44net

44net@mailman.ampr.org

3198 discussions

Policy around /24 allocations for BGP use
by Donald Gordon 12 Nov '21

12 Nov '21

Hi Does AMPRnet have any policy around allocating /24s to individual hams for the purpose of experimenting with BGP/etc? My local coordinator says this used to be a "yes, but you'd have to be a club not an individual." However I note looking through AMPR allocations there are some in e.g. 44.31 listed as educational/tinkering BGP. Which is what I want to do. Should I be requesting in 44.31 instead of my country's allocation? Regards Donald Gordon (ZL2IP)

10 9

Tunnel setup help: Debian 11
by KUN LIN 12 Nov '21

12 Nov '21

I have been trying to configure the AMPRtunnel for a while without success. Could someone please point me to the right direction. I am running Debian 11 with public IP. I have configured the public IP in the AMPR portal as gateway. I am trying to follow this document https://wiki.ampr.org/wiki/Ubuntu_Linux_Gateway_Example When I try to run find_password.sh in ampr-ripd-2.4, I am stopped at Waiting for RIPv2 broadcasts... and never retrieve a password. Here is what I have done so far. in /etc/network/interfaces, I added auto ens3:1 iface ens3:1 inet static address 44.26.0.168 netmask 255.255.255.248 Then I created ipip tunnel using following commands ip tunnel add ampr0 mode ipip local 209.141.42.9 ttl 255 ip link set dev ampr0 up ifconfig ampr0 multicast ip rule add to 44.0.0.0/8 table 44 priority 44 ip rule add from 44.26.0.168/29 table 44 priority 45 ip route add default dev ampr0 via 169.228.34.84 onlink table 44 ip route add 44.26.0.168/29 dev ens3 table 44 Then, I run ampr-ripd -d -v -i ens3 to get the password in order to plug into lat command ampr-ripd -s -i ampr0 -a 209.141.42.9-t 44 -p <SecretPassword> However, the find_password.sh stopped at waiting for ripv2 broadcast. Here is the logs for command Using metric 0 for routes. Using TCP window 840 for routes. Using gateway 209.141.42.1 for direct 44net endpoints via interface ens3. Waiting for RIPv2 broadcasts... Any idea on what am I doing wrong? Thanks Kun

6 15

Allocations
by Larry Crouch 09 Nov '21

09 Nov '21

1 0

44net and ARIN IRR
by KM6RDV 31 Oct '21

31 Oct '21

Hi, As I have heard, it is not allowed for ARDC to create route objects in ARIN's IRR and for that reason, RADb is used. I am just curious why this is the case? (It seems in general, creating IRR objects is possible via IRR-online [1]) Best, Nick [1] https://www.arin.net/resources/manage/irr/userguide/

2 2

Thank you AMPR and Chris
by KM6RDV 17 Oct '21

17 Oct '21

Hi list, I hope I am not spamming this list; I would like to express my sinciere gratitude to AMPR (everyone who made and makes 44/8 for hams possible) and especially to Chris who helped me a lot in the process for a BGP routable network. Thank you for gifting me an enormous time sink. It was always a dream of mine to connect directly to the "core" of the internet, play around with BGP and, in some ways, completely independent of an ISP. I had given up this dream long time ago until recently my friend told me about AMPR. It's a privilege that hams are given the opportunity to experiment with something that would otherwise be out of reach for hobbyists, similar as radio would be without ham. (while the same with IPv6 is 'somewhat' still accessible, /24 prefixes meanwhile go for 15k and since this is the smallest for anything interesting [BGP, AS], it's just out of reach for experimentation) There are so many exciting things to play with. Subnetting the /24, using /30 or /31 networks for example is something I knew in theory but never really applied in that intensity because with RFC1918, there is no need. BGP I knew in theory but setting up bird and seeing how a session is established, a prefix is announced and watching via looking glass how it propagates through the global interconnected network brings this to a whole new level. I am currently trying to implement a "real" multi homing setup. I have two cheap consumer grade internet links: DSL and 5G. The latter one is CGNAT. Normally there is no way to make anything useful out of this (other than having a manual backup connection). For the first line, I created an ipip tunnel, for the second one a wireguard (due to CGNAT) and connect a third network over them. This network is now accessible straight from the internet on two lines. Exactly as the internet was originally conceived, the packets can now flow on either connection! In next steps I would like to set up OSPF (or maybe iBGP?) and possibly adding more tunnels to create realistic routing networks. And further down, I'd like to see if I can find something interesting to implement anycast. Maybe some spectrum sensing via RTL2832 at two different locations accessible via the same address? Let me know if you have any good ideas. Nick, KM6RDV

1 0

Setting Up JNOS to Postfix Integration For DKIM/SPF Issues
by n2nov＠n2nov.ampr.org 11 Oct '21

