Re: HE.net outage / status page ?

2024-06-14 Thread Anurag Bhatia
r example through their network is > impossible, but many other blocks are affected as well. > > Verified through: https://lg.he.net/ but there's no status page > anywhere... > > Thanks! > > -- Anurag Bhatia anuragbhatia.com

Regarding BGP offloading

2022-03-16 Thread Anurag Bhatia
eading it wrong and it's actually smaller VM/containers will full router functionality and BGP alone is not being offloaded? So the logical L3 endpoint here is VMs? What sort of config the device sitting in frontend would have at the interface level to achieve that? Appreciate your responses

Re: Undersea cable damages in the Atlantic?

2022-01-18 Thread Anurag Bhatia
quot; is mentioned as in the Atlantic. Does > > anyone know more about this? A news search for "cable cuts" didn't bring > > up anything aside from the Tonga story. > > > > Mukund > -- Anurag Bhatia anuragbhatia.com

Theorical question about cyclic dependency in IRR filtering

2021-11-29 Thread Anurag Bhatia
loop in resolution? Thanks! -- Anurag Bhatia anuragbhatia.com

Re: Paging a TATA person?

2021-01-19 Thread Anurag Bhatia
> > Dan Mahoney > Techie, Sysadmin, WebGeek > Gushi on efnet/undernet IRC > FB: fb.com/DanielMahoneyIV > LI: linkedin.com/in/gushi > Site: http://www.gushi.org > --- > > -- Anurag Bhatia

Re: Asus wifi AP re-writing DNS packets

2020-11-04 Thread Anurag Bhatia
rules. Hoping that it doesn't bring any side effects and they eventually put it in their public release after testing. Thanks. On Mon, Nov 2, 2020 at 10:09 PM Anurag Bhatia wrote: > Hi Alarig > > > I tried that but somehow DNS traffic still does not work. I tried adding > ru

Re: Asus wifi AP re-writing DNS packets

2020-11-02 Thread Anurag Bhatia
d them to make this feature optional so that at least folks like us can disable it. Let's see how that goes. Thanks. On Thu, Oct 29, 2020 at 3:13 PM Alarig Le Lay wrote: > On Thu 29 Oct 2020 02:10:25 GMT, Anurag Bhatia wrote: > > I tried deleting the rule and it drops the traffi

Re: Asus wifi AP re-writing DNS packets

2020-10-28 Thread Anurag Bhatia
k the dns to redirect the user to a captive portal "your > internet is down" error page possibly? > > On Wed, Oct 28, 2020 at 1:42 PM Anurag Bhatia wrote: > >> I tried deleting the rule and it drops the traffic completely. So DNS >> resolution stops working and I am u

Re: Asus wifi AP re-writing DNS packets

2020-10-28 Thread Anurag Bhatia
x27;m curious to know why they would add such a thing, and how you got the >> iptables rules from the device. Do these Asus routers provide SSH directly >> into the shell? >> >> Ryan >> On Oct 28 2020, at 11:33 am, Anurag Bhatia wrote: >> >> Hello, >>

Asus wifi AP re-writing DNS packets

2020-10-28 Thread Anurag Bhatia
ar my discussions with their support have been going quite slow and would greatly appreciate if someone could connect me to right folks in there so they can release a firmware fix for it. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Anyone from Airtel or Tata on list? DNS block issue on search engine

2020-07-03 Thread Anurag Bhatia
DER<<- opcode: QUERY, status: NOERROR, id: 36722 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4000 > ;; QUESTION SECTION: > ;duckduckgo.com.IN A > > ;; ANSWER SECTION: > duckduckgo.com. 10800 IN A 127.0.0.1 -- Anurag Bhatia anuragbhatia.com

Re: BGPmon alerting me about prefixes being withdrawn from Hurricane Electric attached sites

2020-05-26 Thread Anurag Bhatia
s are, I can't traceroute to figure out what their most likely > interconnection point with HE is to look at the appropriate looking glass. > The HE NOC is obviously better positioned to see where our prefixes are or > are not on their network, which is why I contacted them. > > Frank > AS53347 > > -- Anurag Bhatia anuragbhatia.com

Re: WIKI documentation Software?

2020-03-14 Thread Anurag Bhatia
what WIKI software teams are using to save documentation to > / how to's for staff, etc. > > > > pro's > > con's > > > > We have an older wiki bare-metal wiki server, that I want to get replaced > before it kicks the bucket and was looking into various ones. > > > > thanks; > > > > CPV > > > > > > -- Anurag Bhatia anuragbhatia.com

Re: Anyone from Verisign J root on the list?

