March 1999 - NANOG - lists.nanog.org

VPN requirements
by Howard C. Berkowitz 03 Mar '99

03 Mar '99

I just published an I-D on VPN requirements. It may be of use to NANOG folk in helping determine what their customers want to do with a VPN, and/or explain to them about VPNs. I'm open either to making it more of a free-standing tutorial and requirmeents analysis guide, or merging it into an architecture RFC. Howard ------ A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Requirements Taxonomy for Virtual Private Networks Author(s) : H. Berkowitz Filename : draft-berkowitz-vpn-tax-00.txt Pages : 5 Date : 01-Mar-99 Proprietary definitions of virtual private networks proliferate in the marketplace, to the confusion of end users. This memorandum proposes a taxonomy which can describe a variety of VPN models. It does not recommend any specific model, but suggests a consistent way of describing specific VPNs. This document differs from some other working papers that go more deeply into the VPN mechanisms. In contrast, this document is focused on user requirments. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-berkowitz-vpn-tax-00.txt Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-berkowitz-vpn-tax-00.txt".

1 0

AGIS outage
by Jason Taylor 03 Mar '99

03 Mar '99

Does anybody have extended information on the AGIS outage that occurred around 4:00 p.m. EST? They said they had a trunk line down but didn't say anything else.. Thanks.. Jason Taylor Jason(a)aiis.net Network Systems Engineer AIIS

1 0

traceroute to lycos dies at C&W in Cleveland, what's up?
by Steven J. Sobol 02 Mar '99

02 Mar '99

Anyone know about this? Traceroute goes from here through Verio Mid-America (first to Cleveland, then to Chicago), then to C&W Willow Springs (Chicago), then back here to C&W North Royalton (Cleveland again). Then the traceroute dies.... Did someone pull the plug on a router or something? Packets Pings Hostname %Loss Rcv Snt Best Avg Worst 1. fe0-0.core1.cleveland.nacs.net 0% 8 8 11 14 19 2. serial3-4.csr1.cv.oh.verio.net 0% 8 8 8 12 19 3. fddi9-0.csr0.cv.oh.verio.net 0% 8 8 8 15 27 4. serial1-0.csr8.or.il.verio.net 0% 8 8 21 29 41 5. hssi1-0.csr7.or.il.verio.net 0% 8 8 21 33 46 6. atm8-0.csr6.or.il.verio.net 0% 8 8 21 33 46 7. bordercore3-hssi0-0-0.WillowSprings.cw.net 0% 8 8 21 35 54 8. bordercore2.NorthRoyalton.cw.net 0% 8 8 30 39 56 9. ??? 10. ??? 11. ??? 12. ??? 13. ??? 14. ??? 15. ??? 16. ??? 17. ??? 18. ??? 19. ??? 20. ??? 21. ??? 22. ??? 23. ??? 24. ??? 25. ??? -- Steve Sobol sjsobol(a)nacs.net (AKA support(a)nacs.net and abuse(a)nacs.net) "The world is headed for mutiny/When all we want is unity" --Creed, "One"

2 2

Is there anyone at Netcom with a clue
by Ehud Gavron 02 Mar '99

02 Mar '99

If there's anyone at Netcom who can read English, I'd appreciate a hand. The operational item is that ongoing abuse is being ignored, and shunted into form-letters that look stupid. Ehud

5 4

Traceroute: Now does parallel TTL lookups (much faster)
by Ehud Gavron 01 Mar '99

01 Mar '99

Traceroute prior to V2.9.0 would sequentially send packets to individual TTLs, wait for replies, and then go on. Traceroute V2.9.1 can send in parallel, and is therefore much quicker. (O(1) instead of O(n) for the math purists.) ftp://ftp.aces.com/pub/software/traceroute/beta/ traceroute.c 0_readme.txt If a gui ftp server gives you troubles, use a real one. As always, if you get it to build and run on a system not listed in the table (in the 0_readme.txt file) let me know the compile arguments and system/compiler versions. Cheers, Ehud

