Google's security.txt

Anyone from Google, You might want to fix a tiny typo in your security.txt. RFC9116 uses American spelling, not British spelling, like you did. Check here: https://www.uriports.com/tools?method=securitytxt=google.com It's only a small issue, but it might spread when people start using

IPv6 connectivity to mx[1-4].smtp.goog.

Hi, At https://internet.nl we're seeing IPv6 connection issues on TCP port 25 (SMTP) to mx[1-4].smtp.goog. Either 100% DROP (so no TCP connection) or ⅔ failure to setup connection. Further testing seems to confirm the problem is bigger and on Google's side. So, this fails: echo 'quit' | nc

Re: starlink ixp peering progress

Or this? https://bgp.he.net/AS14593#_peers6 Op 27/02/2024 om 13:17 schreef b...@uu3.net: Well, for some basic overview you can use CAIDA AS rank. You can use it directly, or you may try my (more user friendly) frontend for it: http://as-rank.uu3.net/?as=14593 -- Original message

Re: junos config commit question

into the shell, make an uncompressed copy of juniper.conf.gz, then pop back into the config editor and load that over top of the editor's config view. Surely there's a saner way of dealing with this. --lyndon -- Marco Davids

Re: Anyone else seeing DNSSEC failures from EU Commission ? (european-union.europa.eu)

Hi Laura, Something seems the matter, indeed: https://dnsviz.net/d/european-union.europa.eu/YbCzrQ/dnssec/ It's weird; 1.1.1.1 resolves, 8.8.8.8 and 9.9.9.9 return SERVFAIL. -- Marco Op 08-12-2021 om 14:27 schreef Laura Smith via NANOG: Bit of a long stretch given the US audience, but I'm

Re: IPv6 and CDN's

Hi again, Op 22-10-21 om 17:13 schreef Job Snijders: Tl;DR Not at all. This was a very interesting read! Thank you. While pondering over it, I noticed that the ns[1234].fastly.net servers are nicely anycasted throughout the globe. If anyone could turn on IPv6 on their authoritatives

Re: IPv6 and CDN's

On second thoughts... I seem to have been confused by the 'no records for fastly.net' (as a DNS-purist: that should have said "ns[1234].fastly.net" instead, to make it relevant). ;-) I ran into this some time ago with deb.debian.org Right. So please ignore: Just for the record;

Re: IPv6 and CDN's

Hi Jens, Op 22-10-21 om 14:03 schreef Jens Link: I ran into this some time ago with deb.debian.org on an IPv6 only Debian VM with a locally installed resolver. I opened a ticket which was closed in record time: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961296 Just for the record;

IPv6 and CDN's

Hi! We currently live in times where is actually fun to go IPv6-only. In my case, as in: running a FreeBSD kernel compiled without the IPv4-stack. A few years back doing such thing was mostly disappointing, but nowadays is actually quite doable and entertaining. So, the other day I decided

Trying to get in touch: ntp.org sites broken

Hello, I'm trying to get in touch with webmas...@ntp.org. But so far without luck. Maybe this route will help. I noticed that quit a number of pages you mention on https://www.ntp.org/ are no longer functioning. Like http://lists.ntp.org/ and http://support.ntp.org/. If anyone knows a way

Re: cloud automation BGP

Op 29-09-20 om 00:08 schreef Randy Bush: > have folk looked at https://github.com/nttgin/BGPalerter Yes. It does the job. And it's easy to install and run. -- Marco

Re: Update to BCP-38?

On 03/10/2019 15:51, Stephen Satchell wrote: > For a start, *add* IPv6 examples in parallel with the IPv4 examples. 1000 times +1 We need (much) more IPv6 examples! -- Marco (pushing for IPv6 examples since 2007 or so like in: https://youtu.be/OLEizGPoB5w?t=30)

Re: any interesting/useful resources available to IPv6 only?

Op 03-05-19 om 17:14 schreef Brian J. Murrell: I wonder if anyone has any references to interesting/useful/otherwise resources on are only available to IPv6 users that they can forward to me. Most of my personals websites are IPv6-only, but they are neither interesting nor useful.