2020-03-09 Thread Anurag Bhatia
Note: I heard back from Verisign team. Thanks to everyone for their inputs. On Sat, Mar 7, 2020 at 9:01 PM Anurag Bhatia wrote: > Hello, > > > Was wondering if there's anyone from Verisign managing the J root? Can you > please contact me offlist. > I am facing iss

Anyone from Verisign J root on the list?

2020-03-07 Thread Anurag Bhatia
Hello, Was wondering if there's anyone from Verisign managing the J root? Can you please contact me offlist. I am facing issue with consistent ICMP filtering on "rootns-lcy3" since last couple of weeks. Thanks -- Anurag Bhatia anuragbhatia.com

Re: Dual Homed BGP

2020-01-27 Thread Anurag Bhatia
t; up to this point. > > > > -Aaron > > > > > -- Anurag Bhatia anuragbhatia.com

Re: Anyone have contacts at Bharti Airtel?

2019-12-07 Thread Anurag Bhatia
iger) wrote: > > > Does anyone have any contacts at Bharti Airtel? I either get no response > or > > full inbox for emails in their WHOIS at AS9498 and AS24560. > > Hi, if you get a response, please share...I'm also at a loss there... > > Elmar. > -- Anurag Bhatia anuragbhatia.com

Question about mismatch of origin ASN in parent and more specific route object

2019-09-18 Thread Anurag Bhatia
AS X allowing 2001:DB8::/32 (upto say /48) and won't really for mismatching route object for 2001:DB8::/48? Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Issue with point to point VPNs behind NAT and asymmetric traffic

2019-06-26 Thread Anurag Bhatia
Controls source route verification > net.ipv4.conf.default.rp_filter = 0 > # Do not accept source routing > net.ipv4.conf.default.accept_source_route = 1 > > > > -Original message- > *From:* Anurag Bhatia > *Sent:* Wed 06-12-2019 04:45 pm > *Subject:* Issue

Re: Issue with point to point VPNs behind NAT and asymmetric traffic

2019-06-15 Thread Anurag Bhatia
should be able to test this by doing > pcaps to confirm the traffic is arriving (though I'm not familiar with > WireGuard so maybe not), and you should be able to disable this by setting > a rule or unchecking a box in your firewall. > > On Wed, Jun 12, 2019, 5:47 PM Anurag

Issue with point to point VPNs behind NAT and asymmetric traffic

2019-06-12 Thread Anurag Bhatia
conds), the tunnel is always up. Any idea why asymmetric packets are being dropped here? This exact behaviour was in case of earlier OpenVPN + bird + iBGP and is still the same when I moved everything to Wireguard for VPN + FRR for routing + OSPF. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Amazon Peering

2019-01-28 Thread Anurag Bhatia
t;>>>> Intelligent Computing Solutions >>>>> http://www.ics-il.com >>>>> >>>>> Midwest-IX >>>>> http://www.midwest-ix.com >>>>> >>>>> -- >>>>> *From: *"Darin Steffl" >>>>> *To: *"North American Network Operators' Group" >>>>> *Sent: *Friday, November 23, 2018 10:21:51 PM >>>>> *Subject: *Amazon Peering >>>>> >>>>> Hey all, >>>>> >>>>> Does anyone have a direct contact to get a peering session established >>>>> with Amazon at an IX? I sent a peering request Dec 2017 and two more times >>>>> this Sept and Nov with no response. >>>>> >>>>> I sent to peer...@amazon.com and received one automated response back >>>>> so I know they received my email but nothing since. >>>>> >>>>> >>>>> >>>>> -- >>>>> Darin Steffl >>>>> Minnesota WiFi >>>>> www.mnwifi.com >>>>> 507-634-WiFi >>>>> <http://www.facebook.com/minnesotawifi> Like us on Facebook >>>>> <http://www.facebook.com/minnesotawifi> >>>>> >>>>> >>> >> -- Anurag Bhatia anuragbhatia.com

Re: Facebook doesn't have a route to my ISP's (Cogeco) IPv6 space?

