August 2001 - NANOG - lists.nanog.org

Re: Affects of the balkanization of mail blacklisting
by Nathan J. Mehl 14 Aug '01

14 Aug '01

In the immortal words of Mitch Halmu (mitch(a)netside.net) > > Guilty of what, Vivien? You are accusing me of being a spammer? MAPS "accused" you, via a listing in the RSS zone (subscription to which is now and has alwasy been 100% voluntary), of running an open relay. Buried in the midst of your laughable comspiracy-mongering(*) on your website, you confirm that you are, in fact, deliberately doing exactly that. You persist in being the only person on the planet who finds this state of affairs perplexing in any way. > NetSide's customers were fully informed of our stance published on > a web site dedicated to the problem, most agreed, and those that > chose to stay and endure the year-long MAPS blockade obviously like > their communications uncensored, and truly appreciate being able to > transparently use their accounts from elsewhere (i.e., from the > office). Two years ago, refusing to admit to the existance of SMTP-AUTH and pop-before-smtp could be excused as ignorance. A year ago, deliberate obtuseness would be the most generous interpretation. In the middle of 2001, we are left only with malicious idiocy and/or professional incompetance. In sum: grow up, do your job for a change, and please stop trolling on NANOG. -n (*) I noticed on my last cursory pass over dotcomeon.com that you no longer seem to be maintaining that MAPS is a conspiracy of the Japanese government. May I assume that NTT's lawyers were as amused as I was? ------------------------------------------------------------<memory(a)blank.org> "Look, I don't know how they do things on your home planet, spaceman...but here in Mayberry, we just don't talk to gun-toting, redneck, amphetamine freaks that way." (--Red Meat, "Microwave Pet Carrier") <http://blank.org/memory/>----------------------------------------------------

1 0

Re: Another fiber cut in Maryland?
by Sean Donelan 14 Aug '01

14 Aug '01

On Tue, 14 August 2001, Sudheer Dharanikota wrote: > Can somebody point me: > > - What are the levels of diversity sold by the PSs? and > - How much is charged for different types of diversity requests from a client? Your local friendly carrier salesperson would be a really good resource to ask. They are listed in the phone book.

1 0

Re: Another fiber cut in Maryland?
by Sean Donelan 14 Aug '01

14 Aug '01

On Thu, 09 August 2001, up(a)3.am wrote: > On 9 Aug 2001, Sean Donelan wrote: > > Its either the continuation, or a new fiber cut in Maryland > > between Baltimore and Washington DC this afternoon in addition > > to the one this morning. > From UUnet's NOC site: > > A fiber cut in Relay MD affecting service in Baltimore and Philadelphia. > Currently there is no time to repair. Apparently one of the fiber cuts today caught a large bandwidth consumer located at Ft. Meade in Maryland. I wonder if they paid for physically diverse routing?

2 1

RE: "Afflack!"...of the balkanization of mail blacklisting
by Patrick Greenwell 14 Aug '01

14 Aug '01

On Tue, 14 Aug 2001, kysi ferul wrote: > > Cut the baloney! Why 'NO nuthin' on PAC BELL/TELESIS/SBC/MCIworldcom/USBI/WilTel,Inc./FTC/FCC/FAA/Microsoft-Hotmail…. > Via:SFPD/FBI/COINTELPRO/QUEENELIZABETHSJAPANESEBANKERINJAVA?. > ................with the SLAMMED PHONE BILLS? > Has no one 'NOTICED' the starnge coincidence of NAMES of 'FIASCO' & Co.s? > Between STINGS & CORPORATIONS? USBI phone...What was the Bank in Indonesia? CointelPro? Is that a COIN OPERATED PENTIUM 3 for 'T.J. Hookers'? > The US GOV. 'covert' operations sound alot like the "REVERSE ENGINEERING 'product!'from 'OFFSHORE? > "A 'HACK ATTACK' is worth a thousand PATENT FILINGS" 'signed' A. Jaap; Esq. Whatever you're on, I DON'T want any.

