[as112-ops] [IANA #516549] Blackhole servers

Thu Dec 22 22:15:45 UTC 2011

Wow, I couldn't imagine that your network could prefer a server behind my net. Could you provide a show ip bgp or a traceroute ?

I will have a look later on the node at the period you mentioned, and let you know if I see something.

Regards,

Clement Cavadore (hivane)
-- 
Sent from my phone.
Please excuse my brevity or typos. But not both...

"mohammed.el-shakweer at bell.ca" <mohammed.el-shakweer at bell.ca> wrote:

Hello William & Joe;

Thanks for your feedback, the output of the command is as below;

Infoblox > dig @prisoner.iana.org hostname.as112.net txt +short
"Hivane Networks"
"Paris, FR"
"Unicast IP: 193.17.192.194"
"See http://as112.net/ for more information."
"See http://noc.hivane.net/cgi-bin/dsc-grapher.pl for local information."

Best Regards

Mohammed El-Shakweer
Network Specialist
Data Network Services & Support (DNSS)
Bell Canada
200 Bouchard Blvd., 6CS
Dorval, Québec, Canada
Tel: (514) 828-9384
mohammed.el-shakweer at bell.ca
www.bell.ca

Confidentiality warning

-----Original Message-----
From: William F. Maton Sotomayor [mailto:wmaton at ottix.net] 
Sent: December-22-11 4:44 PM
To: El-Shakweer, Mohammed (6038808)
Cc: as112-ops at lists.dns-oarc.net
Subject: Re: [as112-ops] [IANA #516549] Blackhole servers

So as Joe very well deomonstrated, from where you are getting those 
traces, we need to know exactly which AS112 server is the one your network 
is prefering. What does the output of:

	dig @prisoner.iana.org hostname.as112.net txt +short

Give you as a result from where you are getting hte traces?

On Thu, 22 Dec 2011, mohammed.el-shakweer at bell.ca wrote:

> Hello Anand;
>
> Thanks for your response, below is a trace we were seeing, the first blackhole server not responding, and then the 2nd one responding as below;
>
> No. Time Source Destination Protocol Length Info
> 2186 10.757689 10.130.72.21 10.130.201.18 DNS 96 Standard query PTR 210.4.20.172.in-addr.arpa
> 2188 10.758043 10.130.201.18 192.175.48.6 DNS 96 Standard query PTR 210.4.20.172.in-addr.arpa >>>>>>>>>>>>>blackhole-1.iana.org>>>>no response
> 2454 12.793212 10.130.72.21 10.130.201.18 DNS 96 Standard query PTR 210.4.20.172.in-addr.arpa
> 2831 14.793076 10.130.72.21 10.130.201.18 DNS 96 Standard query PTR 210.4.20.172.in-addr.arpa
> 3569 16.793252 10.130.72.21 10.130.201.18 DNS 85 Standard query PTR 210.4.20.172.in-addr.arpa
> 4314 19.993019 10.130.72.21 10.130.201.18 DNS 85 Standard query PTR 210.4.20.172.in-addr.arpa
> 4414 20.758160 10.130.201.18 192.175.48.42 DNS 96 Standard query PTR 210.4.20.172.in-addr.arpa
> 4430 20.812626 192.175.48.42 10.130.201.18 DNS 173 Standard query response, No such name arpa >>>>>>>>>>>>>blackhole-2.iana.org>>>> response
>
>
>
>
> Best Regards
>
>
> Mohammed El-Shakweer
> Network Specialist
> Data Network Services & Support (DNSS)
> Bell Canada
> 200 Bouchard Blvd., 6CS
> Dorval, Québec, Canada
> Tel: (514) 828-9384
> mohammed.el-shakweer at bell.ca
> www.bell.ca
>  
> Confidentiality warning
>
> -----Original Message-----
> From: Anand Buddhdev [mailto:anandb at ripe.net]
> Sent: December-22-11 6:59 AM
> To: El-Shakweer, Mohammed (6038808)
> Cc: iana-questions at iana.org; as112-ops at lists.dns-oarc.net
> Subject: Re: [as112-ops] [IANA #516549] Blackhole servers
>
> On 21/12/2011 23:09, mohammed.el-shakweer at bell.ca wrote:
>
>> Hello AS112-ops;
>>
>> Regarding the blackhole servers, were there any issues in the past
>> 10 days with these servers, as we were having problems getting responses
>> for 172.16.0.0 - 172.31.255.255 private addressing space, sometimes no
>> response or slow response. We realize that we should use an internal
>> blackhole or configure the reverse zones for private addressing internal
>> to avoid slow response from blackhole servers on the internet, which we
>> plan to do soon, but if you can shed some light if there were any issues
>> in the past 10 days that would be highly appreciated.
>
> I believe ISC was testing BIND 10 on their AS112 instance. If you
> happened to see prefixes from them, then you may have had trouble
> getting responses for your queries.
>
> Regards,
>
> Anand Buddhdev
> RIPE NCC
>_____________________________________________

> as112-ops mailing list
> as112-ops at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/as112-ops
>

wfms
_____________________________________________

as112-ops mailing list
as112-ops at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/as112-ops

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/as112-ops/attachments/20111222/fef38914/attachment-0001.htm>