2018-12-20 Thread Anurag Bhatia
Hi Brain Let's chat offlist to find why this is happening. The behaviour looks unusual and needs more troubleshooting. Thanks Anurag Bhatia (Hurricane Electric) On Thu, Dec 20, 2018 at 11:06 PM Brian J. Murrell wrote: > I've been trying to figure out why I can reach an IP

Re: Amazon now controls 3.0.0.0/8

2018-11-20 Thread Anurag Bhatia
, at 18:58, Matt Erculiani >>>>>> wrote: >>>>>> >>>>>> So it looks like GE will be solvent for a few more years and 3.3.3.3 >>>>>> DNS is incoming. >>>>>> >>>>>> -Matt >>>>>> >>>>>> On Thu, Nov 8, 2018, 17:54 Eric Kuhnke >>>>> >>>>>>> https://news.ycombinator.com/item?id=18407173 >>>>>>> >>>>>>> Quoting from the post: >>>>>>> >>>>>>> " >>>>>>> >>>>>>> Apparently bought in two chunks: 3.0.0.0/9 and 3.128.0.0/9. >>>>>>> >>>>>>> Previous owner was GE. >>>>>>> >>>>>>> Anecdotal reports across the Internet that AWS EIPs are now being >>>>>>> assigned in that range. >>>>>>> >>>>>>> https://whois.arin.net/rest/net/NET-3-0-0-0-1.html >>>>>>> >>>>>>> https://whois.arin.net/rest/net/NET-3-128-0-0-1.html >>>>>>> " >>>>>>> >>>>>>> >>>>>>> >>>>>>> > -- Anurag Bhatia anuragbhatia.com

Re: Tata Scenic routing in LAX area?

2018-11-15 Thread Anurag Bhatia
ms 179.367 ms 179.324 ms >> >> 5 182.79.152.247 (182.79.152.247) 180.164 ms 182.79.152.253 >> (182.79.152.253) 184.816 ms 182.79.152.247 (182.79.152.247) 250.928 ms >> >> 6 unknown.telstraglobal.net (202.127.73.101) [AS 4637] 173.974 ms >> 173.986 ms 173.484 ms >> >> 7 i-93.sgpl-core02.telstraglobal.net (202.84.224.189) [AS 4637] >> 175.094 ms 175.699 ms 174.343 ms >> >> 8 i-10850.eqnx-core02.telstraglobal.net (202.84.140.46) [AS 4637] >> 280.686 ms 288.703 ms 280.836 ms >> >> 9 i-92.eqnx03.telstraglobal.net (202.84.247.17) [AS 4637] 278.021 ms >> 276.637 ms 302.249 ms >> >> 10 equinix-ix.sjc1.us.voxel.net (206.223.116.4) 174.139 ms 174.163 >> ms 174.067 ms >> >> >> >> >> >> Marcus Josephson >> >> IP Operations >> >> >> >> mjoseph...@inap.com >> >> >> >> *This message is intended for the use of the intended recipient(s) and >> may contain confidential and privileged information. * >> >> *Any unauthorized review, use, disclosure or distribution is prohibited. >> If you are not the intended recipient, please contact* *the sender by >> reply email and destroy all copies of the original message.* >> >> >> >> >> >> >> >> >> -- >> >> [stillwa...@gmail.com ~]$ cat .signature >> cat: .signature: No such file or directory >> [stillwa...@gmail.com ~]$ >> >> The contents of this e-mail message and >> any attachments are intended solely for the >> addressee(s) and may contain confidential >> and/or legally privileged information. If you >> are not the intended recipient of this message >> or if this message has been addressed to you >> in error, please immediately alert the sender >> by reply e-mail and then delete this message >> and any attachments. If you are not the >> intended recipient, you are notified that >> any use, dissemination, distribution, copying, >> or storage of this message or any attachment >> is strictly prohibited. >> > -- Anurag Bhatia anuragbhatia.com

Re: Question about bird RS config with BGP Community support

2018-07-24 Thread Anurag Bhatia
b Snijders wrote: > > > >> On Mon, 23 Jul 2018 at 23:00, Anurag Bhatia > wrote: > >> > >> We are running a small IX fabric (in Mumbai, India) and with multiple > >> route servers based on a bird. There has been a demand of support of BGP > >> co

Question about bird RS config with BGP Community support

2018-07-23 Thread Anurag Bhatia
) and behaviour is same. No route announcement to peers. Was wondering if anyone can point to right config to support BGP communities? Thanks! -- Anurag Bhatia anuragbhatia.com

Re: IPv4 and IPv6 hijacking by AS 6

2018-04-12 Thread Anurag Bhatia
AS 6 running around with a different set of > peers/transits, > > as he was able to confirm that none of his gear is advertising these > > prefixes. > > > > That is what I feared as well. It appears the single digit ASNs often fall > victim of other people’s misco

Re: Why doesn't "Cloudflare 1.1.1.1" compress root answers?

2018-04-05 Thread Anurag Bhatia
;s so special about root? > Except for the obvious :-) > > > > Bjørn > > -- Anurag Bhatia anuragbhatia.com

Re: CDN-provided caching platforms?

