December 1998 - NANOG - lists.nanog.org

RE: Lawsuit threat against RBL users
by Chris Mauritz 27 Mar '99

27 Mar '99

-----Original Message----- From: Karl Denninger [mailto:karl@Denninger.Net] Sent: Thursday, November 19, 1998 10:26 AM To: Chris Mauritz; 'Sheryl Chapin'; nanog(a)merit.edu Subject: Re: Lawsuit threat against RBL users >The problem with this is that someone, sooner or later, is going to >take a run at people trying to set up what amounts to a set of contractual >requirements that exceed legal requirements - and then enforce them network >wide. > >The collusive aspect of this is downright scary, especially when coupled >with threats of depeering, active denial of service attacks, etc. *shrug* If I am an ISP, I'm free to have whatever AUP I want. IF clients don't like the AUP, they are free to shop elsewhere. I don't have the ability to force other ISPs to use my AUP or even a close facsimile...nor is there is a method to enforce your 1984 vision anyway. The net is a loose connection of public and private links. If I own a private link and I decide that I'm going to route you into /dev/null...that's what I'll do. There isn't a thing you can do about it. [snip] >There are a lot of "questionable" things that this industry does, but IMHO >this one is near or at the top of the list of things I'd talk to my counsel >about.... Knock yourself out. Be sure to let us know what your legal eagle has to say on the matter. Chris

11 10

Something fishy at NetSol again...
by Rodney Joffe 05 Jan '99

05 Jan '99

I hate co-incidences. At the same time as this story appeared today http://www.news.com/News/Item/0,4,30366,00.html?st.ne.140.head whois queries started returning: * * WELCOME to InterNIC Registration Services * * Sorry, the system load is temporarily too heavy. * * Please wait a while and try again. Thanks * It's currently 12:34am EST. and the response is still mostly the same. A query still needs 5-10 attempts before a server responds. Dig used to (a couple of weeks ago) show a bunch of servers. Now there is only 1: 198.41.0.6 Is anyone else having this problem? Does anyone else have a solution? We're trying to track down the source of a dos attack, and this kind of screwing around to find contact data isn't helpful...

4 4

Just trying to fill my box with flames and complaints!
by Rich Sena 31 Dec '98

31 Dec '98

Happy New Year Kids... -- I am nothing if not net-Q! - ras(a)poppa.clubrich.tiac.net

1 0

Re: System And Network Monitoring
by Derek Balling 31 Dec '98

31 Dec '98

On Wed, 30 Dec 1998, brian moore wrote: > > mon http://consult.ml.org/~trockij/mon > > Nope, it moved -- ml.org is defunct. Actually as I mentioned to someone else. It IS functional, because I used that URL to reach it TODAY, this afternoon. :) There had been discussion on ORSC that someone was taking over the ml.org zonefiles. And there's DNS servers answering queries for it. :) ====================================================================== Derek J. Balling | "Bill Gates is a monocle and a white dredd(a)megacity.org | fluffy cat from being a villain in the http://www.megacity.org/ | next Bond film." - Dennis Miller ======================================================================

2 1

Re: System And Network Monitoring
by John Fraizer 31 Dec '98

31 Dec '98

And just in case, EZ-IP does the same thing. http://www.ez-ip.net >that URL to reach it TODAY, this afternoon. :) There had been discussion >on ORSC that someone was taking over the ml.org zonefiles. And there's DNS >servers answering queries for it. :) >====================================================================== ------------------------------------------------------------------ ML.ORG is gone. Check out http://www.EZ-IP.Net - It's *FREE* ------------------------------------------------------------------ Get your *FREE* Parked Domain account at http://www.EZ-Hosting.Com ------------------------------------------------------------------ John Fraizer | __ _ | The System Administrator | / / (_)__ __ ____ __ | The choice mailto:John.Fraizer@EnterZone.Net | / /__/ / _ \/ // /\ \/ / | of a GNU http://www.EnterZone.Net/ | /____/_/_//_/\_,_/ /_/\_\ | Generation PGP Key fingerprint = 7DB6 1CA2 DAA6 43DA 3AAF 44CD 258C 3D7E B425 81A8

