January 2005 - NANOG - lists.nanog.org

Spamhaus problems anybody?
by Chris Allermann 25 Jan '05

25 Jan '05

Has anybody here been experiencing any abnormalities with the spamhaus SBL-XBL lists? I've gotten an alarming number of complains in the last 24 hours regarding mail rejections from IP's that do not appear to be listed in the SBL-XBL databse.

2 1

Notification of Successful Emergency Network Maintenance (fwd)
by Chris Moody 25 Jan '05

25 Jan '05

Here's some info indicating that the issue was -NOT- the Cisco VoIP issue. Cheers, -Chris ---------- Forwarded message ---------- Date: Monday, 24 Jan 2005 06:09:19 From: TWTC Alert Notification <ipalert(a)twtelecom.net> To: ITOC(a)qualcomm.com Subject: Notification of Successful Emergency Network Maintenance 24 January 2005. 6:00 a.m. MST Confidential Communiqué to Time Warner Telecom Customers We successfully completed installation of new network software code during our regularly scheduled maintenance windows this past weekend. Only minor disruptions occurred. We especially thank our customers for their patience while we performed this essential work and apologize for any inconvenience this may have caused. When we were notified by one of our network equipment providers about a possible security vulnerability to existing code revisions in their equipment we use in our network, we took immediate preventive action. This security vulnerability had the potential to impact Internet-based services delivered by service providers worldwide, not just Time Warner Telecom. Our top priority is always to protect our customers’ network and it is our policy to communicate in advance about any preventive measures that we plan to implement. The action we just completed should prevent service disruptions that could occur as a result of any network attack. We apologize for any inconvenience this may cause and thank you for your patience during this preventive action. Please call us at 1-800-829-0420, if you have additional questions. Sincerely, Time Warner Telecom

1 0

Sites wanted for research boxes
by David G. Andersen 24 Jan '05

24 Jan '05

I sent a similar mail out a couple of years ago and greatly appreciate the response I got. Time and entropy have done their dirty work, so we're looking for a few (more) good hosts. We've been running a moderate sized (30 node) overlay network and general network research testbed for the last 4 or 5 years. The testbed started as part of the Resilient Overlay Networks project at MIT, and has evolved to support a variety of research by about 15 network researchers at a number of institutions. At this time, the primary institutions involved in the testbed management are MIT, CMU, NYU, and the University of Utah. (Regular NANOG attendees may know Nick Feamster from some talks he's given about routing and automated tools for managing and debugging sets of router configurations. Nick's the MIT contact for the testbed these days.) Our major goal for the testbed is to have access to a "realistic" set of Internet paths - we want to make sure that network research actually takes place in the real world, not a perfect isolated environment. Which is where nanog comes in... What we need is a machine we can place on your network. We will be happy to give you the machine (a PC), which you can use as well for your own work. Ideally, it is best if you can place it outside your firewall (if you have one), since that may simplify logistics at your end. This PC will run a FreeBSD kernel provided by us; all you need to do is to configure (or DHCP) an IP address, and we'll be all set. The machine will have a 10/100 Ethernet interface. We have two options for bandwidth usage. If you'll let us, we'd love to be able to consume a fair bit of it from time to time. Some of our researchers are experimenting with data transfer protocols and more efficient ways of shipping things (like news) around the 'net. However, if you're bandwidth constrained, we do a lot of measurements and other low-bandwidth experiments that benefit greatly from just having a fairly non-intrusive presense. We'd love a BGP feed, or even internal routing feeds, for data collection. We won't be sniffing packets on the network, etc. and we will work to ensure that the machine is as secure as we can make it - most services will be disabled, and the running services will be firewalled, and we'll keep the machine up to date with security patches. (No problems yet, fingers crossed...) What you get in return: a) A locally hosted stratum 1 time source that you're welcome to use or let your clients use. Our machines are CDMA synchronized. b) Our eternal gratitude, love, and acknowledement (and participation / input, if you are interested!) in our research. This also involves free beer if you swing by Pittsburgh. :) c) One of our goals is to create tools that run on the testbed that are useful to their hosts for things like distributed debugging, or the aforementioned BGP configuration debugging tools. We also collect BGP feeds and have a nice interface for searching through the historical data for figuring out what went wrong on the 'net at a particular time. d) Ask! If you have specific network problems/etc., we're always looking for more problems to solve. Your problems are our dinners; we'd like to know what they are and try to create solutions. Please let us know if you can help; we'd appreciate it very much! If so, could you please tell us if: 1. You prefer a small (1U) rack-mountable machine for us to send you as a package, OR 2. If you have, and are willing to, spare your own PC, we can give you a disk image that you can burn, insert, enter an IP address, and be good to go. -Dave -- work: dga at cs.cmu.edu du me: dga(a)pobox.com Carnegie Mellon University http://www.angio.net/ Department of Computer Science

