e community needs
to start.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
signature.asc
Description: OpenPGP digital signature
tangent
> then there's no need for a different subject line.
I think it's quite unreasonable to expect others to compensate for an MUA
which doesn't implement 25+ year old standards properly.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
to threads properly, inline and trimming non
relevant text, it would make following discussion much easier.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
to talk to, and things will
still work.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 10/27/23 7:49 AM, John Levine wrote:
But for obvious good reasons,
the vast majority of their customers don't
I'd argue that as a service provider deliberately messing with DNS is an
obvious bad thing. They're there to deliver packets.
--
Bryan Fields
727-409-1194 - Voice
http
han first reported.
Is there a link where this can be looked up? I've not seen anything on
their website <https://www.mimecast.com>.
If you're going to quote me, please don't alter what I wrote, and please
trim the relevant parts of it.
Thanks,
- --
Bryan Fields
727-409-1194 - Voice
http://
On 10/25/23 4:58 PM, Compton, Rich A wrote:
> Charter uses threat intel from Akamai to block certain "malicious" domains.
Does charter do this on signed domains too?
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
in the original email. Where did you see
this?
bonesinjars.com is not signed with DNSSEC. This is trivial to setup and might
prevent some of this.
Probably not a good idea for your customers to rely on $BIGCABLE DNS servers.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 10/2/23 11:28 AM, Mel Beckman wrote:
I believe they got the contact information from ARIN
I'd suggest everyone use an alias unique to ARIN for your POC and/or public
email. Makes it super simple to verify where it was sourced from.
(and yes I've got the same spam)
--
Bryan Fields
727
On 9/14/23 2:12 PM, Bryan Fields wrote:
On 9/14/23 1:35 PM, Chris Adams wrote:
While wondering at high spam scores for NANOG mail, I noticed that it's
in part because of broken reverse DNS for mail.nanog.org's IPv6 address.
The address is 2001:1838:2001:8::20, with reverse delegated to
ns1
... but those hostnames don't
resolve. The auth servers for scservers.com return SERVFAIL.
Thanks,
It's being looked at now. I'll updated once it's fixed.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 9/13/23 9:27 PM, Bryan Fields wrote:
> I think this qualifies as potentially operational.
>
> Afrinic placed in receivership, board elections to be held in six months:
> https://archive.ph/jOFE4
Looks like archive.ph is having problems. This is the original artic
I think this qualifies as potentially operational.
Afrinic placed in receivership, board elections to be held in six months:
https://archive.ph/jOFE4
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 9/13/23 8:47 PM, Michael Thomas wrote:
utilities weaponizing their monopoly status to the whims of any
random narcissist billionaire
https://www.youtube.com/watch?v=qDC3LYfHRGg
Basically this?
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
her MLMs.
I'd love to kill this spam, but the openness of the email discussion list
format makes it hard to do. If anyone has ideas on how we can kill this I'd
love to shut it down.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ate you'll see a number of threads talking about the 70k BGP
table size (lol). It's a fun read to see where we've come from in 26 years.
https://mailman.nanog.org/pipermail/nanog/1997-October/date.html#123950
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-netflow?
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
his? I gave a subnet config to my customer of
255.255.255.254 and it wouldn't take it. I reconfigured it to a /30 (.252)
and it worked for them. This was a on a RB2011 about 3 months ago.
I search at the time showed it was a know issue. We laughed about it and
moved on.
--
Bryan Fields
make it
> mandatory.
Mikrotik still doesn't support /31 addressing. I had a customer who was
configuring their "router" the other day and we found this out. Has to move
to a /30 on the link.
He's in Africa, and I'm 100% certain Mikrotik is a go to customer router
there. There's people p
On 8/5/22 11:16 AM, Justin Wilson (Lists) wrote:
> I have a network that is all Mikrotik and the route targets are messing with
> them.