2018-04-04 Thread Anurag Bhatia
said: > > > I was wondering if there are other CDN caching platforms out there we > > should be researching/deploying? > > Does traffic analysis show any other destinations that have enough traffic > that caching might help? > > > -- Anurag Bhatia anuragbhatia.com

whoami.akamai.net and public DNS node replies

2018-04-02 Thread Anurag Bhatia
n what's going on? -- Anurag Bhatia anuragbhatia.com

Re: What happened to BGP Update Report?

2017-05-27 Thread Anurag Bhatia
Seems good. Thanks for sharing! On Sat, May 27, 2017 at 12:21 AM, Andrew Latham wrote: > Just bookmark http://bgpupdates.potaroo.net/instability/bgpupd.html if you > like the report. > > On Fri, May 26, 2017 at 1:40 PM, Anurag Bhatia > wrote: > > > Hello, everyone.

What happened to BGP Update Report?

2017-05-26 Thread Anurag Bhatia
report with other data. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: IPv6 dumps on Oregon route views

2016-11-28 Thread Anurag Bhatia
ollector for V6, then you might > want paix, sydney, linx, eqix, saopaulo, sg... instead. > > John Kemp > h...@routeviews.org > > > On 11/24/2016 06:46 AM, Anurag Bhatia wrote: > > Hello everyone > > > > > > > > Was wondering if anyone i

IPv6 dumps on Oregon route views

2016-11-24 Thread Anurag Bhatia
00 5w1d 33142 2001:918:0:5::1 4 3303 611233849 4662830200 2d10h 32994 and much more. I am trying to look for mrt dump of this specific collector. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Cisco Nexus vPC-VOIP Issues

2016-08-24 Thread Anurag Bhatia
> > > We have not seen any issues apart from one of VOIP server connected to > > Switch 1 has lost access to VOIP Server connected Switch 2 and vice > versa. > > > > Where I am able to ping both from Global. Can you please let me know what > > is went wrong here. > > > > > > [image: Inline image 2] > > > > > -- > Try and fail but never fail to try > > -- Anurag Bhatia http://anuragbhatia.com

G root not responding on UDP?

2016-04-14 Thread Anurag Bhatia
12.36.4#53(192.112.36.4) ;; WHEN: Thu Apr 14 16:59:09 2016 ;; MSG SIZE rcvd: 744 Is UDP blocked recently or it has been like this from long? -- Anurag Bhatia anuragbhatia.com

Re: mrtg alternative

2016-03-23 Thread Anurag Bhatia
u can get a free Eval of statseeker. Obnote, don't work for them just > a fairly happy customer > > alan > -- Anurag Bhatia anuragbhatia.com

Re: NTT Charles

2016-02-15 Thread Anurag Bhatia
gt; > ae-10.happy-trails-Charles.r22.asbnva02.us.bb.gin.ntt.net > > > > ae-5.happy-trails-Charles.r25.nycmny01.us.bb.gin.ntt.net > > > > ae-2.happy-trails-Charles.r08.nycmny01.us.bb.gin.ntt.net > > > > ae-7.happy-trails-Charles.r00.lsanca07.us.bb.gin.ntt.net > > -- Anurag Bhatia anuragbhatia.com

Re: Route leaks from AS9498 (BHARTI Airtel)?

2015-11-06 Thread Anurag Bhatia
dree already did a good write-up: > > http://www.bgpmon.net/large-scale-bgp-hijack-out-of-india/ > > Kind regards, > > Job > -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: IPv6 and Android auto conf

2015-10-16 Thread Anurag Bhatia
ection. > > -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: IPv6 and Android auto conf

2015-10-15 Thread Anurag Bhatia
works fine. Thanks. On Thu, Oct 1, 2015 at 9:26 PM, Hugo Slabbert wrote: > > On Mon 2015-Sep-28 21:15:02 +0530, Anurag Bhatia > wrote: > > Hi Hugo >> >> >> (My reply in line) >> >> On Mon, Sep 28, 2015 at 8:50 PM, Hugo Slabbert wrote: >> >

IPv6 and Android auto conf

2015-09-28 Thread Anurag Bhatia
Anyone facing similar issue? (Note: No issues on OS X or iOS which are in same LAN) I can try DHCPv6 but I guess most of devices do not support it yet. (I see support for that in routerboard though). Thanks. -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651

