Re: Question about the use of NO_EXPORT in BGP route announcements

2024-09-20 Thread Justin Krejci
Right. Just because someone with whom you have an eBGP connection established is also a transit provider doesn't mean you have to or even want to make use of transiting into other networks across that connection. We've done exactly this to avoid trombone routing to get to a set of customers. -

Re: charging for config changess

2024-07-02 Thread Justin Krejci
Reminds me of some colo providers that charge you to cancel a service. Want to disconnect a cross connect? *bam* $250, or some such obscene amount. -Original Message- From: Aaron C. de Bruyn via NANOG mailto:%22aaron%20c.%20de%20bruyn%20via%20nanog%22%20%3cna...@nanog.org%3e>> Reply-To:

Re: Verizon Business Contact

2024-02-19 Thread Justin Krejci
told "your ISP needs to set the correct bits in the IP packets to designate the traffic as coming from the correct geography." I laughed and I cried at that one. -Original Message- From: Richard Laager mailto:richard%20laager%20%3crlaa...@wiktel.com%3e>> To: Justin

Re: Verizon Business Contact

2024-02-09 Thread Justin Krejci
For a good long while (months) we have had similar issues with various Verizon destinations. I observed it only happens when passing through certain geographic regions of the US. Other regions make it through without issue. This is directly observable and repeatable using Cogent's Looking glass

Re: Sling TV Geolocation

2024-01-26 Thread Justin Krejci
I have Digital Element in my own internal wiki page for managing/documenting IP geolocation services headaches. Searching them up on my page I see noted they have a contact us form that specifically lists "IP Address Data Update" as a contact reason. Maybe that will give you or others some aven

Re: ipv6 address management - documentation

2023-11-20 Thread Justin Krejci
I give +1 for phpipam -Original Message- From: Justin Wilson (Lists) mailto:%22justin%20wilson%20%28lists%29%22%20%3cli...@mtin.net%3e>> To: NANOG mailto:nanog%20%3cna...@nanog.org%3e>> Subject: Re: ipv6 address management - documentation Date: Sun, 19 Nov 2023 23:38:28 -0500 Netbox or

Re: Akamai Network Partnership

2023-10-17 Thread Justin Krejci
Hello Edy, Log into your peeringdb.com account and go to their network, they have a peering contact listed there. https://www.peeringdb.com/net/2 From: NANOG on behalf of em...@edylie.net Sent: Tuesday, October 17, 2023 5:10 PM To: nanog@nanog.org Subject

Prize Picks - gelocation/vpn/fraud system

2023-09-11 Thread Justin Krejci
contact to resolve an issue that the regular support channel is unable to do. Thanks! Justin Krejci

Contact for androidpolice.com

2023-02-03 Thread Justin Krejci
Any contacts available that are responsible for androidpolice.com website hosting? Some of our IP space is not able to access their website. Other IP addresses of ours are working just fine. This appears to be some kind HTTP protocol layer issue but only affecting certain IP addresses. I am gues

Re: FIDO2/Passkey now supported for 2FA for ARIN Online (was: Fwd: [arin-announce] New Features Added to ARIN Online)

2023-01-03 Thread Justin Krejci
Very interesting news. Improving online security is a win and this sounds promising. Never having used FIDO2 for anything I am left, probably not uniquely, in the dark for hardware device support. The only link I found on the ARIN website for "hardware keys" was a link to another ARIN page, wh

Re: Sigh, friends don't let politicians write tech laws

2022-07-29 Thread Justin Krejci
Leave the private matter of private email handling in the hands of the private participants of the private email system. If congress wants to create a government mandate on political campaign emails, the political campaigns themselves ought to be forced to mark their emails as a political campa

Re: Disney+ Issues

2022-04-29 Thread Justin Krejci
I'd suggest you reach out to hosting company and have them mark the block(s) in question as re-allocated to your organization. Also Neustar does support self-published geofeeds so you could also publish your own + leased IP space and them get them to subscribe to your list. __

Re: Geolocation data management practices?