1 0

At the risk of being declared off topic
by Owen DeLong 24 Jan '05

24 Jan '05

I realize that this is more of an IETF issue than a NANOG one, but, I'd like to find a couple of people with some protocol background and a strong operational background that would be interested in trying to see if we can come up with a way to develop a version of IP which did not require a flag day, but, would facilitate a transition towards an IP where the End System Identifier (Host Address) could be globally unique to a given system (think PI space) and essentially a layer 4 construct, but, the Routing Tag (Network Address) could, instead, be dynamically determined and separate information. I'm thinking along the lines of a new protocol which could look up an End System Identifier against a local server and receive a response which was a list of valid Routing Tags for that destination. Sort of a cross between DNS and ARP. I don't want to ignore security and would like to see at least the option if not requirement to crypto- sign the information. Ideally, I'd like to find a couple of people in the Bay Area so we can get together for a white-board discussion. I've got a few ideas rattling around in my head about how it might work, but, I'd like to collaborate with some others before proposing something to IETF. I figured NANOG was a good place to start looking for OP-EX relevant to this issue. Thanks, Owen -- If it wasn't crypto-signed, it probably didn't come from me.

3 3

Those interested in NANOG governance, please read...
by Daniel Golding 24 Jan '05

24 Jan '05

I'd like to remind everyone of the Sunday evening meeting at the upcoming NANOG conference in Las Vegas. Everyone who has an interest in how NANOG is administered, be it the mailing list or conferences, should attend. Participation is vital in making the community's voice heard. If you think the status-quo is ok or if you would like to see some changes made, participation will ensure that your voice is heard. A phone bridge and IRC-cast are being worked on now. More information on these should be available by the end of the week. Also, please take a chance to visit http://www.nanog-reform.org. If you agree with the contents, please endorse it by "signing". Thanks. We will now return to our regularly scheduled thread, which seems to be intent on convincing people to violate their NDA's with a major network equipment vendor :) Thanks, Daniel Golding

3 2

ATT.NET Troubles
by Kevin Marvin 24 Jan '05

24 Jan '05

I cannot get to anyone with an email address of att.net. They claim that I am not on a BL, but give me no more information. Anyone know who I can contact there to figure this out? Thanks, Kevin

1 0

BGP AS Path Quick Poll
by Blaine Christian 24 Jan '05

24 Jan '05

If you folks could take just a minute to answer a question (off list please). Do you ever prepend AS's, other than your own or private ones, to your AS path? ---form--- YES: NO: ---endform--- ----formsample---- YES: NO:X ----endformsample----

1 0

GSLB advice
by Matt Bazan 24 Jan '05

24 Jan '05

We're looking to dip our toes into the global server load balancing arena and I'd like to get your advice on the following: 1) For those of you running a GLSB solution do you perform this 'in house' or is it outsourced? 2) If running in-house, what gear do you use and how satisfied with it have you been? Thanks group, Matt

4 3

Emergency Internet Backbone Provider Maintenance Tonight
by Darrell Kristof (CE CEN) 24 Jan '05

24 Jan '05

All: Has anyone heard about some carriers doing emergency maintenance tonight on Internet routers due to a code vulnerability? I'm trying to find out what vendor it involves and the details behind it. I understand it's still under NDA, but I'm sure someone out there knows more. Thanks, - Darrell ====================================================================== Darrell Kristof, CISSP, CCNP, TICSA Network Manager/Team Leader Whole Foods Market, Corporate Offices

11 11

Re: Emergency Internet Backbone Provider Maintenance Tonight
by Fergie (Paul Ferguson) 23 Jan '05

23 Jan '05

Agreed. I think it is *very* unlikely that a VoIP call-processing bug would be the reason for core router "emergency" code upgrades. - ferg -- Petri Helenius <pete(a)he.iki.fi> wrote: Todd Mitchell - lists wrote: > > On 22/01/2005 8:52 PM Darrell Kristof (CE CEN) wrote: > > > Has anyone heard about some carriers doing emergency maintenance > tonight > > on Internet routers due to a code vulnerability? I'm trying to find > out > > what vendor it involves and the details behind it. > > Perhaps due to the vulnerabilities mentioned below. > Very unlikely. Pete -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

4 3