March 2010 - Bird-users - Mailing Lists

Re: Touble ospf md5 authentication
by Ondrej Zajicek 20 Mar '10

20 Mar '10

On Fri, Mar 19, 2010 at 05:52:04PM +0159, Vitaliy Kolodinsky wrote: > > Hmm, it seems that Cisco just sends some trash after the end of OSPF packet. > > Perhaps it would suffice to remove the check in BIRD, but i personally > > don't test this compatibility. > > In area 0.0.0.2 works some Cisco routers, Quagga and experimental > BIRD. Cisco and Quagga work perfectly together. > Cisco at the end of OSPF Hello packet sent LLS Data Block. > Quagga this unit is not sending. > LLS Data Block is mentioned in the IETF RFC 4813 > May participate in the testing. Yes, LLS data blocks in OSPF packets is the cause of the problem. Thank you for a note, i didn't know about RFC 4813. I will look at this issue and send you the patch for BIRD to be able to handle LLS data blocks. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

3 4

Touble ospf md5 authentication
by Vitaliy Kolodinsky 19 Mar '10

19 Mar '10

Dear, bird-users(a)atrey.karlin.mff.cuni.cz. Who has a working BIRD 1.2.1 ospf md5 authentication and Cisco? ---Log File------ Mar 16 17:34:52 vulture2 bird: MyOSPF: OSPF_auth: size mismatch (88 vs 124) Mar 16 17:34:52 vulture2 bird: Bad OSPF packet from 93.125.5.141 - authentification failed ------------------------- ------Configuration----------- protocol ospf MyOSPF { import all; # export all; area 2 { stub no; networks { 93.125.5.128/27; }; interface "vlan200" { priority 0; password "xxxxxx" { id 5; }; authentication cryptographic; }; }; } ------------------------- -- Best regards, Vitaliy Kolodinsky

2 3

ospf md5 authentication
by Vitaliy Kolodinsky 19 Mar '10

19 Mar '10

Spam detection software, running on the system "trubka.network.cz", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Dear, bird-users. Who has a working BIRD 1.2.1 ospf md5 authentication and Cisco? ---Log File------ Mar 16 17:34:52 vulture2 bird: MyOSPF: OSPF_auth: size mismatch (88 vs 124) Mar 16 17:34:52 vulture2 bird: Bad OSPF packet from 93.125.5.141 - authentification failed [...] Content analysis details: (5.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.2 FH_DATE_PAST_20XX The date is grossly in the future. 1.1 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org. 1.4 AWL AWL: From: address is in the auto white-list

1 0

IPv6 Template
by Wolfgang Hennerbichler 19 Mar '10

19 Mar '10

Hi Ondrejs & Fellow BIRD users, I'm currently building the IPv6 Part of our BIRD Configuration Template. I'm trying to build it in the same way as our IPv4 stuff, which is trivial, because I've prepared all the code for a "dual stack" implementation. My question is, what your current best practice is for avoiding martians or unnecessary ipv6 routes (Like the Link Local Range, but I guess there are much more which I currently am not thinking about). Like in IPv4 I have this: prefix set martians; { martians = [ 169.254.0.0/16+, 172.16.0.0/12+, 192.168.0.0/16+, 10.0.0.0/8+, 224.0.0.0/4+, 240.0.0.0/4+ ]; if net.ip = 0.0.0.0 then return false; # Avoid too short and too long prefixes if (net.len < 8) || (net.len > 30) then return false; if net ~ martians then return false; return true; } What is your recommendation for that? Wolfgang PS: I think we have a very decent, awesome and super-automated IPv4 BIRD installation now @VIX, still not running productive, but as soon as IPv6 (and some minor tweaking in the webinterface) is done, we are going to run productive, which will be well before Euro-IX in Brussels. -- www.vix.at | www.aco.net wh(a)univie.ac.at | WH844-RIPE Vienna University Computer Center

4 5

regexp for community
by Makoto 18 Mar '10

18 Mar '10

Hi, I want to use regular expression or another way to filter communities of a range, for example, 65000:[100..200] .Can I do ? are there sample configurations? Regards, Makoto

2 1

bird6 crashing when restarting pipes
by Arnold Nipper 18 Mar '10

18 Mar '10

Hi all, DE-CIX is running BIRD since a couple of days. So far it's behaving almost perfect though it has to carry heavy load ;-) Did anyone see bird6 or bird crashing when restarting pipes? That's what I've seen. rs6-l:~> birdc6 BIRD 1.2.1 ready. bird> restart P13301_unitedcolov6 P13301_unitedcolov6: restarted bird> restart P2914_2914asglobal P2914_2914asglobal: restarted bird> restart P3249_estpak P3249_estpak: restarted bird> restart P3292_tdcnetipv6 <--- here bird6 crashes Connection closed by server. rs6-l:~> restart P4589_easynet6 restart: Command not found. rs6-l:~> restart P8781_qtelset restart: Command not found. rs6-l:~> restart P9031_edpnet restart: Command not found. Logfile says: Feb 28 12:42:59 rs6-l bird: Restarting protocol P13301_unitedcolo Feb 28 12:43:01 rs6-l bird: Restarting protocol P3249_estpak Feb 28 12:43:02 rs6-l bird: Restarting protocol P3292_tdcnet Feb 28 12:43:03 rs6-l bird: Restarting protocol P3549_gblx Feb 28 12:43:05 rs6-l bird: Restarting protocol P8222_netplace Feb 28 12:45:25 rs6-l bird: Restarting protocol P13301_unitedcolov6 Feb 28 12:45:25 rs6-l bird: Restarting protocol P2914_2914asglobal Feb 28 12:45:25 rs6-l bird: Restarting protocol P3249_estpak Feb 28 12:46:21 rs6-l bird: Started <--- restarted manually birdc6 commands were c&p, Best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

5 14

Unknown path attribute BGP.10 [t]
by Arnold Nipper 17 Mar '10

17 Mar '10

What does BGP.10 [t]: 00 02 1a 07 00 00 fa 00 00 02 1a 07 00 00 fd e8 mean? TIA, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

2 1

Expected behaviour?
by Arnold Nipper 14 Mar '10

14 Mar '10

bird> show route where defined(bgp_atomic_aggr) Connection closed by server. I.e. teh daemon crashed :-( I don not yet speak birdisch fluently ;-) I just wanted to convince him to show me all routes which are carrying atomic_aggerates. Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

2 1

log messages
by Arnold Nipper 11 Mar '10

11 Mar '10

I'm running 1.2.1, config is like log "/var/log/bird/bird6.log" all; .... protocol bgp Rxxxx { local as myas; neighbor 2001:7f8::y as xxxx; route limit maxv6; import all; export all; table Txxxxyyyy; password "password"; rs client; missing lladdr ignore; passive on; } Connection did not establish as peer hadn't password set. However as soon as he did session came up. So far, so good. But _why_ do I not see a log message? Best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

3 8

How to decode values from log messages
by Arnold Nipper 10 Mar '10

10 Mar '10

I see Mar 10 11:01:40 rs5-l bird: Rxxxxx: Received: Maximum number of prefixes reached: 00010100007530 How to decode the value 00010100007530? TIA an best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333

3 4