2022-04-21 Thread Justin Krejci
For corrections/updates, what I have found to be generally successful is 1. make sure to advertise the IP blocks into the DFZ from your ASN as soon as possible 2. make sure ARIN data is accurate (we use ARIN, you may use one of the other registries) 3. update my geofeed, as referenced already

Telia is now Arelion

2022-01-19 Thread Justin Krejci
https://www.arelion.com/ Since all other work is now complete in the world I should have plenty of time to update documentation, billing, labels, port names, route-maps, contact email addresses, etc. After watching their marketing video I learned the pronunciation of Arelion is not R-Lion

Re: The great Netflix vpn debacle! (geofeeds)

2021-09-01 Thread Justin Krejci
Well apparently there are VPN applications that rely on fellow VPN users in a P2P fashion to share network connectivity. I guess it is like a commercialized version of Tor to some extent. Excluding any potential legal risks for illegal behavior tunneled through an unsuspecting fellow user, this

Re: The great Netflix vpn debacle!

2021-08-27 Thread Justin Krejci
+1 on Bryan's message. TL;DR It seems lots of ISPs are struggling to figure out the why and the where of many IP addresses or blocks that are suddenly being blacklisted or flagged as VPNs or as out of service area. I would really love to find, as Bryan said, if there is one particular IP

Venmo - Geolocation Challenges

2020-04-23 Thread Justin Krejci
appreciated. I don't mind working with any organization to straighten out any stale data, I just need some assistance getting to someone who has the info or access. Thanks!! Justin Krejci

NFL Sunday Ticket - Online Streaming service

2019-12-10 Thread Justin Krejci
I am looking for a contact in the network group (may be called National Escalation team or NatEsc team internally) within AT&T/DirecTV pertaining to the NFL Sunday Ticket online streaming service. I have been attempting to work through their normal support process for quite some time, they are e

Disney+ Streaming

2019-11-12 Thread Justin Krejci
I see the Disney service went live today, with some load issues according to various news reports and down detector. Is it well known where the newly released Disney+ streaming service content is sourced? Are they using their own servers on AS22604 or using one or more of the established CDNs? O

RE: New ASN Assignments in ARIN

2017-03-23 Thread Justin Krejci
Last few new ASN additions ARIN has issued: Add AS396022 Add AS396023 Add AS396024 Add AS396025 Add AS396026 Add AS396027 ARIN has a daily mailing list where they indicate all of their newly updated number resource registrations. http://lists.arin.net/pipermail/arin-issued/ _

RE: BGP Route Reflector - Route Server, Router, etc

2017-01-13 Thread Justin Krejci
at 08:32:44PM +, Justin Krejci wrote: > I am working on some network designs and am adding some additional routers to > a BGP network. I'd like to build a plan of changing all of the existing > routers over from full iBGP mesh to something more scalable (ie route > reflecti

BGP Route Reflector - Route Server, Router, etc

2017-01-12 Thread Justin Krejci
Nanog, I am working on some network designs and am adding some additional routers to a BGP network. I'd like to build a plan of changing all of the existing routers over from full iBGP mesh to something more scalable (ie route reflection). Fortunately, I am also going to be able to decommission

RE: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread Justin Krejci
If you read the article, it is made clear he was "kicked off" of a free service being provided. He was not a paying customer of Akamai and does not fault Akamai for their decision. From: Grant Ridder [shortdudey...@gmail.com] Sent: Friday, September 23,

RE: Anyone with a clue at Zayo?

2016-09-16 Thread Justin Krejci
Might help if you indicate type of service as they have lots of services covered by different groups: IP transit, wave, dark fiber, voip, Colo, etc. Their Enterprise division does yet other services. Might also help if you provide at least a general location/region. -Original Message-

Equipment Supporting 2.5gbps and 5gbps

2016-01-27 Thread Justin Krejci
I've a couple 10 port Cisco switches that support 2.5 and 5gbps over cat5e, just wondering if there are any other vendors out there with offerings that support these newer ethernet speeds. Supporting cat5e for these multi-gig speeds is a real boon in many circumstances given the wide popularity

Comcast Static IP Changed With New Modem?

2015-02-09 Thread Justin Krejci
Has anyone run into the situation where their static IP address from Comcast (on the business class cable modem Internet service) was changed when the modem was replaced? We have a remote site that uses Comcast as a backup Internet connection and when we went to use it recently our VPN tunnel w

RE: Belkin Router issues this morning?

2014-10-07 Thread Justin Krejci
https://twitter.com/search?q=%23belkin Sounds like a bad firmware update most likely. Presumably the Belkin routers perform caching DNS for the LAN clients for if the LAN clients use alternate DNS servers (OpenDNS, Google, your ISPs, etc) there are no longer any issues for those devices, as repo

Re: Issues encountered with assigning .0 and .255 as usable addresses?

