August 2003 - NANOG - lists.nanog.org

RE: Cross-country shipping of large network/computer gear?
by Jim Deleskie 27 Aug '03

27 Aug '03

I've shipped LOTS of heavy datacenter gear via FedEX cross countryb4 without problems as well. -Jim -----Original Message----- From: Deepak Jain [mailto:deepak@ai.net] Sent: Wednesday, August 27, 2003 3:08 PM To: Matthew Zito; Nanog(a)merit.edu Subject: RE: Cross-country shipping of large network/computer gear? We've shipped (using Fedex International Freight) 300+lb pallets of Sun gear without any untoward delays or problems. Multiple times. The pricing was excellent and the service (once they knew freight was involved) was fine. I think bad experiences with fedex have more to do with the statistical probability of a problem occurring over x million deliveries rather than a problem with the vendor itself. Deepak Jain AiNET > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Matthew Zito > Sent: Wednesday, August 27, 2003 2:19 PM > To: Nanog(a)merit.edu > Subject: Cross-country shipping of large network/computer gear? > > > > > Hello, > > I was wondering if anyone could provide any advice or suggestions on > shipping heavy/bulky equipment (~300 pounds, about a half-rack worth of > gear) on short notice cross-country? We're obviously looking to minimize > cost, but realistically it can't be in transit for more than two > days. Are > there any companies or methods people would recommend? Thanks in advance > for the help. > > Thanks again, > Matt > > -- > Matthew Zito > GridApp Systems > Email: mzito(a)gridapp.com > Cell: 646-220-3551 > Phone: 212-358-8211 x 359 > http://www.gridapp.com > > >

1 0

RE: Cross-country shipping of large network/computer gear?
by Temkin, David 27 Aug '03

27 Aug '03

FWIW we've had FedEx destroy hundreds of thousands of dollars of gear in transit (all shipped with full insurance and properly packed). They're extremely slow to pay their insurance claims on large amounts, as well. This has happened to us at least 5 times so far - cross-country, cross-state, and international. Choose carefully. -----Original Message----- From: N. Richard Solis [mailto:nrsolis@aol.net] Sent: Wednesday, August 27, 2003 2:27 PM To: Matthew Zito Cc: Nanog(a)merit.edu Subject: Re: Cross-country shipping of large network/computer gear? FedEx will be your best bet. Trust me. You COULD do a counter to counter shipment via an airline cargo desk. That MIGHT be cheaper but you will still have to transport it from your spot to their pickup and back again on the other side. Rail is not an option because it is across country. Ground/Highway is not an option because it is across country. Your only choice is by air. Use FedEx. Life is short. -Richard Matthew Zito wrote: > > > Hello, > > I was wondering if anyone could provide any advice or suggestions on > shipping heavy/bulky equipment (~300 pounds, about a half-rack worth of > gear) on short notice cross-country? We're obviously looking to minimize > cost, but realistically it can't be in transit for more than two > days. Are > there any companies or methods people would recommend? Thanks in advance > for the help. > > Thanks again, > Matt > > -- > Matthew Zito > GridApp Systems > Email: mzito(a)gridapp.com > Cell: 646-220-3551 > Phone: 212-358-8211 x 359 > http://www.gridapp.com > >

2 1

Attn: Operators - BGP-4 MIB issues
by Jeffrey Haas 27 Aug '03

27 Aug '03

Greetings, I'm serving as the editor of the current BGP-4 MIB. We're trying to push the MIB through standards. Last call has been issued. The MIB, as currently documented includes the following four objects: bgpPeerInUpdates bgpPeerOutUpdates bgpPeerInTotalMessages bgpPeerOutTotalMessages Each of these objects has the following clause, and has had it for some time: : This object should be initialized to zero (0) when the connection : is established. This is, for at least two major implementations, not the observed behavior. What is your expectations for these objects in the MIB. The MIB in question is at: http://www.ietf.org/internet-drafts/draft-ietf-idr-bgp4-mib-11.txt Your feedback is greatly appreciated. Note also: The BGP Traps have changed. This may affect your SNMP monitoring stations. -- Jeff Haas NextHop Technologies