11 Oct '21

This may be beyond the scope of some since I mentioned JNOS, but the basics should be the same. I have been running the n2nov.ampr.org JNOS system since the late 90s, but recently any emails that I send to GMAIL and some other services are being rejected. The same happens when any email is sent to me from those same commercial SMTP services. This is all boiling down to the modern SMTP security functions are not part of JNOS. It has been mentioned that I should use the Postfix on the CentOS server that it sits on as it is already servicing various accounts that I maintain for clients and amateur radio groups. If someone else is using this arrangement already, I would like to see how you are doing it and what the limitations are. I believe the Santa Clara group was going to implement something like this a few years ago. Thanks in advance. -- de N2NOV n2nov(a)n2nov.ampr.org n2nov(a)n2nov.#rich.ny.usa.noam

4 3

10Gb/s Gateway Upgrade
by Chris Smith 30 Sep '21

30 Sep '21

The upgrade to a 10Gb/s link to the gateway machine went ahead at 10:30pm last night (UK time), 2:30pm Pacific. I am pleased to report that the upgrade was successful, we also took the opportunity to reboot the machine: previously it has been difficult to reboot the gateway machine as it messed up the switch it was connected to (the switch was configured with mirrored ports for the CAIDA telescope and a reboot stopped it working). The gateway machine is now connected to a different switch and I can reboot it without it causing any detrimental effects. You can see the transition here: http://mrtg.portal.ampr.org 73, Chris - G1FEF — ARDC IT Director Web: https://www.ardc.net

6 5

Sustained DDOS attack
by Chris Smith 28 Sep '21

28 Sep '21

FYI The gateway machine at UCSD has been under a sustained DDOS attack now for over 24 hours, so if anyone is seeing heavy packet loss through the gateway, that’s why. The 1Gb/s interface is max’d out. You can view the interface stats here: http://mrtg.portal.ampr.org 73, Chris - G1FEF — ARDC IT Director Web: https://www.ardc.net

13 20

no route to 44.0.0.1 from Wave Broadband
by Rob Salsgiver 27 Sep '21

27 Sep '21

Greetings all, Looking for a reason why I can't ping 44.0.0.1 from my connection via Wave Broadband. If I VPN to my workplace (Comcast) I can ping it just fine. Wave subnet is 66.235.20.x. Traceroute below. I can get well out from my own network but it seems to die closer to the 44 side. Any ideas? Cheers, Rob Salsgiver - NR3O ---------------------------------------------------------------------------- ---- Tracing route to gw.ampr.org [44.0.0.1] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms 192.168.10.1 2 13 ms 35 ms 15 ms c-66-235-16-1.sea.wa.customer.broadstripe.net [66.235.16.1] 3 23 ms 14 ms 11 ms cr1-duvallhe-a-be150.bb.as11404.net [174.127.182.38] 4 13 ms 11 ms 11 ms ae0.br1-woodinville.bb.as11404.net [174.127.141.30] 5 17 ms 14 ms 12 ms be10.cr1-bds.bb.as11404.net [174.127.137.176] 6 25 ms 11 ms 13 ms hu0-5-0-20-0.cr2-sea-b.bb.as11404.net [174.127.148.136] 7 32 ms 34 ms 35 ms hu0-2-0-4.cr1-529bryant.bb.as11404.net [192.175.28.236] 8 35 ms 33 ms 33 ms cr3-529bryant-be13.bb.as11404.net [192.175.30.57] 9 32 ms 39 ms 32 ms be12.cr6-scl.bb.as11404.net [192.175.29.225] 10 57 ms 35 ms 36 ms be11.cr2-scl.bb.as11404.net [192.175.30.44] 11 32 ms 40 ms 35 ms be2.cr1-scl.bb.as11404.net [192.175.29.51] 12 48 ms 41 ms 34 ms be3.cr2-losangeles-b.bb.as11404.net [192.175.29.173] 13 35 ms 43 ms 41 ms be6.cr1-losangeles.bb.as11404.net [65.50.198.35] 14 39 ms 41 ms 39 ms cenic.laap.net [198.32.146.32] 15 49 ms 42 ms 89 ms dc-lax-agg8--lax-agg10-300g.cenic.net [137.164.11.71] 16 55 ms 41 ms 42 ms dc-tus-agg8--lax-agg8-300g.cenic.net [137.164.11.83] 17 42 ms 42 ms 43 ms dc-sdg-agg4--tus-agg8-300g.cenic.net [137.164.11.85] 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete.

1 0

Re: [44net] Sustained DDOS attack (Matt - VK2FLY)
by lleachii＠aol.com 27 Sep '21

27 Sep '21

All, I see a slight increase in traffic inbound toward my /24 at my tunl0 interface (0.6 kbps to 1.1 kbps) - most still appearing to be blocked by my firewall. From netflow data, the majority of this traffic appears to be: TCP, GRE and pings. 73, - Lynwood KB3VWG

1 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net