Can you describe this a bit more? I'd like to add it to my list of stuff
broken on mikrotik.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 8/2/22 8:46 PM, Chris Adams via NANOG wrote:
> Once upon a time, Bryan Fields said:
>> The list is configured to wrap anyone posting from a domain with a with a
>> DMARC Reject/Quarantine Policy (dmarc_moderation_action). If you don't have
>> this set on your domain, t
ction). If you don't have
this set on your domain, the list will not wrap your message (which is the
correct behavior as it breaks other things).
Hit up the admin team and we'll look at it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
signature.asc
Description: OpenPGP digital signature
on of "qualified engineer". This means it is not
defined in that part, and leaves it open to interpretation.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
the nanog
listserver or it's network.
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE-
iQIzBAEBCAAdFiEEaESdNosUjpjcN/JhYTmgYVLGkUAFAmKzURkACgkQYTmgYVLG
kUCQ3Q//YWCbiNAw7eAz0cvx771vHf//bZL31XDzNqAFyS6xAqYW5Tj
2Fpipermail%2Fnanog%2F+routing+registry+internic
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
C-822 copies of the messages. I believe that you could then
> reply to these individual messages directly and match the threading that
> I mentioned above.
I confirm this would work for the nanog list.
IMHO, digest is not the right mode to subscribe if you intend to post replies
to the list.
--
Bry
On 3/10/22 3:44 PM, Josh Luthman wrote:
> In my rural market, we're the only option for service, simple
> as that.
We don't care, we don't have to; we're the phone company.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
service."
But Tier 1's don't pay for peering.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
apable of being altruistic.
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE-
iQIzBAEBCAAdFiEEaESdNosUjpjcN/JhYTmgYVLGkUAFAmIft/QACgkQYTmgYVLG
kUDXfA//UX9SGTIeVjb2nVkoEAnACjUVTwYlgBp6JEKWlgSOrXRRu5KFU+sgOVnh
nPvOaWh94z/Yw3j/3z5i+7UaTt0tWvaq8ZKI9lCFx3mY1q0gvgl
registrations.
I would ask what of .ly used for various URL shorteners, and .kp or .cn? All
these are representing evil countries too, why do they get a pass. I'm
certain they would argue .us should be revoked for the same.
This would break connectivity, and that's a bad thing.
- --
Bryan Fields
On 1/19/22 10:33 PM, Jay Hennigan wrote:
> On 1/19/22 18:31, Bryan Fields wrote:
>> The narrower the filter is,
>> the higher the loss is. The greater the stopband attenuation is, the more
>> elements required and more ripple is present in the pass band. Now gr
t would have
dramatically limited GPS performance.
The issue here is that Lightsquared was too small. The establishment wireless
carriers know that commissioners don't work at the FCC for life, and have paid
lobbyists crawling all over capital hill.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
like a good policy, 6.3 seems to cover how to fix technical issues with
a root operator.
> It’s a hard question, but it isn't the folks at IANA who answer it.
Who does? Doesn't IANA designate root servers and the . zone?
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ame AD/HVDC supply.
I like DC, it's much simpler, but it's a lower volume product. One advantage
to AC is I can call any electrocution and they can run a cable in a pinch for
me. DC, even though it's the same physics, is harder to find experienced tech
to work with.
--
Bryan Fields
727-409
nectivity problem for me.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
is IP
scarcity. They have plenty of v4 space, so this allows them to charge for it.
v6 isn't going to make them any more money as they can't charge for it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ered outside of the datacenter.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
p
Vertical integration is a hell of a thing.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
et it sit for
5-10 minutes the leakage resistance will dissipate the charge in any typical
capacitor.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 8/27/21 6:38 PM, Bill Woodcock wrote:
>
>
>> On Aug 27, 2021, at 10:07 PM, Bryan Fields wrote:
>> I’d expect that for a court to freeze assets of AFRINIC there must be a very
>> strong argument.
>
> You know what’s funny? There are a bunch of other people co
xpect the bar for such and
ex-parte order to be high.
I'm not familiar with the Mauritius legal system; I do know it's some
combination of common law and french law, but it's generally stable/impartial
for business law. What we really need is a groklaw-type that could take this
up.