1 0

Blocking ports
by Wesley Vaux 27 Aug '03

27 Aug '03

Has anyone that works for/ owns an isp blocked any ports regarding this new/old virus threat? Wes Vaux, CCNA, CCDA Network Security Engineer, 9000 Regency Pkwy Ste 500 Cary, NC 27511 t 919.463.6782 f 919.463.1290 Global Knowledge Experts Teaching Experts http://www.globalknowledge.com

1 0

RE: Max TNT ping thing
by Ejay Hire 27 Aug '03

27 Aug '03

Here is a summary of our experiences with the bug. Last Thursday, A TNTs with years of uptime rebooted. No cause was apparent, and nothing relevant happened in the logs. On Friday, It happened to a different TNT. This occurred with increasing frequency over the weekend, and we didn't get a lot of sleep. We tried using a filter in the tnt to block port 135 and 4444 to no avail, and then tried a filter to block ICMP in the tnt also to no avail. Next, we removed the tnt filters and tried rate-limiting ICMP to the TNT's. That didn't work. Next we removed the rate-limit and applied the Cisco-supplied anti-nachi route-map to the upstream interfaces facing the Tnt's. This significantly reduced the problem, but we were still rebooting every 12 hours or so. Disabling route-caching on the TNT stopped the rebooting problem, but we were seeing 40% packet loss on one of the TNTs. (Note, both TNT's have a Ds-3 of PRI's, and use the TNT-SL-E10-100 four port Ethernet cards) The packet loss was only affecting one TNT, and we discovered that it was running 9.0.6 while the unaffected box was running 9.0.9. Upgrading the box to 9.0.9 fixed the packet loss issue. We are currently up and haven't had any blips in 24 hours. (knock on wood.) -Ejay -----Original Message----- From: Andy Walden [mailto:andy@tigerteam.net] Sent: Wednesday, August 27, 2003 10:35 AM To: Geo. Cc: NANOG Subject: Re: Max TNT ping thing On Tue, 26 Aug 2003, Geo. wrote: > > Someone on this list had mentioned a network card for the Max TNT that made > it immune to the nachia worm ping issue. > > Is that the 4 port (3 ethernet, 1 fast ether) card or the single port card > with the dongle thing or something else? It turns out this was a bogus solution. Since the load was lower afterwards, my tech thought it had been fixed. We tried limiting the size of the route cache as someone had recommended, as well as applying all of the filters without relief. This morning I had them just disable the route cache to see what happens. I will post the results. We did end up buying a support contract from Lucent after they said they had a fix and would tell us what it was after we paid them. They just supplied the filter. At this point, they have exactly zero clue as to what to do next. andy -- PGP Key Available at http://www.tigerteam.net/andy/pgp

2 1

Re: relays.osirusoft.com
by Paul Vixie 27 Aug '03

27 Aug '03

> Someone has suggested 'anycasting' what do people (particually you > Paul) think of using anycasting for a DNSbl? (- AS112 anyone?) unowned anycast, such as that used in as112, is only possible when the replies have no value (and thus need not be synchronized or centrally authorized.) conversely, unowned anycast only adds value if the replies really ought to be sent anonymously. in the case of sorbs, you can enumerate authorized servers and thus get better management and control than you would with unowned anycast. now, that doesn't mean anycast per se is a bad idea for sorbs. it's just that you'd want to own or at least "manage and control" each instance. this is what we do for f-root and it's what ultradns and nominum and i think akamai have been doing for some years now. > I think it may work well... however I am a novice in terms of BGP... > As far as I can tell it involves getting a portable address block > (somone suggested anything less than a /24 would get filtered) and > announcing it in various locations around the Net with local servers > behind each of those announcements.... is this fundamentally correct? yes. see http://www.isc.org/tn/ for some background materials on all this. > Assuming I am right in my current understanding, I am about to start > looking at the proceedure to get an ASN and then I'll be looking for > some portable IP space if the consensus and thoughts are this will > work. I am thinking along the lines of talking with the other large > DNSbls (particually Easynet (wirehub) and DSBL) about setting up a set > of combined DNSbl servers all anycast'd. This after all will bring an > DDoS machines to the attention of the local networks they are > attacking .... ;-) putting multiple dnsbl's on the same /24 sounds like a lot of eggs for only one basket. among the root server operators, we like to chant that "diversity is good".