Re: ATT wireless IPv6

2015-07-27 Thread Anurag Bhatia
en tethering. The APN you want is nxtgenphone. > > If you have a device where you can not edit the APN settings (iPhone) you > can not use the IPv6 enabled VoLTE APN. > > I suspect this will be enabled if they launch VoLTE on the iPhone. > > - Jared -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Fwd: [ PRIVACY Forum ] Windows 10 will share your Wi-Fi key with your friends' friends

2015-07-06 Thread Anurag Bhatia
crosoft *trying* to make sure they weren't welcome in enterprise > environments? > > ObNANOG: How does this interact with Comcast/Xfinity's wireless hotspot > thing, where it *used* to be that customers could get on anyplace, but now > it's "customers and anybody the

Re: Question about EX - SRX redundancy

2015-06-14 Thread Anurag Bhatia
ailed device will be migrated to the remaining one. > > -Rob > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter <https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

2.4Ghz 40Mhz 802.11n wifi and Apple Macbook

2015-06-14 Thread Anurag Bhatia
other SSID nearby and I am sitting next to router for testing. This brings me to question - Has anyone successfully used 40Mhz with 2.4Ghz on 802.11n standard with Apple Macbook? I wonder if it's limitation on the chipset or something else. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Question about EX - SRX redundancy

2015-06-13 Thread Anurag Bhatia
#x27;t flip (provided your node priorities and > interface-monitoring weights are set accordingly). > > e.g. 2: shut an AE (which spans both EX VC members), one SRX goes dark > since you've killed the AE that's dedicated to it, and the primary will > need to flip (either

Re: Question about EX - SRX redundancy

2015-04-02 Thread Anurag Bhatia
reachable. > > -- > Hugo > > > On Thu 2015-Apr-02 23:50:46 +0530, Anurag Bhatia > wrote: > > Hi >> >> >> >> Yes, >> >> >> Since SRX0 connected to EX0 and SRX1 connected to EX1 (only). Thus either >> pair - 0 will w

Re: Question about EX - SRX redundancy

2015-04-02 Thread Anurag Bhatia
cannot make use of other corresponding >>> SRX. >>> >> > Do you mean that e.g. if SRX0 is the chassis cluster primary and EX0 goes > down, then you can't use SRX0, but you would like to be able to survive EX0 > going down *without* failing over the SRX chassis cl

Re: Question about EX - SRX redundancy

2015-04-02 Thread Anurag Bhatia
and for now, this suits my requirements. > > Sent from my iPhone > > > On Apr 2, 2015, at 07:12, Anurag Bhatia wrote: > > > > Hello everyone! > > > > > > > > > > I have got two Juniper EX series switches (on virtual chassis) and two

Fwd: Question about EX - SRX redundancy

2015-04-02 Thread Anurag Bhatia
onding physical ports) working well while failover to other ae bundle fails completely. I was wondering if someone can point me out here. Appreciate your time and help! -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter <https://

Re: Route Science

2014-11-15 Thread Anurag Bhatia
Just curious..;-) -- Anurag Bhatia http://anuragbhatia.com <http://anuragbhatia.com/> signature.asc Description: Message signed with OpenPGP using GPGMail

Re: astraceroute on MAC

2014-10-10 Thread Anurag Bhatia
why looking for that tool. Thanks. On Fri, Oct 10, 2014 at 7:21 PM, Niels Bakker wrote: > * m...@anuragbhatia.com (Anurag Bhatia) [Fri 10 Oct 2014, 14:59 CEST]: > >> Was wondering if anyone got the astraceroute tool working on MAC? >> > [..] > >> Does anyone knows a

astraceroute on MAC

2014-10-10 Thread Anurag Bhatia
Was wondering if anyone got the astraceroute tool working on MAC? http://www.shrubbery.net/astraceroute/ Tried compiling as well as via Mac ports but no success. Does anyone knows any other alternate similar tool? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <h

Per policy session cap on Juniper SRX

2014-09-06 Thread Anurag Bhatia
tried with machine having inbound traffic via firewall. They ping and port 80 also worked but SSH just hung up as soon as I started. I see SRX can be used in unidirectional setup but somehow it fails in my case. Any suggestions/advice/ sample configs? Thanks in advance! -- Anurag B

Re: Prefix hijacking, how to prevent and fix currently

2014-09-01 Thread Anurag Bhatia
> Be aware that even if you don't think you're > > peering with them directly, you may be picking > > up routes via the public route servers at exchange > > points, so check to see if you need to apply > > filters on your route server peerings as well. >

Re: Best practice for BGP session/ full routes for customer

2014-07-19 Thread Anurag Bhatia
endor corridors for > the scoop), well, welcome to the Internet; where core > routers can either be behemoths that move air the size of a > football field and could be mistaken for seismic detection > machines, or last generation's x86 home desktop running > Quagga and grandma's hea