--
Bry
he
> chose to make such a non-policy post to PPML, we felt that our posting of
> the rebuttal here was justified.
>
> Unless Mr. Curran or other ARIN staff member(s) choose to further engage on
> this topic here, this will be our only post on the matter to this list. We
> would a
On 7/20/21 10:01 AM, Michael Loftis wrote:
> My apologies to everyone using an HTML mail client.
No reason to apologize for that. If someone is careless enough to use an HTML
client on a mailing list, they deserve what they get :-D
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
that reverse zone has DNSSEC on it. You'd need a DS record to tie
my-DNS-server-1. to the ATT DNS server and your server would need to support
DNSSEC. ATT may want to enforce DNSSEC on that zone, but not want to sign
stuff they can't control.
Just playing devils advocate.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
in terms of software in use. Almost all
SMTP/IMAP/POP servers are open source, and could be anything from sendmail 8
to postfix. If you're capping it, just run what's in place and learn it, I'd
think most people in networking have configured apache once or twice before.
--
Bryan Fields
727-409-119
y not just cap it until it becomes unprofitable?
I'm a proponent of hosting my own email, it's not that hard and any ISP should
be able to do it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
o have a part 15 certification with the FCC, this
would then open up network operators to being fined for every device they
still have in operation.
https://www.fcc.gov/supplychain/coveredlist
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
power to low levels.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
a formal complaint over what I'm sure is an out-of-character email.
FWIW, I found this of great interest. The existence of overly broad patents
such as this harms the entire operator community and internet in general.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
d some searching, but can't find this easily on their website.
Maybe John can confirm this.
I don't this this is nefarious at all. If there's a contract for this, a FOIA
request is likely in order.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 4/16/21 1:33 AM, Saku Ytti wrote:
> https://www.markleygroup.com/cloud/network/out-of-band
Wow, this is an impressive offering. I wish more providers would do this.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
domain with a DMARC Reject/Quarantine Policy.
It's set to Munge From.
So if your domain had a reject policy on DMARC, nanog will munge the from:
header to be 'Your Name via NANOG'.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ng for DMARC domains that are p=reject.
This is another reason why DMARC is a shitty solution.
NANOG will rewrite the From: as well in this case.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
cking people in, decentralisation and fedaration
"If you want a vision of the future, imagine a boot stamping on a human face -
forever."
:-)
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
t; ways.
>
> My wife's office just lost all connectivity and they received a status
> notification from Cox Communications.
>
> While checking the company's twitter for any status announcements, Cox
> had posted the following webinar just an hour ago.
I don't get it.
- --
Bryan
e number of groups.
Cancer. There's nothing but an echo chamber in facebook.
Taking time to compose thoughts in email elevates discourse. Top posting "me
too" to a forum destroys it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
p moderation on the mailing list, this
is generally not possible. The other advantage to a list is you can sign your
messages to prevent these sorts of shenanigans.
Simply put, if the option is there, it will be used.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 3/20/21 2:06 PM, Randy Bush wrote:
> i do not find the volume or diversity on the nanog list problematic.
> in fact, i suspect its diversity and openness are major factors in
> it being the de facto global anything-ops list. perhaps we do not
> need to fix that.
+1
--
Bryan Fie
On 1/20/21 12:52 PM, John Curran wrote:
> On 20 Jan 2021, at 12:17 PM, Bryan Fields
> mailto:br...@bryanfields.net>> wrote:
>>
>> AFAIK IANA and the RIR's cannot enforce use of IP space assignments on any
>> network.
>
> While route hijacking isn't ne
e global Internet. IIRC, here was some
VPN provider using 5/8 before that was assigned.
AFAIK IANA and the RIR's cannot enforce use of IP space assignments on any
network.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ypted on the server, and the admin can see all. If
you want it secure, you have to run gpg and encrypt the body.