Re: NTP question

Op 02-05-19 om 02:00 schreef Ask Bjørn Hansen: Though, on the topic of unusual requirements there are a bunch of contributors to the NTP Pool using this curious device It continues to surprise me that there is still hardware being sold that doesn't even support IPv6. -- Marco

Re: Purchasing IPv4 space - due diligence homework

Op 04-04-19 om 01:14 schreef Mike Hammett: Do you have sources for the ~90% T-Mobile IPv6? Not arguing, but to use that as a source myself when spreading the IPv6 good word. https://www.worldipv6launch.org/apps/ipv6week/measurement/images/graphs/T-MobileUSA.png

Re: Spectrum residential IPv6 rDNS - thank you !

Op 10-10-18 om 00:42 schreef Brandon Applegate: I’m guessing synthesized. There are a couple of dns servers out there that can do this. An interesting one I just found: https://all-knowing-dns.zekjur.net Or, if you prefer DNSSEC capable alternatives, try:

Re: Buying IPv4 blocks

Op 04-10-18 om 22:07 schreef John Levine: Even if you do have v6, some things like DNSSEC don't work very well if you can't do them over v4. Is that so? -- Marco signature.asc Description: OpenPGP digital signature

Question to Google

Hi, Anyone knows why coogle.com only have IPv4-adresses on their authoritative DNS? https://ip6.nl/#!google.com Are there any plans to fix this? -- Marco smime.p7s Description: S/MIME Cryptographic Signature

Re: DNSSEC and ISPs faking DNS responses

On 13/11/15 23:01, Stephane Bortzmeyer wrote: > On Fri, Nov 13, 2015 at 09:54:28AM +, > a.l.m.bu...@lboro.ac.uk wrote > >> well, in EU I dont think that would ever fly. > > It is done in France, for a long time And it is common practice in Belgium as well.

Re: How to force rapid ipv6 adoption

Op 29-09-15 om 22:37 schreef David Hubbard: > Had an idea the other day; we just need someone with a lot of cash > (google, apple, etc) to buy Netflix and then make all new releases > v6-only for the first 48 hours. I bet my lame Brighthouse and Fios > service would be v6-enabled before the end

Gmail contact?

Hi, Is there anyone on this list that can get me in touch with someone at Google/Gmail? I would like to discuss a suggested improvement with them in regard to RFC-compliance of DKIM/DMARC. Please contact me off-list. Thanks. -- Marco smime.p7s Description: S/MIME Cryptographic

Re: Remember Internet-In-A-Box?

Mark is right and I couldn't agree more with him. On 15/07/15 08:22, Mark Andrews wrote: Yet I can take a Windows XP box. Tell it to enable IPv6 and it just works. Everything that a node needed existed when Windows XP was released. The last 15 years has been waiting for ISP's and CPE

Youtube / IPv6 / Netherlands

Hi, Would anyone from Google care to explain to me off-list why certain Youtube-content is blocked in the Netherlands while using IPv6 when it is working fine via IPv4? Geolocation imperfections perhaps? The IPv6-address is within 2a02:a47f:e000::/36 (actually, it is:

Re: 192.0.1.0/24?

Wasn't (part) of this space assigned to RFC6333? Carrier Grade NAT and stuff... https://tools.ietf.org/html/rfc6333 ? -- Marco manning schreef op 17-04-15 om 22:45: nothing that is authoritative (anymore)… 1996-2000 last century, 192.0.0.0/24 and 192.0.1.0/24 were identified as usable

Re: 192.0.1.0/24?

Marco Davids schreef op 17-04-15 om 23:08: https://tools.ietf.org/html/rfc6333 ? Oh wait, that's 192.0.0.0/29, not 192.0.1.0/24... -- Marco smime.p7s Description: S/MIME-cryptografische ondertekening

Re: 192.0.1.0/24?

Doug Barton schreef op 18-04-15 om 01:52: Harley is correct that 192.0.1/24 is mentioned in 1166, but AFAICS after cursory examination it has fallen through the cracks since then. It has been seen in the wild a few times though (for whatever reason...)

