April 2001 - NANOG - lists.nanog.org

jumbo frames
by Randy Bush 26 Apr '01

26 Apr '01

is anyone using jumbo frames? randy

9 11

New prefix. (fwd)
by Sabri Berisha 26 Apr '01

26 Apr '01

ROFL Domain name: reinder.nl (second domain) Organisation: Domain For Web B.V. Entrada 305 1096 ED AMSTERDAM Administrative Contact: M.P. Bevelander -- /* Sabri Berisha CCNA,BOFH,+iO O.O Business Internet Trends * Join HAL!!: www.HAL2001.org ____oOo_U_oOo____ http://www.bit.nl/~sabri * ____________________________________________, +31 318648688 318643334 * DDoS: http://misterpoll.com/3517731598.html L_______________________ */ ---------- Forwarded message ---------- Return-Path: <owner-tech-l(a)AMS-IX.NET> Received: from localhost (bofh [127.0.0.1]) by bofh.bit.nl (8.11.0/8.11.0) with ESMTP id f3Q9D4c04077 for <sabri@localhost>; Thu, 26 Apr 2001 11:13:04 +0200 Received: from pomo.bit.nl [213.136.0.96] by localhost with POP3 (fetchmail-5.5.0) for sabri@localhost (single-drop); Thu, 26 Apr 2001 11:13:04 +0200 (CEST) Received: from listserv-mail.surfnet.nl (listserv-mail.surfnet.nl [192.87.5.141]) by linux.bit.nl (8.8.7/NOSPAM) with ESMTP id LAA03910; Thu, 26 Apr 2001 11:11:27 +0200 Received: from listserv-mail (listserv-mail.surfnet.nl) by listserv-mail.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.01CB1D5A(a)listserv-mail.surfnet.nl>; Thu, 26 Apr 2001 11:11:26 +0200 Received: from NIC.SURFNET.NL by NIC.SURFNET.NL (LISTSERV-TCP/IP release 1.8d) with spool id 1664209 for tech-l(a)NIC.SURFNET.NL; Thu, 26 Apr 2001 11:11:25 +0200 Received: from survis.surfnet.nl (192.87.108.3) by nic.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.FFD5FD2E(a)nic.surfnet.nl>; Thu, 26 Apr 2001 11:10:48 +0200 Received: from smtp.bevelander.nl ([213.207.0.4]) by survis.surfnet.nl with ESMTP (exPP) for tech-l(a)ams-ix.net id 14shnT-0000ED-00; Thu, 26 Apr 2001 11:10:47 +0200 Received: from beveland-tjkdtz.bevelander.nl (laptop.reinder.nl [213.207.32.35]) by smtp.bevelander.nl (8.11.3/8.11.3) with ESMTP id f3Q9AfO04766 for <tech-l(a)ams-ix.net>; Thu, 26 Apr 2001 11:10:41 +0200 X-Sender: (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 4.3.1 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Message-ID: <4.3.1.2.20010426111230.0200c298(a)s01.bevelander.nl> Date: Thu, 26 Apr 2001 11:18:07 +0200 Reply-To: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> Sender: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> From: "Bevelander Noc." <noc(a)BEVELANDER.NL> Subject: New prefix. Comments: To: Ams-ix tech list <tech-l(a)ams-ix.net> To: tech-l(a)AMS-IX.NET X-UIDL: c+b"!_Oj"!3M0"!c5'#! Dear Peers/Colleagues, We will start to announce a new prefix: AS13197 192.168.0.0/16 Please update your filters. Thanks, Reinder van Amerongen, Junior. System/Network Adminstrator and Senior Cabling consultant. Bevelander Internet Services.

1 0

RE: jumbo frames
by John Fraizer 26 Apr '01

26 Apr '01

Paul, We don't have any FDDI interfaces so, I have no experience at all with them. On Wed, 25 Apr 2001, Paul Lantinga wrote: > Do you see any of the overhead akin to the > fddi <--> ethernet boxes where the fddi's >4000mtu would get fragmented into > the <1500mtu space of ethernet? > > I ask as my experience with jumbo frames over GE is a series with a limit > approaching zero. ;) > > thanks, Paul LANtinga > > > -----Original Message----- > > From: John Fraizer [mailto:nanog@Overkill.EnterZone.Net] > > Sent: Wednesday, April 25, 2001 11:10 PM > > To: Tony Hain > > Cc: Randy Bush; nanog(a)merit.edu > > Subject: RE: jumbo frames > > > > > > > > On Wed, 25 Apr 2001, Tony Hain wrote: > > > > > John Fraizer wrote: > > > > > > > We do on router-router links internally. > > > > > > Why? > > > > > > Tony > > > > > > > > > > > > > Partially because I can. Partially because there seems to be a > > performance increase when you start stuffing the pipe. > > > > --- > > John Fraizer > > EnterZone, Inc > > > > > > > --- John Fraizer EnterZone, Inc