Best practice for BGP session/ full routes for customer

2014-07-07 Thread Anurag Bhatia
or injecting full table in customer router and another BGP session with access router for receiving routes? (messy!) 2. Injecting full table in just all access routers so that it can be provided whenever needed? 3. Any other? Thanks in advance! -- Anurag Bhatia anuragbh

Re: Help with route latency between TATA and Comcast

2014-06-24 Thread Anurag Bhatia
-los-angeles.as6453.net > > [216.6.87.114] > > 10 *** Request timed out. > > 11 270 ms 255 ms 256 ms if-2-2.tcore1.svw-singapore.as6453.net > > [180.87.12.1] > > 12 270 ms 271 ms 275 ms if-11-2.thar1.svq-singapore.as6453.net &g

Re: All of .mil tld is down

2014-05-19 Thread Anurag Bhatia
ilto:nanog-boun...@nanog.org] On Behalf Of jamie rishaw > Sent: Tuesday, 20 May 2014 2:40 p.m. > To: NANOG list > Subject: All of .mil tld is down > > At time of post.. > .mil. is down. > Apparently an Anonymous "Operation Payback". > > .mil nameservers are unresponsive. > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Odd syslog-ng problem

2014-05-10 Thread Anurag Bhatia
e the problem? >> >> Regards, >> Peter > > > > -- > jamie rishaw // .com.arpa@j <- reverse it. ish. > > "...let's consider this world like a family and care about each other..." > -Malala Yousafzai -- Anurag Bhatia anuragbhatia.com signature.asc Description: Message signed with OpenPGP using GPGMail

Rancid with Maipu devices

2014-04-30 Thread Anurag Bhatia
ling. Did anyone got around this? If so, it would be helpful if you can share your customized script for Maipu. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP

Global Vs local node data in www.root-servers.org

2014-03-16 Thread Anurag Bhatia
announced by these nodes are announced to transit links as well to make routes visible globally. Likely that is not case here right? Same seems with L root and few others. Do we have webmaster of the project on mailing list? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <h

Re: DNS resolver reaction to non-reachable authoritative DNS server

2014-03-14 Thread Anurag Bhatia
t address to try. >> > > Sure, but by using the flag you skip that step, and the accompanying error > message in the logs. > > The fact that this issue has risen to the level of "annoyance" rather than > just "oddity" as it used to be is actually a good

DNS resolver reaction to non-reachable authoritative DNS server

2014-03-13 Thread Anurag Bhatia
th no failure? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: random dns queries with random sources

2014-02-19 Thread Anurag Bhatia
> Whatever I am doing appears to be working, at least until this cropped up. > > Joe > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Blocking of domain strings in iptables

2014-02-12 Thread Anurag Bhatia
gle 0x03 com. > > For the completeness of the archives, the length of the first token is > also encoded and final terminator is 0. > > 0x03 www 0x06 google 0x03 com 0x00 > > > -DMM > > > > > You can implement this with --hex-string instead of --string b

Blocking of domain strings in iptables

2014-02-08 Thread Anurag Bhatia
;0xDFDFDFDF=0x41434b53 && 0x40&0xFFDFDFFF=0x02434300" -j DROP -m comment --comment "DROP DNS Q dnsamplificationattacks.cc" but here I am not sure how to create such string out and script them for automation. Can someone suggest a way out for this within IPTables or may

Re: Best practice on TCP replies for ANY queries

2013-12-11 Thread Anurag Bhatia
Hi Doug I am using PowerDNS recursor. On Thu, Dec 12, 2013 at 12:51 AM, Doug Barton wrote: > You don't mention what software you're using. If you're using BIND, ask > this question on bind-us...@isc.org. There is indeed a solution. > > Doug > > > > On 1

Re: Best practice on TCP replies for ANY queries

2013-12-11 Thread Anurag Bhatia
Hi ML Yeah I can understand. Even DNSSEC will have issues with it which makes me worry about rule even today. On Wed, Dec 11, 2013 at 11:49 PM, ML wrote: > On 12/11/2013 1:06 PM, Anurag Bhatia wrote: > > > > I am sure I am not first person experiencing this issue. Curious

Best practice on TCP replies for ANY queries

2013-12-11 Thread Anurag Bhatia
iting to say 600-700 bytes or so. I am sure I am not first person experiencing this issue. Curious to hear how you are managing it. Also under what circumstances I can get a legitimate TCP query on port 53 whose reply exceeds a basic limit of less then 1000 bytes? Thanks. -- Anurag B