Re: Seeking IPv6 Security Resources

you may have authored and those you have found helpful. Thanks! ~Chris Note: Not every document shared will get posted to the Deploy360 site. -- @ChrisGrundemann http://chrisgrundemann.com -- Marco Davids smime.p7s Description: S/MIME-cryptografische ondertekening

Re: abha ahuja

Op 20-10-13 00:36, Randy Bush schreef: abha ahuja, researcher and operator, died this day in 2001 All these dear people that have passed away... Makes you think about your own mortality, doesn't it? And the list isn't going to get shorter, I am afraid. Kinda depressing... Perhaps we should

Re: DNS Reliability

On 09/13/13 03:53, Larry Sheldon wrote: On 9/12/2013 3:25 PM, Phil Fagan wrote: Its a good point about the anycast; 99.999% should be expected. A small choice of attitude-reflecting language. I expect 100.000% I'll accept 99.999% or better. It depends... define 'lost queries'. For

Re: Open Resolver Problems

in Debian Stable implements this feature, I'll surely turn it on. Regards, Bill Herrin -- William D. Herrin her...@dirtside.com b...@herrin.us 3005 Crane Dr. .. Web: http://bill.herrin.us/ Falls Church, VA 22042-3004 -- Marco Davids smime.p7s

Re: GeoDNS

Op 21-03-13 15:48, kg9020 schreef: Hello Have you tried https://github.com/blblack/gdnsd Or maybe https://github.com/miekg/geodns, if you are into Go. Here it an be seen 'in action': http://dns-status.ntppool.org/# -- Marco smime.p7s Description: S/MIME-cryptografische ondertekening

Google's Public DNS does DNSSEC validation

2ojQtcs9AIMDEtH5+XISuwvPre5hhYkneM6mtUc= ) ;; Query time: 28 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Tue Jan 29 08:03:53 2013 ;; MSG SIZE rcvd: 227 -- Marco Davids smime.p7s Description: S/MIME-cryptografische ondertekening

Re: Big day for IPv6 - 1% native penetration

On 11/26/12 15:53, sth...@nethelp.no wrote: Again, where're the compelling IPv6-only content/apps/services? To answer your rhetorical question, http://www.kame.net/ has a dancing kame. To my knowledge, that's the most compelling IPv6-only content. Don't forget http://loopsofzen.co.uk/ -

DNS issues with tools.ietf.org

Hi, Something seems wrong with the DNS of 'tools.ietf.org'. Can anyone conform? -- Marco

Re: DNS issues with tools.ietf.org

On Wed, 4 Apr 2012, Matt Ryanczak wrote: On 04/04/2012 04:28 PM, Craig Van Tassle wrote: It works for me. works for me too but there do appear to be some problems: And what about this: dig tools.ietf.org @merlot.levkowetz.com. ; DiG 9.7.0-P1 tools.ietf.org @merlot.levkowetz.com. ;;

Re: DNS issues with tools.ietf.org

On Wed, 4 Apr 2012, Stephane Bortzmeyer wrote: And what about this: But two name servers, gamay and shiraz still work. So the domain works Actually it didn't resolve at all. Even an 'unbound-host -v -d' failed. But... things seem to be working fine again, at least to the extend that I

RE: root zone stats

On Sun, 11 Mar 2012, Frank Bulk wrote: Some nice info here, too: http://bgp.he.net/report/dns Nice, but... not 100% up to date? .cw seems to be missing. -- Marco Frank -Original Message- From: Doug Barton [mailto:do...@dougbarton.us] Sent: Saturday, March 10, 2012 5:14 PM Cc:

RE: root zone stats

On Mon, 12 Mar 2012, Marco Davids (Prive) wrote: Some nice info here, too: http://bgp.he.net/report/dns .cw seems to be missing. Oops, it isn't... it's just not wehere I expected it. -- Marco

Paging OpenDNS

Hi, Can someone responsible for 'malware-bl...@opendns.com' please contact me offline? Thank you. -- Marco

DNSSEC on the resolver-side?

Hi, I wonder... How many people here have activated DNSSEC validation on their resolvers? Please let me know off-list when the page below results in a green tick: http://dnssectest.sidn.nl/ Additional details are welcome, like: - The IP-address of the resolver(s) you used (if you know) -

Looking for 'websitewelcome.com' contact

Hi, Could anyone responsible for ns[12].websitewelcome.com please contact me off-list? Or, can anyone give me a good pointer on how to contact the technical staff of websitewelcome.com? Thank you so much, -- Marco Davids