1 0

RE: Custom Wireless Solution
by Mike Schoenecker 26 Apr '01

26 Apr '01

-----Original Message----- From: Lincoln Dale [mailto:ltd@interlink.com.au] Sent: Monday, April 23, 2001 3:11 AM To: Mohan Sundar Cc: Dominic J. Eidson; Wojtek Zlobicki; nanog(a)merit.edu Subject: Re: Custom Wireless Solution At 11:57 PM 22/04/2001 -0700, Mohan Sundar wrote: >How secure is this connection? Does 802.11 >provide security implicitly? 802.11b has some degree of inherent security. one can apply WEP (Wireless Equivalency Protocol) to encryption the data, but even that has been shown to be vulnerable (http://www.isaac.cs.berkeley.edu/isaac/wep-faq.html) there are a few alternatives that can be used to make it more secure: [1] deploy a setup whereby one has per-user dynamically-changing WEP keys. details on how one vendor can do this are at: http://www.cisco.com/warp/public/cc/pd/witc/ao350ap/prodlit/1281_pp.htm details on how to actually configure it is at: http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/a p350scg/ap350ch3.htm#xtocid586920 [2] don't trust the link layer, and encrypt everything you send. this could be as simplistic as adding MAC-address filters to your access-points and building a tunnel of some kind (eg. IPsec, or even as simplistic as SSH port-forwarding). if one is prone to be paranoia, using both [1] and [2] probably makes sense. cheers, lincoln.

3 2

RF Wireless
by Dennis Dayman 25 Apr '01

25 Apr '01

As we go over the topic of wireless this reminds me to ask: Any suggestions as to companies/equipment to buy/lease for broadband RF wireless solutions for a small ISP in a small 2-7 mile radius town. What would be needed for such a system? Looking for an affordable systems that's easy to setup into a DS1/DS3. Want to drop the transmitter and receiver onto a FM radio tower. They basically want to sell Internet access to customers so they have wireless broadband since they can't get wired DSL/ISDN broadband. Ideas? Suggestions? --------------------------- Thanks Dennis Dayman dennis(a)swbell.net ---------------------------------------------------------------------------- -- What goes up, must come down. Ask any system administrator. ---------------------------------------------------------------------------- --

1 0

Re: Information from an FTP violation this weekend
by Roger Marquis 25 Apr '01

25 Apr '01

"Jade E. Deane" <jade.deane(a)HelloNetwork.com> wrote: > > > We have an ftp site running on 209.123.52.40 that is made writable at > > > certain periods of time for anonymous users. Some of our customer's > > How pointless is this mail-list? I think the point was (inadvertently made) that this site (209.123.52.40, NAC-NETBLK02, nac.net, running NEPTUNE Microsoft FTP) has a security problem. It is not standard practice to have listable AND writable directories on anonymous ftp servers. If customers need to upload files they should also have individual directories under an unreadable directory tree i.e., /upload/a9-ns/custX /upload/0igm19/custY ... In this case none of the directories under /pub should be listable except perhaps //custX. Whether or not //custX needs to be listable depends on the technical skills of the customer. It is also standard practice to keep detailed logs of all ftp access and monitor, run IDS, and reports on those periodically. Since this is not typically practical using Microsoft software it looks like a straightforward case of 3 strikes you're hacked. -- Roger Marquis Roble Systems Consulting http://www.roble.com/

2 1

RE: jumbo frames
by Roeland Meyer 25 Apr '01

25 Apr '01

Yeah, but internal App Server to ORDBMS system only (back-end LAN). > -----Original Message----- > From: Randy Bush [mailto:randy@psg.com] > Sent: Wednesday, April 25, 2001 11:32 AM > To: nanog(a)nanog.org > Subject: jumbo frames > > > > is anyone using jumbo frames? > > randy >

1 0

Re: jumbo frames
by Richard A. Steenbergen 25 Apr '01

25 Apr '01

On Wed, Apr 25, 2001 at 11:31:30AM -0700, Randy Bush wrote: > > is anyone using jumbo frames? Are people using jumbo frames *where*? In thruput-optimized LAN transfers, yes... Across an exchange point or out to the internet, probably not (yet)... -- Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)

1 0

OT: Looking for Amy Baron
by Peter Galbavy 25 Apr '01

25 Apr '01

Amy, are you out there - or can someone point me at her current e-mail ? I am wondering over to SF for a long weekend from tomorrow, and it would be nice to get in touch again. Sorry for the line noise nanog... rgds, -- Peter Galbavy Knowledge Matters Ltd http://www.knowledge.com/

1 0

RIP and RIPv2, "The glue that makes the internet work"
by John M . Brown 25 Apr '01

25 Apr '01

Latest Linux Mag has this really nice long article about how RIP and its new version RIPv2 is the GLUE that makes the internet work. I almost fell down on that. Oh, wait, I do know a couple of exchange points that wanted to or are running RIP. No REALLY!! jmbrown

3 3