1 0

Re: Re[2]: relays.osirusoft.com
by Paul Vixie 27 Aug '03

27 Aug '03

> I still like scoring based systems (like spamassassin), which give one a > level of control, instead of bouncing at the MTA level. ah. i, rather, want to drop as much as i can at the mta (or router) level. > My mail is important enough that I can spend the extra CPU cycles... at 50:1 (spam:not), my incoming mail is mostly not worth any extra work.

1 0

Re: Microsoft distributes free CDs in Japan to patch Windows
by JC Dill 27 Aug '03

27 Aug '03

At 04:03 PM 8/25/2003, Andy Walden wrote: >On Mon, 25 Aug 2003, Henry Linneweh wrote: > > > Microsoft has a task scheduler that people should learn to use to remind > > them to check update to make sure their patches are current, it is > > located in the control panel and labled Scheduled Tasks and has an > > Add Scheduled Tasks icon to add update, FYI > >As I read that, I wondered why it is that I haven't patched any of my >windows systems if it was just as simple as reminding myself to do so. It >occurred to me that I just simply don't trust Microsoft to properly patch >my systems. And that's a very wise decision. I was called in to help someone with a "slow computer" today. He's running Microsoft ME, and it's an OS that I have very little experience with. I disabled a bunch of crap in his startup folder, then I took a look at the OS itself. I ran Windows update which told us that there was a service pack with "critical updates" that we should install before doing anything else, and I foolishly decided to follow these instructions without researching first. (Oh well, live and learn!) The machine hung at 62% installed. Trying to cancel the install via the "cancel" button resulted in the cancel message warning you that if you didn't let it complete it's special cancel process and tried to restart the machine instead, you could fatally ruin the computer (I don't recall the exact message, but it was pretty emphatic that you had to let MS finish "canceling" the install). 10 minutes later, with no sign that the computer was doing anything (no disk activity) or would ever complete this cancelation, we rebooted. I had to reboot and shut down several times before it would shut down cleanly and reboot cleanly. Later I learned that this "critical update" package was mostly for installing IE6, and that there are a lot of people who have had this same problem trying to install IE6 on ME, and that it's a well known issue at many ISPs and OEMs, but of course MS still insists that there's nothing wrong and that you should still install that update. Yeah, when the devil starts building snowmen. jc

2 1

Re[2]: relays.osirusoft.com
by Richard Welty 26 Aug '03

26 Aug '03

On Tue, 26 Aug 2003 20:59:22 -0400 (EDT) Mark Jeftovic <markjr(a)easydns.com> wrote: > Returning 127.0.0.2 on everything would indeed be an ugly way to bow > out, but its been done before. Another RBL went out the same way > previously, can't remember which one (was it orbz?) it was more complicated than that. orbs went away without a clean shutdown plan, and one of the secondary DNS operators started answering with 127.0.0.2 to try and get people to stop querying his server. it worked, although with non-trivial pain attached. richard -- Richard Welty rwelty(a)averillpark.net Averill Park Networking 518-573-7592 Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security

1 0

is there still a BGP-understanding person at fast.net/netaxs?
by alex＠yuriev.com 26 Aug '03

26 Aug '03

Hello, Did anyone recently see anyone from fast.net that does not get confused by "show ip bgp <prefix>" output or did the bankruptcy force them to cut payroll so much that they cannot afford anyone but a Chubb Institute type? Thanks, Alex

2 2