Fwd: [afnog] Introducing Southern Africa Network Operators Group - SAFNOG

2014-01-28 Thread Mark Tinka
FYI. Cheers, Mark. --- Begin Message --- Greetings to you all. We would like to take this opportunity to introduce to you a new network operators group, SAFNOG. SAFNOG stands for Southern Africa Network Operators Group. As you might guess, it is a NOG for the Southern African region, with a vis

Re: ntp defence preso at apricot

2014-01-28 Thread Roland Dobbins
Randy Bush wrote: >i am on the apricot 2014 pc. we do not have a submission on nap defense. can >someone please do one? I can, see my reply on apops. --- Roland Dobbins

ntp defence preso at apricot

2014-01-28 Thread Randy Bush
i am on the apricot 2014 pc. we do not have a submission on ntp defense. can someone please do one? randy

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 28, 2014, at 2:16 PM, Jared Mauch wrote: > > On Jan 28, 2014, at 1:50 PM, valdis.kletni...@vt.edu wrote: > >> On Tue, 28 Jan 2014 08:06:31 -0500, Jared Mauch said: >> >>> 52731 ASN7922 >> >>> It includes IP address where you send a DNS packet to it and another IP >>> address responds

Re: Terremark Miami

2014-01-28 Thread Wolfgang Nagele
There are plenty Direct Connect partners that’ll be happy to take your data from NOTA in Miami to a remote AWS location. See: http://aws.amazon.com/directconnect/partners/ On 1/28/14, 2:55 PM, "Warren Bailey" mailto:wbai...@satelliteintelligencegroup.com>> wrote: We¹re looking at potential co

Re: Terremark Miami

2014-01-28 Thread Faisal Imtiaz
So essentially, you are looking for a 'direct' x-connect to AWS ? and not wanting to go thru a peering fabric or any other network ? Regards Faisal Imtiaz Snappy Internet & Telecom 7266 SW 48 Street Miami, FL 33155 Tel: 305 663 5518 x 232 Help-desk: (305)663-5518 Option 2 or Email: supp...@snap

Fwd: [afnog] Introducing Southern Africa Network Operators Group - SAFNOG

2014-01-28 Thread Mark Tinka
Hello all. Kindly see below/attached, per subject. Please distribute within your local/regional communities. Thanks. Cheers, Mark. --- Begin Message --- Greetings to you all. We would like to take this opportunity to introduce to you a new network operators group, SAFNOG. SAFNOG stands for S

Re: BCP38.info

2014-01-28 Thread TGLASSEY
On 1/28/2014 1:07 PM, Nick Olsen wrote: While I see what you're saying. It's still not "Spoofed". The device in question receives the request. And then generates a response with the src address of the egress interface of the device dst to the IP and port that requested it... In this case. The G

Re: BCP38.info

2014-01-28 Thread Nick Olsen
Correct, The assumption is that NAT was in use here. After a quick phone conversation with Jared. We concluded that at least in the specific case I was speaking about, I was correct in that nothing was "Spoofed". However, Explained further in detail about what he sees from other IP's on that li

Re: BCP38.info

2014-01-28 Thread Mark Andrews
Jarad is correct. There is lack of BCP38 filtering in the CPE ASN. Either the packet has gone "probe" -> CPE ->(*) recursive server -> "probe" or "probe" -> CPE -> recursive server -> CPE ->(*) "probe" (*) indicates the packet that should have been blocked depending apon how

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 28, 2014, at 4:07 PM, Nick Olsen wrote: > While I see what you're saying. It's still not "Spoofed". > > The device in question receives the request. And then generates a response > with the src address of the egress interface of the device dst to the IP and > port that requested it...