1 0

System And Network Monitoring
by Derek Balling 31 Dec '98

31 Dec '98

Well, as promised, I am reporting the summary of the leads I was given for different products. If people want, I'd be happy to post our final synopsis (which product we went with and why) after we finally DECIDE which product we're going with (and why :) ) Here's the overall list of what we received. Product Name URL ------------------------------------------------- TIB/Hawk www.tibco.com WegSpective www.atrieve.com Pong3 (free) www.megacity.org/pong3 --- Interesting that the person who suggested this, didn't realize I was the author of it ;-) Spectrum www.cabletron.com Unicenter www.cai.com Tivoli www.tivoli.com SystemEdge www.empiretech.com Patrol www.bmc.com Trakker www.concord.com Rover www.merit.edu Sysmon (free) www.fkware.com NetExpert www.osi.com Big Brother (free) maclawran.ca/bb-dnld HP/OpenView www.hp.com NOCOL/SNIPS (free) www.netplex-tech.com NetCool www.micromuse.com ====================================================================== Derek J. Balling | "Bill Gates is a monocle and a white dredd(a)megacity.org | fluffy cat from being a villain in the http://www.megacity.org/ | next Bond film." - Dennis Miller ======================================================================

3 3

smurf listings
by Jared Mauch 30 Dec '98

30 Dec '98

someone did what i've been trying to find time for, and something similar to the www.powertech.no/smurf/ listing, check it out, as this could become an operational issue for you if you're not rate-limiting icmp at your edges.. www.netscan.org - Jared -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

1 0

whois search question
by larrys＠lexis-nexis.com 30 Dec '98

30 Dec '98

Hi All -- I was trying to chase down a site for Helm, Inc. (publishers of OEM automotive shop manuals). A whois (from the nic website but that shouldn't matter) of 'helm' returned a bunch of answers, but not them. A similar search of 'helm,' found them. Is a comma a searchable character? Should it be? thanx, -ls-

1 0

Re: Is the US domain screwed up, or is it Internic, or whut?
by sob＠academ.com 30 Dec '98

30 Dec '98

I only checked venera.isi.edu for pima.az.us. Here is what I got: owlman.academ.com% dig @venera.isi.edu pima.az.us ns ; <<>> DiG 8.1 <<>> @venera.isi.edu pima.az.us ns ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; pima.az.us, type = NS, class = IN ;; AUTHORITY SECTION: az.us. 1D IN SOA VENERA.ISI.EDU. us-domain.ISI.EDU. ( 981221 ; serial 12H ; refresh 1H ; retry 2W ; expiry 1D ) ; minimum ;; Total query time: 374 msec ;; FROM: owlman.academ.com to SERVER: venera.isi.edu 128.9.176.32 ;; WHEN: Tue Dec 29 16:29:55 1998 ;; MSG SIZE sent: 28 rcvd: 93 Checking the US-Domain list of delegates, I see that pima.az.us is not supposed to be delegated. I see that co.pima.az.us is. academ.com% dig @venera.isi.edu co.pima.az.us ns ; <<>> DiG 2.2 <<>> @venera.isi.edu co.pima.az.us ns ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10 ;; flags: qr rd ra; Ques: 1, Ans: 2, Auth: 0, Addit: 2 ;; QUESTIONS: ;; co.pima.az.us, type = NS, class = IN ;; ANSWERS: co.pima.az.us. 604800 NS ns.co.pima.az.us. co.pima.az.us. 604800 NS tophat.co.pima.az.us. ;; ADDITIONAL RECORDS: ns.co.pima.az.us. 604800 A 159.233.1.2 tophat.co.pima.az.us. 604800 A 159.233.1.1 ;; Total query time: 168 msec ;; FROM: academ.com to SERVER: venera.isi.edu 128.9.176.32 ;; WHEN: Tue Dec 29 17:38:40 1998 ;; MSG SIZE sent: 31 rcvd: 101 -- Stan | PGP Key ID: 55CB6421 | Opinions expressed are only mine. Olan | Phone: +1-713-793-0222 | Email: sob(a)academ.com Barber | Fax: +1-713-793-0221 | http://www.academ.com/~sob

2 1

Re: Is the US domain screwed up, or is it Internic, or whut?
by sob＠academ.com 29 Dec '98

29 Dec '98

pima.az.us does not appear to be delegated anymore. Other delegations (at least the short list I tested) do appear to be working. -- Stan | PGP Key ID: 55CB6421 | Opinions expressed are only mine. Olan | Phone: +1-713-793-0222 | Email: sob(a)academ.com Barber | Fax: +1-713-793-0221 | http://www.academ.com/~sob

2 1