1 0

Re: definition of unattended operation
by Sean Donelan 01 Mar '99

01 Mar '99

sjsobol(a)nacs.NET (Steven J. Sobol) writes: >So, what do you suggest as an alternative? Other than not having power outages in Herndon, VA? :-) Instead of worrying about passing Cisco's certification test just so I'm allowed to sell more Cisco hardware (as if Cisco really needs the money), I sometimes think I should start an independent certification firm to go around and certify "critical infrastructure" around the net. Hint: Your emergency phone number should not be routed through your main PBX. Anyone care to discuss setting up that emergency phone thing again in case you can't look up other NOC's phone numbers in WHOIS? (Inside joke, I'm just venting this morning...) Back to the subject at hand. I have a concept of Information Entropy. Essentially all information turns into chaos unless a lot of energy is expended to keep it organized. Maybe I just work with too many librarians all day long, but I don't see the value in adding more contacts when the current contact information isn't kept up to date. SRI and even BBN each undertook projects in the past to keep the contact information up to date. But so far the current custodian has indicated they don't believe it was in the job description. Nor do I think setting up yet another directory service is the answer. Look at the phone companies each starting their own directory companies giving out three year old information at $1 a query. Yes, several people have set up contact web pages, and there are several efforts to put contact information in DNS (along with everything else). Peering agreements have language saying each providing will provide contact information. Fact of the matter, there is no penalty or pain for not making up-to-date technical contact information available to other providers. Nor is their any penalty or pain for not maintaining any of the "standard" contact methods. On the other hand, there also doesn't seem to be any penalty or pain for making a false report to an official contact method. So those providers that attempt to do the right thing are quickly overwhelmed by the vigilantes. Suggestions: 1) First figure out why providers don't keep their current contact information up to date. 2) Make it a security and fraud issue. This isn't a legal list, go talk to your lawyer why that is important when competitors decided to do something. 3) Only if the reason is providers will handle the messages differently should additional contacts be listed. If most providers are going to aliases them all to the customer service blackhole, its just a waste of effort, time and space. I would rather spend the effort, time and space keeping one contact up to date. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

GATED q?
by alex＠nac.net 01 Mar '99

01 Mar '99

I have machines that have several /32's on the backen loopback for a variety of reasons. I am trying to get a Cisco to learn that via OSPF (running gated on the unix host). Anyone got a quick gated.conf they could shoot me that runs OSPF on an ethernet and tells others about it's directly connected interfaces? Thanks in advance. -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Atheism is a non-prophet organization. I route, therefore I am. Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member Father of the Network and Head Bottle-Washer Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 Don't choose a spineless ISP; we have more backbone! http://www.nac.net -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

1 0

Re: http://www.cctec.com/maillists/nanog/historical/9711/msg00129.html (fwd)
by Dean Robb 01 Mar '99

01 Mar '99

At 06:48 2/27/99 -0500, Special FX Communications wrote: I do not choose to engage in private communciations with you on this matter. As you mailed me without prior contact, I feel fully justified in publicizing this email AND hope that others will take note of the relevant law when the next jerk threatens them. >The information on that page is inaccurate because the is no reason or >proof why it is there. Any one can put out a list but with out anything to >back the information the list is just garbage... There is no examples or >proof that there was any e-mail bombing from our serers. Without proof >that page is just hearsay, slander and libel. Show us the proof... If you >people weren't so narrow minded you would see the point and remove or >modify the page. If you can't show the proof then remove the page... The page in question is an archive of a post. You cannot hold the archivist responsible for the contents of the archive. This was explicitly placed into law in 47 U.S.C. § 230(c)(1). The relevant portion of § 230 states: "No provider or user of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider." This section of the law was upheld by the 4th Circuit Court in ZERAN v AMERICA ONLINE INC (Case No. 97-1523) November 12, 1997, affirming upon appeal a decision of the US District Court for the Eastern District of Virginia. As long as the website owner merely posted what someone else had said, you have no recourse against the website owner. In short, go piss up a rope and learn the law before you start threatening people with it. > >On Fri, 26 Feb 1999, Dean Robb wrote: > >> At 07:12 2/24/99 -0800, Eric Germann wrote: >> > >> >Dear NANOG readers, should I edit the archives and the search engine? >> >Should I become an "offensive material editor" for any and all parties >> > >> >Eric >> > >> >> Uh, no. They're full of male bovine fecal matter. IF they could convince >> some shyster to file a suit, it'd never make it...archivists are >> well-protected under US law. >> >> Ignore them. Nobody probably would have looked at the allegedly offensive >> page if they weren't making a production number of it. "Small minds can only contemplate small ideas".....Unknown Dean Robb Owner, PC-EASY (757) 495-EASY [3279] On-site computer repair, upgrades and consultations Read my game reviews/columns in SimOps on WWW.TheGamers.Net

1 0