February 2004 - NANOG - lists.nanog.org

RE: Stopping open proxies and open relays
by Michel Py 07 Feb '04

07 Feb '04

>> Adi Linden wrote: >> There are valid reasons not to run antivirus software, > Robin Lynn Frank > And they are? Some Mac and *nix users (not me) think their platform is invulnerable, therefore there is no need to run anti-virus software as it costs money and consumes CPU and memory. Michel.

1 0

RE: greylisting
by Dmitri Krioukov 07 Feb '04

07 Feb '04

bingo! (did you also mean bgp? :) -- dima. > -----Original Message----- > From: Suresh Ramasubramanian [mailto:suresh@outblaze.com] > Sent: Friday, February 06, 2004 10:39 PM > To: Dmitri Krioukov > Cc: nanog(a)merit.edu > Subject: Re: greylisting > > > Dmitri Krioukov [2/7/2004 9:03 AM] : > > > well, it might not scale only at the global scale :) > > (while its current 'deployment' is far from being global > > as far as i can see) > > So something that is fundamentally unscalable is good when deployed > locally, and bad when it becomes a lot more popular? > > -- > srs (postmaster|suresh)(a)outblaze.com // gpg : EDEDEFB9 > manager, outblaze.com security and antispam operations

1 0

greylisting
by Dmitri Krioukov 07 Feb '04

07 Feb '04

can someone provide any comments on greylisting? how effective is it, etc? thanks, -- dima.

3 3

RE: Verizon Mail Troubles
by Curtis Maurand 06 Feb '04

06 Feb '04

Hello all, Thanks to all who responded to my request for help with verizon email issues. Someone from Verizon did contact me and clued me in as to what was happening. It turns out procmail is rewriting a header with a fqdn for the mail server which doesn't have a specific mx record set for it. Again, Thanks to all who responded. Curtis Maurand Principal Maine Line Systems

1 0

Re: updated root hints file (fwd)
by bill 06 Feb '04

06 Feb '04

> Date: Fri, 30 Jan 2004 11:39:40 -0500 > To: bill <bmanning(a)karoshi.com> > Subject: Re: updated root hints file > > I thought the RSSAC site was www.root-servers.org. > root-servers.org is -NOT- the rssac site. --bill

5 6

RE: Verizon Mail Troubles
by Curtis Maurand 06 Feb '04

06 Feb '04

Hello all, Thanks to all who responded to my request for help with verizon email issues. Someone from Verizon did contact me and clued me in as to what was happening. It turns out procmail is rewriting a header with a fqdn for the mail server which doesn't have a specific mx record set for it. Again, Thanks to all who responded. Curtis Maurand Principal Maine Line Systems

1 0

RE: ISS X-Force Security Advisories on Checkpoint Firewall-1 and VPN-1
by Ingevaldson, Dan (ISS Atlanta) 06 Feb '04

06 Feb '04

ISS notified Check Point on 2/2/2004, and Check Point made their update for the FW-1 HTTP issue on 2/4/2004. It is our policy to only release public information when the affected vendor has published information and/or released a fix. Check Point only released one fix on 2/4/2004, not two fixes to address both issues. As stated in the ISS VPN-1 Advisory, Check Point no longer supports the VPN-1 4.1 line, and recommends that customers upgrade to NG. ------------------ Daniel Ingevaldson Director, X-Force R&D dsi(a)iss.net 404-236-3160 Internet Security Systems, Inc. The Power to Protect http://www.iss.net -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Steven M. Bellovin Sent: Thursday, February 05, 2004 2:56 PM To: Rubens Kuhl Jr. Cc: nanog(a)merit.edu Subject: Re: ISS X-Force Security Advisories on Checkpoint Firewall-1 and VPN-1 In message <02e501c3ec1f$9a833fe0$020ba8c0@NOTEBOOK>, "Rubens Kuhl Jr." writes: > > > >Isn't it curious that two unrelated issues have been reported to >CheckPoint at the same day and the patches came out on the same day ? >Am I too paranoid, or it seems that CheckPoint had previous knowledge >of the bugs and they agreed with ISS which date would be stated as >notification to CP to make it appears that a quick response (two days) >has been achieved on those issues ? Why is that bad? I have no objection to giving vendors a reasonable amount of time to fix problems before announcing the whole. Or is your point that two days hardly seems like enough time to develop -- and *test* -- a fix? --Steve Bellovin, http://www.research.att.com/~smb

1 0

Are SW upgrades needed in MPLS core networks?
by Pekka Savola 06 Feb '04

06 Feb '04

Hi, Just taking a quick poll, as we don't use MPLS and I think this is an interesting thing to know. One of the many (maybe misguided) arguments for MPLS is that you don't need to perform softwqare (or other similar) upgrades in the core network, and the "intelligence" is pushed to the to the edges of the MPLS cloud. I'd like to get a feel how correct this "argument" is in practice. So, if you have had to upgrade the core equipment, please tell. If you haven't (due to the "MPLS design"), that might be interesting as well. If you had to upgrade, please also indicate the reason for that (fixing bugs ("minor upgrade")? providing new features, if so which features? etc.?) Please respond off-list if you feel so. Thanks. -- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

6 14

Re: Are SW upgrades needed in MPLS core networks?
by Rubens Kuhl Jr. 06 Feb '04

06 Feb '04

> > I don't get why Juniper and Cisco trie-lookup forwarding would differ in > > comparing IPv4 and IPv6; Juniper does a 8+1+1+1+1+... search until a leaf > > node is found, while Cisco does 16+8+8 (or something near it but still with > > 3 phases); for both architetures, IPv6 longer addresses implies walking more > > deeply into the tree in order to find where to route. > > ahhh. you have been watching marketing architecture presentations. Usually it's a good way to learn about the architecture of the competitor's(i.e, not the company of the presenter) router; watch both of them and you get a pretty good image of what they are. > otoh, we have been using real routers. Those real routers have real architetures with what behaviour regarding prefix-length ? Rubens

1 0

ev1.net security contact
by John Obi 06 Feb '04

06 Feb '04

Hello, Can I get someone from ev1.net contact me off the list? it's security/hacking issue. Thanks, -J __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html

1 0