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE-
iQIzBAEBCAAdFiEEaESdNosUjpjcN/JhYTmgYVLGkUAFAmABtBgACgkQYTmgYVLG
kUBjBQ/+McM45Kab7Ydmze
cluding headers immediately. We can then cross check it against new
signups. I wish there was a more scientific way to process it.
Thanks,
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
et these headers and is basically
impossible to use on any standard mailing lists for this and other reasons. I
use Thunderbird and mutt, both support this threaded format.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ld the customer "any contract is voidable at any time". Basic planning
for any company should ensure you never have all your eggs in one basket.
Perhaps this was a bit dumb on the customers part, but they had a contract.
The cloud is just someone else's computer..
--
Bryan Fields
. Anyone
can roll their own router for cheap, but that's a science experiment. It's
akin to a WISP in 1998 running karlnet on a pc with wi-lan cards. Sure you
can do it, but there's no one to support it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
o drop 1-2k on routing gear and
nics. This is always changing, but it's going to be a few years until we
reach the right performance and price point.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
across the country to get across the room. Latency is down to the
historical averages, and we're no longer having throughput issues.
I'm a paying business customer (125/mo for 20/2 mbit connection), so I'm going
to bitch to high hell when it's impacting my business.
Thanks to everyone who reached out,
--
. This is between routers both in TAMSFLDE.
Support has said this is "normal" and refused to escalate it. Some quick
testing with RIPE Atlas probes shows it's the same across 33363.
Thanks,
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Looks like this recent spammer has been removed from the list. They were
moderated, and using the email address From: or known users.
Thanks,
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE
ows what to look for to kill this when it happens.
Forward the entire email including _FULL_HEADERS_ to ge...@nanog.org. We
will kill it and ban them from the list.
Thanks,
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
signature.asc
Description: OpenPGP digital signature
On 6/20/20 6:42 PM, Bryan Fields wrote:
> On 6/20/20 5:33 PM, Tim Pozar wrote:
>> Looks like a spammer is harvesting email addresses from the NANOG list. i
>> I will be unscribing as I don't need this additional noise in my mailbox.
>
> Do you have the full headers of these
On 6/20/20 5:33 PM, Tim Pozar wrote:
> Looks like a spammer is harvesting email addresses from the NANOG list. i
> I will be unscribing as I don't need this additional noise in my mailbox.
Do you have the full headers of these emails? Please send them along if you do.
--
Bryan Fields
7
60 ms across town as spectrum
wants takes TPA-ATL-DCA-DEN-NY to get to my rack. :-)
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
geeks
with it. It's my understanding this is prior to NANOG being a group under
Merit, and I'm unsure of the history or how any of the lists were handled at
that time, or what software was used.
Thanks,
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIG
ociate a MAC with a bridge MAC. This
means we can isolate problem MAC's on an AP level, but then have to dig into
the FDB of each individual node on that AP.
These aren't ideal, but at the price point, we put up with the issues. :)
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ode. Not sure I want to run beta in a quasi-production network.
Thanks,
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE-
iQIzBAEBCAAdFiEEaESdNosUjpjcN/JhYTmgYVLGkUAFAl7qYXkACgkQYTmgYVLG
kUA5Lg/+OZnB5Kbo6rthl1xxTLfIwP+A3hAHGJgT5v+W4kbCqXpZzZM0nDL/v7gE
6?* Punt it to the CPU and let it
fall over at 1000 pps, right?
I may have overstated the performance of that, but at the time we didn't care,
99.9% of all IPv6 was ping and traceroute. When it becomes the preferred
delivery network for content, a software based router isn't going to cut it.
--
Bryan Fi
you might be able
to roll this yourself.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 5/7/20 5:54 PM, Brandon Jackson via NANOG wrote:
> I have seen (Charter) and heard quite a few run RIP or some other routing
> protocol on the CPE.
Yep, it's RIP. They don't support IPv6 on this either. I've been asking for
IPv6 since 2006, it's always next year.
--
Bryan Fields
7
a reset. Issue was immediate to the cable being inserted. No idea
> if this was patched or not.
