January 1998 - NANOG - lists.nanog.org

Re: Denial of Service Attacks disguised as Spam...
by dlr＠bungi.com 05 Jan '98

05 Jan '98

[In the message entitled "Denial of Service Attacks disguised as Spam..." on Dec 31, 15:30, Barry Shein writes:] > > We're being fooled, we're allowing criminals to operate without > challenge. > Not entirely without challenge. See http://maps.vix.com/rbl/ -- Dave Rand dlr(a)bungi.com http://www.bungi.com

1 0

NOC phone number
by Richard Welty 05 Jan '98

05 Jan '98

not that anyone is likely to have a burning need for it just yet, but for the general information of nanog subscribers, here is the phone number for INet Solution's NOC: 518-432-4638 x1204 (my extension is x1202) richard -- Richard Welty Chief Internet Engineer, INet Solutions welty(a)inet-solutions.net http://www.inet-solutions.net/~welty/ 888-311-INET

1 0

FYI: BGP Security Analysis
by rja＠corp.home.net 05 Jan '98

05 Jan '98

Folks interested in Paul Vixie's recent thread (and others interested in inter-domain routing) should read: ftp://ds.internic.net/internet-drafts/draft-murphy-bgp-secr-00.txt which is a preliminary security analysis of BGP. It is also useful for folks to read draft-heffernan-* and to actually deploy the TCP MD5 Authentication option for BGP sessions (to protect against low-level attacks, not as protection for bogus prefix advertisements from otherwise legitimate BGP peers). Apologies for posting content onto NANOG and disturbing the usual noise. Ran rja(a)home.net

1 0

Re: Three common lies
by Sean M. Doran 05 Jan '98

05 Jan '98

(4) NANOG is a high-content technical mailing list for Internet operators. Sean.

1 0

Three common lies
by Hank Nussbacher 05 Jan '98

05 Jan '98

This appeared recently on rec.humor and I figured some people here would enjoy it: (1) The check is in the mail (2) I promise not to come in your mouth (3) For automatic removal from our emailing list, type "remove" in the subject box and email it back to us Cheers, Hank

1 0

Give Your Child "One of the Best Children's Videos""
by Zf1818WiI＠worktow1est.com 04 Jan '98

04 Jan '98

The holidays are upon us. If you're like a lot of people, you struggle to find gifts for your children that will entertain and amuse them at the same time. Well, here's a gift that will delight your child - A Is For Airplane! "A Is For Airplane" is the award-winning educational video that shows kids all the fun and teamwork involved in running an airline. "A Is For Airplane" gets viewers behind the scenes at the airport! Kids get to see: * The ticket counter! * Inside the baggage system! * On the ramp with the baggage loaders and fuelers! * In the catering kitchens! * Inside the control tower! * In the hangar with the mechanics! * At the boarding gate! * And even in the COCKPIT of a real Boeing 757! Parenting Magazine calls "A Is For Airplane" "One of the Best Videos of 1996!" It's also Approved by the Parent's Choice Foundation! Thousands of copies of "A Is For Airplane" have been sold for $14.95, but as an Internet Special this holiday season you can get "A Is For Airplane" for only $11.95 (plus shipping and handling.) ORDER TODAY FOR GUARANTEED HOLIDAY DELIVERY! You can order "A Is For Airplane" by calling our toll-free number - 800-250-4210. If you'd like more information, visit our Website at www.ppmm.com/jfp/jfp1297.htm or CLICK HERE! Thank you for your time... Johnson Family Productions Madison, WI

1 0

aggregation tool
by Jared Mauch 02 Jan '98

02 Jan '98

How many backbone NSP's would use a bgp aggreation tool that was setup similar to the route-views.oregon-ix.net or route-server.cerf.net that you would be able to do queries on to say "what might I not be aggregating correctly?" I'm working on such a tool that would be able to speak eBGP to a router (multihop or otherwise) and give this information. I've noticed a few providers that have /16's that announce each specific /24 or almost each one also, this would also make it possible to generate lists of folks that clog the routing table. I've sent e-mail to some of these folks today... Please direct responses directly to me if you're interested, or if you have something useful on this topic for *everyone* on nanog, include them also. - Jared -- ----------------- jared(a)puck.nether.net - Nether Network ------------------ CICNet/IAGNet/QUALnet/NetherNet - finger jared(a)puck.nether.net for pgp key

