james | 2 Jun 2006 21:33

Outdated bogon filtering seems pervasive..

Hi,

It seems reachability of new 26xx:: blocks seems to be quite low as opposed to
plain old 2001:: blocks.  Are many people still running on outdated bogon
filters?  I contacted some ASes that can't reach 2610:: block, and the ones
that have responded and working on a fix so far all have outdated bogon filters.

GRH prefix compare:
http://www.sixxs.net/tools/grh/compare/?when=now&year=2006&month=06&day=02&hour=21&a=+2001%3A13f0%3A%3A%2F32&b=2610%3A78%3A%3A%2F32&i=&format=html

sorry for long url, if you prefer text output:

8<--
grh.sixxs.net> s b 2001:13f0::/32
BGP routing table entry for 2001:13f0::/32
Paths: (76 available, best #55, table Default-IP-Routing-Table)
-->8

vs.

8<--
grh.sixxs.net> s b 2610:78::/32
BGP routing table entry for 2610:78::/32
Paths: (46 available, best #36, table Default-IP-Routing-Table)
-->8

I don't know how many of you have blocks out of the new 26** or 2A** range, but
for those who do have, are you seeing similar reachability problems too?

Thank you,
(Continue reading)

Iljitsch van Beijnum | 2 Jun 2006 23:29
Favicon

Re: Outdated bogon filtering seems pervasive..

On 2-jun-2006, at 21:33, james <at> towardex.com wrote:

> Are many people still running on outdated bogon filters?

Say it isn't so...

> I don't know how many of you have blocks out of the new 26** or  
> 2A** range, but
> for those who do have, are you seeing similar reachability problems  
> too?

Can't help you there, still on 3ffe:: for now, but I'm guessing I'll  
have some bogon issues of my own with that soon.  :-)

Maybe you could post a name or address that we can ping and/or  
traceroute to see whether filters get in the way?

James Jun | 2 Jun 2006 23:45

RE: Outdated bogon filtering seems pervasive..

[ .. snip .. ]

> 
> > I don't know how many of you have blocks out of the new 26** or
> > 2A** range, but
> > for those who do have, are you seeing similar reachability problems
> > too?
> 
> Can't help you there, still on 3ffe:: for now, but I'm guessing I'll
> have some bogon issues of my own with that soon.  :-)
> 
> Maybe you could post a name or address that we can ping and/or
> traceroute to see whether filters get in the way?

Yea, sorry I should've in my first email..

2610:78:f::1 is an IP that's affected.

A couple people emailed me off-list and confirmed they fixed their side --
many thanks for responding so quickly!

james

Nick Hilliard | 3 Jun 2006 00:16
Picon

Re: Outdated bogon filtering seems pervasive..

On Fri, 2006-06-02 at 23:29 +0200, Iljitsch van Beijnum wrote:
> Can't help you there, still on 3ffe:: for now

Oh my!  3 days to "we don't support that sort of thing any longer".

I'd be interested to hear about the quality of your v6 connectivity on
June 7.  

Please let us know.

Nick

bmanning | 3 Jun 2006 00:17

Re: Outdated bogon filtering seems pervasive..


	we'll still talk to him... :)

--bill

On Fri, Jun 02, 2006 at 11:16:41PM +0100, Nick Hilliard wrote:
> On Fri, 2006-06-02 at 23:29 +0200, Iljitsch van Beijnum wrote:
> > Can't help you there, still on 3ffe:: for now
> 
> Oh my!  3 days to "we don't support that sort of thing any longer".
> 
> I'd be interested to hear about the quality of your v6 connectivity on
> June 7.  
> 
> Please let us know.
> 
> Nick
> 

Iljitsch van Beijnum | 3 Jun 2006 00:34
Favicon

Re: Outdated bogon filtering seems pervasive..

On 3-jun-2006, at 0:17, bmanning <at> vacation.karoshi.com wrote:

> 	we'll still talk to him... :)

SOMEBODY is still talking to me:

traceroute6 to 2610:78:f::1 (2610:78:f::1) from 3ffe:2500:310:4::1,  
64 hops max, 12 byte packets
1  3ffe:2500:310:4::2  13.751 ms  15.397 ms  15.098 ms
2  2001:1af8:2:6::1  16.076 ms  14.257 ms  16.469 ms
3  2001:1af8:1:195:20e:39ff:fe3c:2aaa  159.392 ms  205.658 ms   
233.981 ms
4  eth0-0-7.6b2.ams7.alter.net  11.956 ms  15.008 ms  16.956 ms
5  tu2.6B1.LND6.ALTER.NET  22.470 ms  24.144 ms  20.593 ms
6  uunet12702.lnd.OCCAID.org  23.220 ms  24.558 ms  24.967 ms
7  52.ge0-0.cr2.lhr1.uk.occaid.net  26.967 ms  24.526 ms  24.717 ms
8  v3323-mpd.cr1.ewr1.us.occaid.net  98.926 ms  100.741 ms  102.171 ms
9  unassigned.ar1.yeg1.ca.occaid.net  155.021 ms  150.584 ms  152.897 ms
10  ipv6.tera-byte.com  151.521 ms  156.950 ms  150.639 ms

I'm glad to see my upstreams don't have broken bogon filters.