Did you contact the vendor and did they commit to a fix? I can't imagine a
vendor not wanting to fix an easily reproducible bug such as this.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ase. I'd be willing to talk off list if anyone
wants details on how to configure and test it.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 4/21/20 6:28 PM, Bryan Fields wrote:
> On 4/21/20 5:11 PM, William Herrin wrote:
>> Howdy,,
>>
>> How do we contact the nanog mail admins? I looked at
>> https://archive.nanog.org/list and https://archive.nanog.org/list/faq
>> but apparently someone tho
one time I actually interacted with
them, I just emailed Matt Griswold, but that was years ago.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 4/16/20 4:48 PM, Ben Cannon wrote:
> Side note: What you describe is in-fact part of how languages change and
> evolve. (over time, sufficiently common incorrect use becomes. well.
> correct.)
Top posting will never be correct, even if the entire world does it.
:-)
--
Bryan Fi
ere.
Hurricane Electric even baked them a cake, yet they still wont peer.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
For following up, their IPadmin team (person) did reach out and resolve this
asap for us.
Thanks!
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
entries from the 2000's and Genuity
entries that became part of it. This was a failure, the NOC knew nothing
about it, and worse didn't get my black rocket jokes. No one working there
knew what Genuity was.
I gave up.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ng reason it had to be done right now.
Based on my personal discussion with Brian Kantor in 2014, he was 100% against
selling, or even leasing it as he stated ARDC merely was the custodian of the
space for amateur use. I can't think what changed, other than his employment
situation.
"They drove a dump-truck full of money up to my house, I'm not made of stone!"
-- Herschel Krustofsky
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 8/5/19 4:57 PM, b...@theworld.com wrote:
> TBH some of this is like watching someone try to set up a router using
> only the marketing brochures.
Hey, I got my Network+ too. dafuq is a "BGP"?
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
On 8/5/19 11:15 AM, Mel Beckman wrote:
> Keith, what could be more on-topic than an ISP’s status as a common
> carrier? Seems pretty operational to me.
Mel gets to decide what's on topic and off topic for the nanog list?
:D
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
little anyone can do against this sort
of actor, and it is why it's so terrifying. I certainly don't have a solution
to it, but can say censorship is not the answer.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
tes from 44.24.245.2#53(44.24.245.2) in 99 ms
Someone, anyone, want to get this fixed?
The road to hell is paved in good intentions.
Hey mama, look at me, I'm on my way to the promised land, whoo!
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ied by ARIN deeming the matter a private
> transaction between it and the alleged registrants to which the pubic is
> not entitled to a detailed accounting.
You know what they say about good intentions.
https://imgflip.com/i/362r0m
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
urce. There has been no communication from them until now.
>From an operational standpoint, RDNS for many subnets is still broken.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
e done fuck all for ARDC for years, actively held back deployment of
44net for the better part of 20 years, and now you orchestrate this backroom
deal.
You and Phil have proven how corrupt you are. Do the honorable thing and
resign. Phil too.
For shame.
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
ource as far back as 2001, when we
couldn't even be blessed to get 44net space for our own legitimate radio use.
I'm sure I have the message from Brian denying it in my archives.
- --
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
-BEGIN PGP SIGNATURE-
iQIzBAEBCAAdFiEEa
the community it was meant to serve.
--
Bryan Fields, W9CR
Former ARDC TAC member
727-409-1194 - Voice
http://bryanfields.net
e there's arguments for and against it,
it's what he wants to buy :)
That said, I'm one of those guys that likes owing my own hypervisor, don't
need to worry about the side channel/memory/OOO execution attacks from rogue
VM's if it's only my VM's on it. Plus AWS ain't cheap either.
--
Bryan Fi
On 5/7/19 3:39 PM, Mark Seiden wrote:
> excellent! (but i was hoping this would be a swamp-draining-by-vaporization
> exercise.)
the matador...the matador... the matador!
--
Bryan Fields
727-409-1194 - Voice
http://bryanfields.net
1 - 100 of 166 matches
Mail list logo
