Re: Asus wifi AP re-writing DNS packets

2020-10-29 Thread Alarig Le Lay
On Thu 29 Oct 2020 02:10:25 GMT, Anurag Bhatia wrote: > I tried deleting the rule and it drops the traffic completely. So DNS > resolution stops working and I am unsure why. It's not like default drop or > anything. I can edit the rule and whatever active port 53 related rule is > there works. But

Re: BGP and The zero window edge

2021-04-25 Thread Alarig Le Lay
On Thu 22 Apr 2021 01:24:54 GMT, Job Snijders via NANOG wrote: > One example is > http://lg.ring.nlnog.net/prefix_detail/lg01/ipv6?q=2a0b:6b86:d15::/48 > > 2a0b:6b86:d15::/48 via: > BGP.as_path: 204092 57199 35280 6939 42615 42615 212232 > BGP.as_path: 208627 207910 57199 3528

Re: PeeringDB Hackathon - looking for feature requests

2021-08-12 Thread Alarig Le Lay
On Thu 12 Aug 2021 15:27:48 GMT, Steve McManus wrote: > PeeringDB is looking at participating at an upcoming NANOG Hackathon. > One of the ideas for a theme is to improve the API. Specifically by > adding API calls for common use cases that people need to handle > outside of the API. Typically, by

Re: Centurylink having a bad morning?

2020-09-02 Thread Alarig Le Lay
https://www.youtube.com/watch?v=vQ5MA685ApE On Wed 02 Sep 2020 20:40:35 GMT, Baldur Norddahl wrote: > That is what the 5G router is for... > > ons. 2. sep. 2020 19.47 skrev Michael Hallgren : > > > While conserving connectivity? 😂 > > > > > > -- > > *De :* Shawn L via

Re: new BGP hijack & visibility tool “BGPalerter”

2019-08-14 Thread Alarig Le Lay
Hi, You can build it yourself, see https://github.com/nttgin/BGPalerter#more-information-for-developers I think that the binaries are here for thoses that don’t want to install all the build-chain. -- Alarig On 14/08/2019 19:06, Ryan Hamel wrote: > Job, > > I appreciate the effort and the inte

Re: DoD IP Space

2019-11-04 Thread Alarig Le Lay
Hi, On lun. 4 nov. 10:55:47 2019, Chris Knipe wrote: > Hi Guys, > > Except for the email on ARIN's details, does anyone else have a contact for > the DoD? > > We are experiencing a situation with a 3rd party (direct peer), wanting to > advertise DoD address space to us, and we need to confirm w

Re: DoD IP Space

2019-11-04 Thread Alarig Le Lay
On 04/11/2019 10:23, Chris Knipe wrote: > I know that much - but just because it's not advertised, doesn't mean > you're allowed to use it?   It means that you’re not supposed to advertise it to your peers, at least. The usage of public-but-not-used space inside networks isn’t really my problem a

Re: DNSSEC and ISPs faking DNS responses

2015-11-13 Thread Alarig Le Lay
On Fri Nov 13 04:27:36 2015, Jean-Francois Mezei wrote: > I'll have to research how other countries tried to implement similar > schemes (I believe the UK has with some of the popular torrent sites. > > I know the Australian attempt to filter porn failed miserably. We also have some torrent sites

Re: IPv6 Cogent vs Hurricane Electric

2015-12-01 Thread Alarig Le Lay
On Tue Dec 1 14:39:14 2015, Andrew Kirch wrote: > Might I suggest cake pleas? You mean http://www.datacenterknowledge.com/wp-content/uploads/2009/10/Hurricane-Cake.jpg ? -- Alarig signature.asc Description: Digital signature

Re: Level3 DNS not resolving for our domains

2015-12-30 Thread Alarig Le Lay
- Alarig Le Lay signature.asc Description: Digital signature

Re: IPV6 planning

2016-03-07 Thread Alarig Le Lay
On Mon Mar 7 15:51:06 2016, Owen DeLong wrote: > To the best of my knowledge, Windows actually generates three > addresses… > > 1. Subnet Stable quasi-randomized address unrelated (or at least not > reversable to) MAC address. > 2. Privacy address which rotates frequently (for some definition of