Re: Question on routing of Tata AS6453 with their other network AS4755

2013-11-18 Thread Anurag Bhatia
P sessions or just intentional filtering of a group of prefixes via a peer group or based on some community tag? Thanks. On Sun, Nov 17, 2013 at 11:16 PM, Michael Smith wrote: > > On Nov 16, 2013, at 11:49 AM, Anurag Bhatia wrote: > > > Hello everyone > > > > &

Question on routing of Tata AS6453 with their other network AS4755

2013-11-16 Thread Anurag Bhatia
arn what is wrong in the backbone design here. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

Re: Recovery mode on Juniper M7i

2013-11-13 Thread Anurag Bhatia
onsole as insecure, a previous owner maybe? >> >> http://superuser.com/questions/85536/securing-freebsd-in-single-user-mode >> >> http://www.freebsd.org/cgi/man.cgi?query=boot&sektion=8 >> >> HTH. >> >> >> On 6 November 2013 21:11, Anurag Bhatia wrot

Re: www.akamai.net giving NXDOMAIN

2013-11-07 Thread Anurag Bhatia
OK - seems like www.akamai.NET was working earlier but now they just prefer using www.akamai.COM and may be removed .net recently. On Thu, Nov 7, 2013 at 4:54 PM, Anurag Bhatia wrote: > Anurags-MacBook-Pro:~ anurag$ dig @8.8.8.8 www.akamai.net. > > ; <<>> DiG 9

www.akamai.net giving NXDOMAIN

2013-11-07 Thread Anurag Bhatia
MSG SIZE rcvd: 109 Anurags-MacBook-Pro:~ anurag$ That's weird! Missing "akamai.net" entry from the authoritative DNS nodes? I am in Austria right now and so likely my nearby node giving bad replies. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedi

Re: Recovery mode on Juniper M7i

2013-11-06 Thread Anurag Bhatia
te: > Can you paste in the output after 'boot -s' , I came across several > issues while recovering Root Password, But never faced this :) > > > On Thu, Nov 7, 2013 at 2:41 AM, Anurag Bhatia wrote: > >> Hello everyone! >> >> >> Greetings of the

Recovery mode on Juniper M7i

2013-11-06 Thread Anurag Bhatia
have same exact steps as given on that page. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

Re: Fundamental questions of backbone design

2013-10-24 Thread Anurag Bhatia
thew Petach wrote: > On Fri, Oct 18, 2013 at 2:46 PM, wrote: > > > On Fri, 18 Oct 2013 23:33:16 +0530, Anurag Bhatia said: > > > > >localpref to customer routes then peering and finally transit. Does > > this > > >works well or you see issu

Re: Fundamental questions of backbone design

2013-10-24 Thread Anurag Bhatia
Hi Valdis Checkout routing table at NIXI and you will get idea what I am referring to w.r.t. prepended routes. http://www.nixi.in/lookingglass.php Thanks! On Sat, Oct 19, 2013 at 3:16 AM, wrote: > On Fri, 18 Oct 2013 23:33:16 +0530, Anurag Bhatia said: > > >localpref

Re: abha ahuja

2013-10-19 Thread Anurag Bhatia
; she did a lot, and with an open mind and heart. > > > > randy > > > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

Fundamental questions of backbone design

2013-10-18 Thread Anurag Bhatia
breakdown as compared to slow hold time based iBGP session. Is there's more clear comparison of limitations of both when designing? Appreciate your time & help. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twi

Re: Regarding source based outbound routing (with redundancy)

2013-10-08 Thread Anurag Bhatia
ed peer's next-hop appropriately > > 4) profit > > > >but that sounds also kind of messy and prone to odd failures when > >changes are made :( > >you'd be adding complexity that you'd have to track through the life > >of your network :( (and explain

Regarding source based outbound routing (with redundancy)

2013-10-05 Thread Anurag Bhatia
provider 2 fails, I wish to push traffic again via Provider 1. Is this is possible only with VRF or I can push for some specific match rule in route maps? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anur

Re: Caution! Don't attempt the Postini to Google Apps transition

2013-09-08 Thread Anurag Bhatia
ering > for a while. In the meantime, I strongly encourage anyone else who cares > about reliable email delivery to avoid my fate. > > Matthew Kaufman > matt...@matthew.at > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

Re: MTR for Android?

