

2008-12-22 Thread bmanning
On Tue, Dec 23, 2008 at 02:08:25PM +1300, Nathan Ward wrote: > On 23/12/2008, at 1:31 PM, Seth Mattinen wrote: > >Anyone running a platform that can't take a full table would apply > >such a filter to weed out anyone who likes to announce all of their > >space as /24's for "traffic engineering"

RE: What is the most standard subnet length on internet

2008-12-22 Thread Skywing
Snarky replies aside, it might be interesting to hear if there are any real examples of this being done intentionally and not out of not knowing better or otherwise configuration error. For example, Tomas Byrnes's suggestion re: hijacking; although, I suspect that in that case, he's speaking of

Re: What is the most standard subnet length on internet

2008-12-22 Thread Valdis . Kletnieks
On Tue, 23 Dec 2008 14:44:46 +1300, Nathan Ward said: > Why are people doing this? Are they lacking clue, or, is there some > reasonable purpose? The total number of routing cluons is apparently a fixed quantity. The number of AS's is known to be increasing. Do the math. pgpgjsmzfULU0.pgp D

RE: What is the most standard subnet length on internet

2008-12-22 Thread Skywing
I am sure that there are foolish people doing foolish things somewhere on the Internet. But perhaps Joe had knowledge of a specific example && possibly "reasoning" from said example as to why they were using a broken configuration as that? – S -Original Message- From: Nathan Ward Sen

RE: What is the most standard subnet length on internet

2008-12-22 Thread Tomas L. Byrnes
BGP Hijacking. Fully peered network A accepts routes from its peers based on prefix allocation to AS maps. Network B, which is either pathological (criminal, or bent on censorship) or lacking clue, propagates /24 subnet of Network C's CIDR (Pakistan/YouTube anyone). If network A accepts Network

Re: Re: What is the most standard subnet length on internet

2008-12-22 Thread ChiYoung Joung
I would like to ask question more specifically. I know most of tier1 providers accept their customer prefixes smaller than /24. it means smaller than /24 routes always routable in that Tier1 provider. What about between Tier1 and another Tier1 ? Do they exchange their full customer's routes with

Re: What is the most standard subnet length on internet

2008-12-22 Thread Nathan Ward
On 23/12/2008, at 2:39 PM, Joe Provo wrote: On Tue, Dec 23, 2008 at 02:34:39PM +1300, Nathan Ward wrote: [snip] Let me rephrase; Are there people who are filtering /24s received from eBGP peers who do not have a default route? of course. Curiously, it was really meant as a rhetorical que

Re: What is the most standard subnet length on internet

2008-12-22 Thread Joe Provo
On Tue, Dec 23, 2008 at 02:34:39PM +1300, Nathan Ward wrote: [snip] > Let me rephrase; Are there people who are filtering /24s received from > eBGP peers who do not have a default route? of course. -- RSUC / GweepNet / Spunk / FnB / Usenix / SAGE

Re: What is the most standard subnet length on internet

2008-12-22 Thread Nathan Ward
On 23/12/2008, at 2:24 PM, Seth Mattinen wrote: Nathan Ward wrote: On 23/12/2008, at 1:31 PM, Seth Mattinen wrote: Anyone running a platform that can't take a full table would apply such a filter to weed out anyone who likes to announce all of their space as /24's for "traffic engineering".

Re: What is the most standard subnet length on internet

2008-12-22 Thread Valdis . Kletnieks
On Tue, 23 Dec 2008 14:08:25 +1300, Nathan Ward said: > People are filtering /24s without a 0/0 route? Hell - people have been known to filter entire /8's and fail to notice the resulting damage. See the bogon filters for 69/8, then 70/8, then... pgpmCG4KKCxGb.pgp Description: PGP signature

Re: What is the most standard subnet length on internet

2008-12-22 Thread Seth Mattinen
Nathan Ward wrote: On 23/12/2008, at 1:31 PM, Seth Mattinen wrote: Anyone running a platform that can't take a full table would apply such a filter to weed out anyone who likes to announce all of their space as /24's for "traffic engineering". If one does that and doesn't announce the aggregat

Re: What is the most standard subnet length on internet

2008-12-22 Thread Jon Lewis
On Mon, 22 Dec 2008, Seth Mattinen wrote: Anyone running a platform that can't take a full table would apply such a filter to weed out anyone who likes to announce all of their space as /24's for "traffic engineering". If one does that and doesn't announce the aggregate as well, one could find

Re: What is the most standard subnet length on internet

2008-12-22 Thread Nathan Ward
On 23/12/2008, at 1:31 PM, Seth Mattinen wrote: Anyone running a platform that can't take a full table would apply such a filter to weed out anyone who likes to announce all of their space as /24's for "traffic engineering". If one does that and doesn't announce the aggregate as well, one co

Re: What is the most standard subnet length on internet

2008-12-22 Thread Seth Mattinen
정치영 wrote: Hi all, I appreciate many people gave me advices, Some of persons asked me about my questions, I'm sorry for that I couldn't reply to everyone. Because of your help, I could get many opinions and standards regarding IP allocation policy. by the way, in APNIC's IP allocation sizes

Re: Re: What is the most standard subnet length on internet

2008-12-22 Thread 정치영
Hi all, I appreciate many people gave me advices, Some of persons asked me about my questions, I'm sorry for that I couldn't reply to everyone. Because of your help, I could get many opinions and standards regarding IP allocation policy. by the way, in APNIC's IP allocation sizes policy, ther

[USN-698-1] Nagios vulnerability (fwd)

2008-12-22 Thread Gadi Evron
-- Forwarded message -- Date: Mon, 22 Dec 2008 09:35:54 -0500 From: Marc Deslauriers To: ubuntu-security-annou...@lists.ubuntu.com Cc: bugt...@securityfocus.com, full-disclos...@lists.grok.org.uk Subject: [USN-698-1] Nagios vulnerability

Re: ICANN/Dotster emergency contacts? (hopefully not too OT)

2008-12-22 Thread Edward B. DREGER
Thanks, all. I have several responses, and finally got through. Again, sorry for the OT noise. Eddy -- Everquick Internet - http://www.everquick.net/ A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 8

ICANN/Dotster emergency contacts? (hopefully not too OT)

2008-12-22 Thread Edward B. DREGER
Greetings, Does anyone have any "emergency" contacts at ICANN? Dotster? I have a couple domains that were erroneously expired this year instead of next. (I have the CC statement and ref # in front of me, to be certain that I'm not hallucinating.) Automated web form failed to send (to different

RE: Managing CE eBGP details & common/accepted CE-facing BGP practices

2008-12-22 Thread michael.dillon
> Have a read after "Communities accepted from customers" in > the RADB WHOIS for AS3356 for a fairly comprehensive example. > Other's might have better examples, but I've often used this > one as being pretty good. > (whois -h whois.radb.net AS3356) You can also read this here:

Re: Managing CE eBGP details & common/accepted CE-facing BGP practices

2008-12-22 Thread Nathan Ward
On 21/12/2008, at 2:22 PM, Justin Shore wrote: While I'm sure this could be easily stored in a spreadsheet I think the best piece of advice I ever saw RE network management, is teach your network ops people basic SQL. Spreadsheets work OK for one- off calculations, use SQL for any sort of d