1 0

Re: Code Red 2 cleanup; reporting..
by Steven M. Bellovin 14 Aug '01

14 Aug '01

In message <EA9368A5B1010140ADBF534E4D32C728025B06(a)condor.mhsc.com>, Roeland Me yer writes: > >> So -- if he wasn't running IIS, what was he running? > >Win2K boxen are ALWAYS running IIS. It doesn't matter whether you have Pro >or Server. ALL Win2K systems need to run the patch. MSFT chose to integrate >much of the IIS stuff into DLLs with other system critical stuff. As a >result, IIS can't be completely removed without killing off other critical >functions. Yes, what they proved in court is even more true with Win2K than >with Win98 (Duh! MSFT didn't lie, but they didn't tell the whole truth >either). WinXP is even more in that direction, from all reports. I think you're confusing IIS with Internet Explorer. And Microsoft denies that it's installed by default on Win2K Professional -- see http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security… XP Beta 2 does have IIS by default; XP RC1 and RC2 do not. I can't be sure they're telling the whole truth; I can tell you that the two Win2K boxes I sometimes use are not listening to anything on port 80. > >BTW, is any motion happening, in the direction of finding the author(s)? I'd >like to personally thank them, with a new neck-tie. The other end is >attached to a huge California oak tree. > Not that I've heard. --Steve Bellovin, http://www.research.att.com/~smb

2 1

DNS Issues
by Mike Moglin 14 Aug '01

14 Aug '01

I need some help in understand this one.. A disgruntled employee set up duplicate DNS for our domain on his personal server and convinced uu.net to update their DNS records to point to his server as our secondary DNS server. The record on his server has a different serial number than ours does, and we've contacted uu.net to point the domain back where it belonged. The question is how do I get the records to propagate rapidly?? he set the expire time on the records he sent out extremely high. Is there a way to force an update?? And what do the serial numbers really do? Thanks.

4 3

Re: Affects of the balkanization of mail blacklisting
by Paul Vixie 13 Aug '01

13 Aug '01

> If one wants to make MAPS-like functionality a part of the Internet, at > large, then that's where one might go. Clarify your thoughts, write them > into a proposal and bring it to either the IETF, the ASO, or both. This will never happen. There can never be an AUP involved in the allocation of addresses. Even the simple matter of "is this address block being used for virtual web hosting and if so have all alternatives been explored?" was a huge political headache. Questions like "do other people actually want to receive the traffic you want to send them?" would be utterly unanswerable (and for that matter, unaskable) at the ICANN/ASO/IETF level.

1 0

RE: Affects of the balkanization of mail blacklisting
by Roeland Meyer 13 Aug '01

13 Aug '01

APNIC, ARIN, and RIPE are now *the* members of the Address Supporting Organization (ASO) of the ICANN. Just as, IETF is now a part of the Protocol Supporting Organization (PSO). This could turn into a globally over-arching problem. MAPs has a large user base that is international in scope. It also appears to be cross-domain (addresses AND names). However, it would appear to be a largely ASO issue, since it directly effects IP address block policies (YMMV). If one wants to make MAPS-like functionality a part of the Internet, at large, then that's where one might go. Clarify your thoughts, write them into a proposal and bring it to either the IETF, the ASO, or both. Understand that much of the process is still being defined and there is a serious lack of participation from those that should participate. But, it may still be your best approach. I work in the ICANN/DNSO and have no serious connections in the ICANN/ASO and only slight contact in the ICANN/PSO. > From: miquels(a)cistron-office.nl [mailto:miquels@cistron-office.nl] > Sent: Monday, August 13, 2001 2:37 AM > > In article <1100507318.997532919(a)[192.168.0.2]>, > Margie <margie(a)mail-abuse.org> wrote: > >MAPS as a corporation must have revenue to operate. > > Has MAPS ever talked to organisations like RIPE and ARIN? > Most providers > are a paying member of those anyway. MAPS might or could be > an organisation > just as important for the continuity of the internet as those ones. > If you could persuade them to work together and let them offer MAPS to > their members and pay the bill ..