1 0

The Cidr Report
by Tony Bates 02 Jan '98

02 Jan '98

This is an auto-generated mail on Fri Jan 2 12:00:00 PST 1998 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 02Jan98 0) General Status Table History ------------- Date Prefixes 261297 47433 271297 47424 281297 47380 291297 47497 301297 47601 311297 47560 010198 47266 020198 47531 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 3075 Number of ASes announcing only one prefix: 1452 (758 cidr, 694 classful) Largest number of cidr routes: 521 announced by AS3561 Largest number of classful routes: 973 announced by AS701 1) Gains by aggregating at the origin AS level --- 02Jan98 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS2493 698 391 307 44.0% iSTAR Internet, Inc. AS4293 417 199 218 52.3% IMCI AS174 882 675 207 23.5% Performance Systems International AS816 571 399 172 30.1% UUNET Canada (ASN-UUNETCA-AS4) AS3602 457 300 157 34.4% Sprint Canada Inc. AS3749 190 54 136 71.6% TECNET AS701 973 878 95 9.8% Alternet AS839 123 31 92 74.8% North West Territories Regional N AS3751 119 46 73 61.3% SNET-AS AS5668 102 37 65 63.7% Century Telephone Inc. AS2048 153 88 65 42.5% LaNet AS3804 202 140 62 30.7% Bell Solutions AS1 869 808 61 7.0% BBNPLANET AS549 218 161 57 26.1% ONet Backbone AS271 111 56 55 49.5% BCnet Backbone AS7545 115 63 52 45.2% TPG Internet Pty Ltd AS3464 119 67 52 43.7% Alabama Research and Education Ne AS1239 580 528 52 9.0% SprintLink Backbone AS4763 126 75 51 40.5% Telstra New Zealand AS4747 114 64 50 43.9% Taiwan Telecommunication Network AS4648 190 140 50 26.3% NZIX 2 AS72 84 36 48 57.1% Schlumberger Information Network AS719 505 460 45 8.9% LANLINK autonomous system AS3561 936 894 42 4.5% MCI AS1221 256 215 41 16.0% AARNET-AS AS684 82 43 39 47.6% Manitoba Regional Network Backbon AS6181 60 21 39 65.0% FUSE-NET AS4740 330 291 39 11.8% ASN-OZEMAIL (Ozemail Pty Ltd) AS2711 96 57 39 40.6% SUNBELT-AS AS1691 164 125 39 23.8% BCTEL For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: FW: Seeking MAE-East Service for foreign ISPs.. (fwd)
by Mark Dezagottis 02 Jan '98

02 Jan '98

Winfred: CAIS hosts many customers like this. Most are from other countries. However, we also have some from other regions of the United States. I will be glad to work with you on this ( I'm the Engineer that supports the Sales Staff at CAIS). Please send an email to markd(a)cais.net detailing what exactly you would like to do. We have POPs at MAE East, MAE West, Chicago, New York and the Palo Alto IX (DIX, Palo Alto CA). Our NOC is staffed 24 hours a day 7 days a week, References are available from customers who have this service already. Be sure to stop in if you are in the States! Regards, Mark Dezagottis --------------------------------- CAIS Internet 6861 Elm Street McLean, VA 22101 USA markd(a)cais.com Voice 703-448-4470 x 417 Fax 703-790-8805 http://www.cais.com > ---------- Forwarded message ---------- > Date: Thu, 25 Dec 1997 14:45:59 +0100 (CET) > From: Winfried Haug <haug(a)seicom.net> > To: nanog(a)merit.edu > Subject: Seeking MAE-East Service for foreign ISPs.. > > Hello... > > we are going to establish a mae-east link from germany. Since it is a little > bit difficult due to the physical difference to do router-baby-sitting etc :-) > we are looking for companies offering this service: > > -setup a cisco box at mae-east > -help to recover a lost or crashed router within a certain period (2-4 hrs). > > Could anyone give us some tips who is offering such a service. In order > to prevent ADs on this list, you could also mail me (haug(a)seicom.net) > if you dont prefer to answer on this list > > Thx. > > Winfried Haug > > --- > Winfried Haug | SEICOM.DE & SCHWABEN.DE | Tel. +49 7121 9770- 0 > Laiblinsplatz 12 | Internet+ISDN access & consulting | Fax. +49 7121 9770-19 > 72793 Pfullingen | Access in STGT + RT + TUE + BB + LB | Rack +49 7127 989-X > haug(a)schwaben.net| 150*ISDN (64kb/X.75) / 100 * K56flex | Rack +49 711 9675-X > haug(a)seicom.net |SAP-OSS * FTP * TELNET * NETNEWS * IRC | Rack +49 7121 709-X > * 10 MBit DE-CIX * 2 MBit INXS * 3 MBit ecrc/ebone * 2 Mbit Belwue * 2 Mbit WIN --

1 0

Re: Whoa; the 3 network?
by rja＠corp.home.net 01 Jan '98

01 Jan '98

On Dec 23 11:53, Randall Pigott wrote: % The Princeton address is the same as the old RCA company division % that did DARPA and ARPA gov't contracting, so that address space % once belonged to RCA "in the beginning". False statement and faulty logic. GE merely changed the address for the GE folks handling their network address to be the office in Princeton. Net 3 has always been GE address space, even before GE repurchased RCA during the 80s. In fact, for many years the Net 3 entry at the SRI NIC pointed to a GE Simulation facility in Florida because someone there was the address allocation stuckee for all of GE. % I have personal experience in a past life doing military DARPA work % with RCA, nearly twenty years ago, long before they formed RCA Astro % and built communications satellites. This address space was given % to RCA for DARPA work *only* way back then or earlier. RCA might have been given address space back then, but it wasn't Net 3. In the early 80s, when RCA was not owned by GE, GE had already been alloated Net 3 by the SRI NIC. I was a GE employee at the time and involved in renumbering some internal networks into Net 3 at the time. % I did a casual sequential-countup scripted "ping -a" on a small slice % of 3.0.0.0, and found almost no working domains within this address % space. [stuff deleted here] >-- End of excerpt from Randall Pigott Ping turns out to be a remarkably ineffective tool at measuring the utilisation of addresses or accessibility of hosts. Many a host that I've managed was not visible via ping, but was in fact directly on The Internet and reachable via telnet/rlogin/ftp _only from authorised hosts_ which were also on the Internet. Connection attempts from unauthorised hosts were silently dropped. No point in making it easy on the bad guys. This was done within some parts of GE at least as far back as the mid 1980s. It helped to have a 4.2 BSD source license. :-) Ran rja(a)home.net PS: Apologies for posting content onto the NANOG list...

3 2