Re: BCP38.info

2014-01-28 Thread Nick Olsen
While I see what you're saying. It's still not "Spoofed". The device in question receives the request. And then generates a response with the src address of the egress interface of the device dst to the IP and port that requested it... In this case. The GRE tunnel. Unless I'm missing something

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 28, 2014, at 2:57 PM, Nick Olsen wrote: > Agreed. > > Our's listed for AS36295 are two customers, Which I know for a fact have > their default route set out of a GRE tunnel interface. So while we hand them > the request to their interface IP we've assigned them. The response is > actu

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 28, 2014, at 2:46 PM, David Miller wrote: > > > On 1/28/2014 2:16 PM, Jared Mauch wrote: >> >> On Jan 28, 2014, at 1:50 PM, valdis.kletni...@vt.edu wrote: >> >>> On Tue, 28 Jan 2014 08:06:31 -0500, Jared Mauch said: >>> 52731 ASN7922 >>> It includes IP address where you se

Re: BCP38.info

2014-01-28 Thread Nick Olsen
Agreed. Our's listed for AS36295 are two customers, Which I know for a fact have their default route set out of a GRE tunnel interface. So while we hand them the request to their interface IP we've assigned them. The response is actually sent, And transported via the customers GRE Tunnel, And H

Re: BCP38.info

2014-01-28 Thread Stephen Frost
David, * David Miller (dmil...@tiggee.com) wrote: > > On Jan 28, 2014, at 1:50 PM, valdis.kletni...@vt.edu wrote: > >> Hang on Jared, I'm trying to wrap my head around this. You're saying that > >> AS7922 has over 50K IP addresses which, if you send a DNS query to that IP, > >> you get an answer

Re: BCP38.info

2014-01-28 Thread David Miller
On 1/28/2014 2:16 PM, Jared Mauch wrote: > > On Jan 28, 2014, at 1:50 PM, valdis.kletni...@vt.edu wrote: > >> On Tue, 28 Jan 2014 08:06:31 -0500, Jared Mauch said: >> >>> 52731 ASN7922 >> >>> It includes IP address where you send a DNS packet to it and another IP >>> address responds to the q

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 28, 2014, at 1:50 PM, valdis.kletni...@vt.edu wrote: > On Tue, 28 Jan 2014 08:06:31 -0500, Jared Mauch said: > >> 52731 ASN7922 > >> It includes IP address where you send a DNS packet to it and another IP >> address responds to the query, e.g.: > >> The data only includes those where

Re: BCP38.info

2014-01-28 Thread Valdis . Kletnieks
On Tue, 28 Jan 2014 08:06:31 -0500, Jared Mauch said: > 52731 ASN7922 > It includes IP address where you send a DNS packet to it and another IP > address responds to the query, e.g.: > The data only includes those where the “source-ASN” and “dest-asn” of these > packets don’t match. Hang on

From Outages - AT&T outage in Maryland area

2014-01-28 Thread Jay Ashworth
Tracking a really world-class AT&T fiber outage in MD: > > Our AT&T service delivery manager just updated the list for us: > > > > · 7 OC192s > > · 7 OC48 > > · 22 Core T3/DS3s > > · 8 additional T3/DS3s [ Apologies for the lack of attribution; they fell apart while I was trying to clip the quo

Re: BCP38.info

2014-01-28 Thread TGLASSEY
We see this all the time with banking sites and some of the stock trading ones Todd On 1/28/2014 5:06 AM, Jared Mauch wrote: On Jan 26, 2014, at 12:47 PM, Jay Ashworth wrote: something like 6 years ago, and couldn't get any traction on it then; I'm not sure I think much has changed -- appar

Re: Opensource tools for inventory and troubleticketing

2014-01-28 Thread Alexander Bochmann
...on Fri, Jan 24, 2014 at 10:37:14AM +0100, Octavio Alfageme wrote: > network, but we are starting to need a better inventory of services and > network > resources and better troubleticketing procedures. We can not afford acquiring For the inventory and documentation part, Netdot is pretty c

Re: BCP38.info

2014-01-28 Thread Jared Mauch
On Jan 26, 2014, at 12:47 PM, Jay Ashworth wrote: > something like 6 years ago, and couldn't get any traction on it then; > I'm not sure I think much has changed -- apparently, extracting your > BP thoughts from mailing list postings and putting them into a wiki is > more effort than most NANOG