I would have hoped that people who are enlightened enough to run IPv6  
would also know that you should either keep your bogon filters up to  
date or don't have any in the first place, but I guess that was too  
much to expect.

You can see what happens with my 6bone connectivity by pinging/ 
tracerouting 6bone.muada.com, by the way. I'll be interested to see  
whether UUNET/MCI/Worldcom/Alter.net makes good on its promise to  
(Continue reading)

Jeroen Massar | 6 Jun 2006 00:48
Favicon
Gravatar

6/6/6 06:06:06 - Farewell 6bone

Dear 6bone,

On this sad date of 6/6/6 when the clock has struck 00:00 in most
countries on the European continent, it is time for your demise. When
the clock strikes 06:06:06 here it will also be 6/6/6 in the US and thus
globally the final hours will have chimed in.

At the moment of writing this sad letter I also have to conclude that
some people didn't abide by the 6bone rules, even though the clock has
chimed into the phaseout day, still 57 of the 144 assigned networks are
announcing 6bone space, another 52 didn't even take the small moment of
time to return the prefix to the registry when they where asked to, they
clearly didn't read the mailinglist either nor where they subscribed.
It is too bad that your demise seems to have been also on a note of
neglect and due to people who initially wanted to use you for
experimentation and advance based on what they learned from you, they
forgot all about you. We will not forget you and abandon you in disgrace
as that is not what you have deserved.

We will remember the 6bone as the start of the IPv6 capable internet,
the network that was used to experiment with, where the first IPv6
implementations saw it's light and where a large number of problems
where found, debugged and resolved. We will remember you as the network
that started the freedom of having enough IP addresses for everybody
around the world and maybe even one day beyond.

Thanks for your kindness and thanks for your time. Let the 6bone rest in
piece and not in pieces and apply filters where needed. Results of
filtering can be seen at:
http://www.sixxs.net/tools/grh/dfp/6bone/
(Continue reading)

JORDI PALET MARTINEZ | 6 Jun 2006 01:39
Picon

The IPv6 Day: Bye 6Bone. Hi, IPv6 !

Today 6Bone Operators & Users say bye to the experimental network which
allowed, already some years ago, to turn IPv6 into the production space.

With the occasion of this virtual celebration, we have a couple of quotes
from two key people on this subject:

* Bob Fink (6Bone Project): ³After more than ten years of planning,
development and experience with IPv6, with efforts from all around the
world, it is gratifying for me to see the 6Bone phase-out on the 6th of June
2006, having served it's purpose to stimulate IPv6 deployment and
experience, leaving IPv6 a healthy ongoing component of the future of the
Internet!²

* Brian Carpenter (IBM, co-author of multiple IPv6 RFCs and IETF chair):
³It's very encouraging to see IPv6 moving forward both technically and
commercially, with its address assignments now routinely managed by the same
registries that look after the rapidly diminishing IPv4 address pool. I look
forward to the day the Internet reaches ten billion active nodes with public
addresses, which will only be possible with IPv6.²

Users can learn how to enable IPv6, enjoy free IPv6 production connectivity
and use some trial services at the IPv6 Day web site
(http://www.ipv6day.org) (in several languages).

http://www.ipv6tf.org/news/newsroom.php?id=2037

**********************************************
The IPv6 Portal: http://www.ipv6tf.org

Barcelona 2005 Global IPv6 Summit
(Continue reading)

Tim Chown | 6 Jun 2006 11:43
Picon
Favicon

Re: The IPv6 Day: Bye 6Bone. Hi, IPv6 !

On Tue, Jun 06, 2006 at 01:39:39AM +0200, JORDI PALET MARTINEZ wrote:
> 
> Users can learn how to enable IPv6, enjoy free IPv6 production connectivity
> and use some trial services at the IPv6 Day web site
> (http://www.ipv6day.org) (in several languages).

Hmm, 'production' connectivity using 'trial' services? :)

--
Tim/::1

David Malone | 6 Jun 2006 11:55
Picon
Picon
Favicon

Whois Referral Service

For IPv4 address blocks the ARIN server usually gives a whois
referral to a server that actually knows about the block. However,
the ARIN server doesn't seem to provide this service for IPv6 address
blocks.  Does anyone run a whois server that does this?

	David.


Gmane