2013-09-08 Thread Anurag Bhatia
ers mtr. > - jra > -- > Sent from my Android phone with K-9 Mail. Please excuse my brevity. > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

Strange entries from AS1 in global table

2013-08-03 Thread Anurag Bhatia
ssing to Level3 (AS3549+AS3356). I am curious to know what could be possible reason for an ASN like AS1 acting in exact mirror of AS52931? Could it be a case of internal use of AS1 (assuming it to be private ASN)? May be it's a case of leaked internal routes? Appreciate your time & answer.

Re: Line cut in Mediterranean?

2013-03-27 Thread Anurag Bhatia
hird party vendor that there's been a line cut > in the Mediterranean that is affecting some Internet traffic. Anyone have > any details? > > > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com

AS 58400 announcing 118.0.0.0/8

2013-02-11 Thread Anurag Bhatia
S6762> AS7713<http://bgp.he.net/AS7713> AS58400 <http://bgp.he.net/AS58400> So is AS6762 Telecom Itlia not filtering their Indonesian customer ? -- (Sent from my iPad) Anurag Bhatia http://anuragbhatia.com Twitter: @anurag_bhatia Skype: anuragbhatia.com

Re: Indonesian ISP Moratel announces Google's prefixes

2012-11-07 Thread Anurag Bhatia
my mobile device) Anurag Bhatia http://anuragbhatia.com On Nov 7, 2012 12:22 PM, "Patrick W. Gilmore" wrote: > On Nov 07, 2012, at 01:29 , Anurag Bhatia wrote: > > > Apologize for calling it an prefix hijack. I misunderstood in start. > Clearly it was case of prefix leak

Re: Indonesian ISP Moratel announces Google's prefixes

2012-11-06 Thread Anurag Bhatia
Apologize for calling it an prefix hijack. I misunderstood in start. Clearly it was case of prefix leaking. Thanks (Sent from my mobile device) Anurag Bhatia http://anuragbhatia.com On Nov 7, 2012 11:22 AM, "joel jaeggli" wrote: > On 11/7/12 12:13 AM, Patrick W. Gilmore wrote: &

Indonesian ISP Moratel announces Google's prefixes

2012-11-06 Thread Anurag Bhatia
these issues. Curious to know developments so far. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

Re: Belpak / Beltelecom contact to address a BGP hijacking issue?

2012-10-29 Thread Anurag Bhatia
ix but it's difficult to get the > traffic back! > > No answer from people listed in the whois, no peeringDB information. > Any suggestions? > > Thanks in advance, > -- > sarah > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anurag

Re: Google PTR?

2012-10-27 Thread Anurag Bhatia
ks & North Texas GigaPOP > > > > Which particular address are you referring to? > > I get PTR responses for the limited set of address I get from google. > > examples are good... I suspect he means things inside 15169's network > that are not serving external people services: 209.85.243.114 > > for instance? > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

Re: 100.100.0.0/24

2012-10-04 Thread Anurag Bhatia
s. Comment: Comment:This block was assigned by the IETF in the Best Current Practice document, Comment:RFC 6598 which can be found at: Comment:http://tools.ietf.org/html/rfc6598 RegDate:2012-03-13 Updated:2012-04-23 Ref:http://whois.arin.net/re

Softlayer/Network layer partial outage in Asian region?

2012-09-13 Thread Anurag Bhatia
.dar02.sr03.sng01.networklayer.com (50.97.18.199) 171.207 ms 12 po2.fcr01.sr03.sng01.networklayer.com (174.133.118.133) 180.555 ms * * 13 * * * 14 * * * I wonder what causes such issues? Clearly issue is within Softlayer's AS 36351. So is it like broken OSPF inside or iBGP? -- A

Re: Heads-Up: GoDaddy Broke the Interwebs...

2012-09-10 Thread Anurag Bhatia
GoDaddy Broke the Interwebs... > > For the last ~15 minutes I've been receiving complaints about DNS issues. > GoDaddy DNS is apparently b0rked. I'm also seeing a lot of tweets about > their hosting and VPS being down. I'm unable to access the control panel >

Re: Regarding smaller prefix for hijack protection

2012-09-03 Thread Anurag Bhatia
I didn't realized the routing table size problem with /24's. Stupid me. Thanks everyone for updates. Appreciate good answers. On Fri, Aug 31, 2012 at 4:18 AM, George Herbert wrote: > On Thu, Aug 30, 2012 at 8:41 AM, William Herrin wrote: > > On Thu, Aug 30, 2012 at 7:5

Re: Finding "Name Servers" (not NS records) of domain name

2012-09-01 Thread Anurag Bhatia
Querubin > e-mail: t...@lavanauts.org > xmpp: antonioqueru...@gmail.com > > -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

  1   2   >