Re: IPv6 deployment excuses

2016-07-01 Thread Alarig Le Lay
On Fri Jul 1 17:43:21 2016, Gary Wardell wrote: > > > > http://ipv6excuses.com/ > > That website only supports IPv4. It’s on your side. alarig@pikachu ~ % telnet ipv6excuses.com http Trying 2403:7000:8000:500::26... Connected to ipv6excuses.com. Escape character is '^]'. ^] telnet> quit Connec

Re: [outages] ntp.org DNS lookups failing

2017-01-18 Thread Alarig Le Lay
Hi, On Wed Jan 18 21:25:23 2017, Gert Doering via Outages wrote: > Trying to query directly, ns1/ns2.ntp.org return SERVFAIL as well, > and ns1/ns2.everett.org do not reply at all... so pure guesswork on > my side says "the original set is broken / under attack / ..., so > new servers have been ad

Re: google ipv6 routes via cogent

2017-03-02 Thread Alarig Le Lay
On sam. 25 févr. 09:49:56 2017, Aaron wrote: > Hi, I'm new to the nanog list, hope this isn't out of scope for what is > usually discussed here. > > > > Cogent is telling me that I can't route through cogent to get to google ipv6 > routes (particularly the well known dns addresses 2001:4860:486

Re: google ipv6 routes via cogent

2017-03-02 Thread Alarig Le Lay
On jeu. 2 mars 12:36:04 2017, Aaron Gould wrote: > Well, I asked my (3) upstream providers to only send me a ipv6 default > route and they sent me ::/0...here's one of them... Why did you don’t ask for a full view? With that, you can easily deal with that kind of problem. -- alarig signature

Re: IPv6 doc. prefix (2001:db8::/32) - APNIC object ?

2017-03-06 Thread Alarig Le Lay
On lun. 6 mars 10:55:18 2017, Brandon Applegate wrote: > Just did a whois on the documentation prefix and was surprised to see what > looks like a user object registered for it: > > % Information related to '2001:0DB8::/32AS132111' > > route6: 2001:0DB8::/32 > descr: FUTURE D S

Re: google ipv6 routes via cogent

2017-03-07 Thread Alarig Le Lay
On sam. 25 févr. 09:49:56 2017, Aaron wrote: > Hi, I'm new to the nanog list, hope this isn't out of scope for what is > usually discussed here. > > > > Cogent is telling me that I can't route through cogent to get to google ipv6 > routes (particularly the well known dns addresses 2001:4860:486

Re: google ipv6 routes via cogent

2017-03-08 Thread Alarig Le Lay
On mer. 8 mars 09:29:11 2017, Marty Strong via NANOG wrote: > I wouldn’t be surprised if that’s unwanted, where Telstra domestic is > announcing to Telstra International, who in turn announces to Cogent. I wouldn’t too, especially since I don’t see it anymore: alarig@nominoe:~ % birdc6 show route

Re: nanog: SixXS is shutting down

2017-03-23 Thread Alarig Le Lay
On jeu. 23 mars 11:35:05 2017, LHC (k9m) wrote: > Many people still don't have native IPv6. Why must 6XS die? The whole reflection is explained here: https://www.sixxs.net/sunset/ but to abstract, it’s because SixXS became an argument for large provider to not deploy IPv6 to their end users, as th

Re: BCP for securing IPv6 Linux end node in AWS

2017-05-14 Thread Alarig Le Lay
On dim. 14 mai 09:29:45 2017, Eric Germann wrote: > Good morning all, > > I’m looking for some guidance on best practices to secure IPv6 on > Linux end nodes parked in AWS. > > Boxes will be running various services (DNS for starters) and I’m > looking to secure mainly ICMP at this point. Servic

Re: HE.net problem

2024-07-07 Thread Alarig Le Lay via NANOG
On Thu 04 Jul 2024 18:16:28 GMT, Randy Bush wrote: > hak whacked me to add > http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html > to my nagios deployment. > > anyone have some known sick in various ways dns zones against which to > test? Those domains are bro