2012-10-22 Thread Justin Krejci
And since owen has not yet mentioned it, consider something that supports having : in its address as well.  Sort of tangentially related, I had a support rep for a vendor once tell me that a 255 in the second or third octet was not valid for an ipv4 address. Hard to troubleshoot a problem when

Re: Cogent for ISP bandwidth

2012-05-15 Thread Justin Krejci
+1 for cogent, problem free and good responsive support. Not sure why "don't use only 1 upstream if you care about accessibility" has anything to do with cogent specifically. Are peering/de-peering disputes more likely to occur than all other network/routing issues combined? its just another po

Re: enterprise 802.11

2012-01-15 Thread Justin Krejci
No one has mentioned Belair yet? Serves the Minneapolis network pretty well. http://www.belairnetworks.com/ -Original Message- From: Greg Ihnen Date: Sun, 15 Jan 2012 19:06:26 To: Nathan Eisenberg Cc: nanog@nanog.org Subject: Re: enterprise 802.11 Since we're already top-posting… I'

Re: accessing multiple devices via a script

2012-01-15 Thread Justin Krejci
Parallel ssh (pssh) might help you too --Original Message-- From: Abdullah Al-Malki To: nanog@nanog.org Subject: accessing multiple devices via a script Sent: Jan 15, 2012 11:52 AM Hi fellows, I am supporting a big service provider and sometimes I face this problem. Sometimes I want to a

Re: estimation of number of DFZ IPv4 routes at peak in the future

2011-03-11 Thread Justin Krejci
On Wed, 2011-03-09 at 09:32 -0500, John Curran wrote: > On Mar 9, 2011, at 12:43 AM, Majdi S. Abbas wrote: > > On Wed, Mar 09, 2011 at 12:44:05PM +0900, Randy Bush wrote: > >> i am more of a pessimist. i suspect that there will be enough v4-only > >> destinations out there that multi-homed enter

RE: dns interceptors

2010-02-18 Thread Justin Krejci
While not covering all apps you may want to use, it does work for at least Firefox when web browsing (works on non-windows too) when using an ssh socks proxy Go to the address about:config filter for "dns" toggle "network.proxy.socks_remote_dns" to "true" and then firefox will send its own DNS q

RE: cisco.com

2009-08-04 Thread Justin Krejci
The IP is back in BGP and the website is working for me now.

H3C Switches/Routers

2009-07-13 Thread Justin Krejci
, Justin Krejci

RE: Multi site BGP Routing design

2009-06-08 Thread Justin Krejci
Thanks to all for the on and off list replies, they've been helpful. We get full BGP routes from all upstream connections (currently they are all different providers). The upstream bandwidth is cheaper at site 2 than at site 1 and the private backnet connection is a fixed cost so when previously c

Multi site BGP Routing design

2009-06-05 Thread Justin Krejci
We have two geographically distinct locations that currently both fall under the same ASN. At site 1 we have a particular set of ip networks (/20 and bigger) in use only locally to this site At site 2 we have a separate set of ip networks (/20 and bigger) in use only locally to this site Each

RE: McAfee/AT&T Issue

2009-02-18 Thread Justin Krejci
We've also seen that busy routers are slower to respond to requests directed at them as opposed to traffic routing thru them which can continue to work without issue or performance loss. -Original Message- From: Kameron Gasso [mailto:kgasso-li...@visp.net] Sent: Wednesday, February 18, 20

RE: Networking performance

2009-02-11 Thread Justin Krejci
STG is a very simple windows real time snmp grapher http://leonidvm.chat.ru/ It is geared at interface throughput but can easily be used for things like CPU utilization, firewall connection counts, temperature, etc. -Original Message- From: Joel Jaeggli [mailto:joe...@bogus.com] Sent: Fr

RE: isprime DOS in progress

2009-01-21 Thread Justin Krejci
-Original Message- From: Graeme Fowler [mailto:gra...@graemef.net] Sent: Wednesday, January 21, 2009 11:08 AM To: Nanog Mailing list Subject: Re: isprime DOS in progress > I've been seeing a lot of noise from the latter two addresses after > switching on query logging (and finishing an