1 0

AS2548... Do you care?
by John Fraizer 13 Aug '01

13 Aug '01

08/07/01 Internet Routing Problems Reserved AS Numbers ------------------- AS64620 at Mae-West from Digex (AS2548) ASPATH=2548 64620 20246 20246 IGP 08/08/01 Internet Routing Problems Reserved AS Numbers ------------------- AS64620 at Mae-West from Digex (AS2548) ASPATH=2548 64620 20246 20246 IGP 08/09/01 Internet Routing Problems Reserved AS Numbers ------------------- AS64620 at Mae-West from Digex (AS2548) ASPATH=2548 64620 20246 20246 IGP 08/10/01 Internet Routing Problems Reserved AS Numbers ------------------- AS64620 at Mae-West from Digex (AS2548) ASPATH=2548 64620 20246 20246 IGP And it's still there right now: (results from nitrous.digex.net) BGP routing table entry for 199.253.174.0/24, version 31188140 Paths: (3 available, best #3) Advertised to peer-groups: rr-pop maeeast-atm 64620 20246 20246 209.116.242.118 (metric 215601) from 165.117.1.53 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.53 64620 20246 20246 209.116.242.118 (metric 215601) from 165.117.1.228 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.228 64620 20246 20246 216.1.71.34 (metric 105501) from 165.117.1.77 (165.117.1.77) Origin IGP, metric 0, localpref 110, valid, internal, best Community: 2548:999 3706:132 BGP routing table entry for 199.253.174.0/24, version 35137771 Paths: (3 available, best #3) Advertised to peer-groups: pen-nap1 Advertised to non peer-group peers: 192.157.69.9 192.157.69.10 192.157.69.22 192.157.69.63 64620 20246 20246 209.116.242.118 (metric 210201) from 165.117.1.53 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.53 64620 20246 20246 209.116.242.118 (metric 210201) from 165.117.1.228 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.228 64620 20246 20246 216.1.71.34 (metric 100101) from 165.117.1.77 (165.117.1.77) Origin IGP, metric 0, localpref 110, valid, internal, best Community: 2548:999 3706:132 BGP routing table entry for 199.253.174.0/24, version 32354441 Paths: (3 available, best #3) Advertised to peer-groups: rr-pop maewest Advertised to non peer-group peers: 198.32.136.1 198.32.136.2 198.32.136.11 198.32.136.31 198.32.136.129 64620 20246 20246 209.116.242.118 (metric 450701) from 165.117.1.53 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.53 64620 20246 20246 209.116.242.118 (metric 450701) from 165.117.1.228 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.228 64620 20246 20246 216.1.71.34 (metric 340601) from 165.117.1.77 (165.117.1.77) Origin IGP, metric 0, localpref 110, valid, internal, best Community: 2548:999 3706:132 BGP routing table entry for 199.253.174.0/24, version 8526987 Paths: (3 available, best #3) Advertised to peer-groups: rr-pop decnap1 Advertised to non peer-group peers: 165.117.68.178 207.88.240.73 209.133.31.53 64620 20246 20246 209.116.242.118 (metric 350401) from 165.117.1.53 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.53 64620 20246 20246 209.116.242.118 (metric 350401) from 165.117.1.228 (165.117.2.30) Origin IGP, metric 0, localpref 110, valid, internal Community: 2548:999 3706:130 Originator: 165.117.2.30, Cluster list: 165.117.1.228 64620 20246 20246 216.1.71.34 (metric 240301) from 165.117.1.77 (165.117.1.77) Origin IGP, metric 0, localpref 110, valid, internal, best Community: 2548:999 3706:132 --- John Fraizer EnterZone, Inc

5 5

RE: Code Red 2 cleanup; reporting..
by Roeland Meyer 12 Aug '01

12 Aug '01

> From: David Lesher [mailto:wb8foz@nrk.com] > Sent: Sunday, August 12, 2001 5:46 AM > > Unnamed Administration sources reported that mike harrison said: > > > Turns out that because they had not installed IIS, they did > not patch the > > system.... > > > > Then when they installed Citrix, it installed IIS. > > > > After looking around, it seems a LOT of 'other' software > > installs IIS when no-one is looking. > > Like Front Page ;-? > > Isn't it nice that M$ is so helpful? I think that the point's been well-made now. Win2Kpro hosts need to run the patches, regardless of whether or not anyone *thinks* that host is running IIS and regardless of any nit-picky arguments against the need. NetAdmins should quit whining and do their jobs. I still LOVE this sig-line.... > -- > A host is a host from coast to coast.................wb8foz(a)nrk.com > & no one will talk to a host that's close........[v].(301) 56-LINUX > Unless the host (that isn't close).........................pob 1433 > is busy, hung or dead....................................20915-1433 >

2 1