May 2005 - NANOG - lists.nanog.org

Need tech contact at Akamai
by William Caban 12 May '05

12 May '05

Need tech contact at Akamai for troubleshooting access to some domains hosted by them. --William Caban Net. Admin - HPCf University of Puerto Rico

2 1

Blocking port udp/tcp 1433/1434
by Joe Maimon 12 May '05

12 May '05

Is there still justification for denying transit for ms-sql slammer ports? Thanks, Joe

11 16

Charter Internet Contact
by Todd Mitchell - lists 12 May '05

12 May '05

Can someone from Charter's NOC group please contact me off list? Recurring problems with a node in Sacramento. Thanks. Todd

1 0

Cisco Firewall Services Module TCP ACL Bypass Vulnerability
by Fergie (Paul Ferguson) 12 May '05

12 May '05

Via FrSIRT: http://www.frsirt.com/english/advisories/2005/0527 - ferg [snip] * Technical Description * A new vulnerability was identified in Cisco products, which may be exploited by attackers to bypass the security restrictions. The flaw resides in the Cisco Firewall Services Module (FWSM) when configured for exceptions in content filtering, which may be exploited by attackers to bypass access-list entries intended to explicitly filter inbound TCP packets. * Affected Products * Catalyst 6500 series switches Cisco 7600 series routers * Solution * Upgrade to Cisco FWSM version 2.3(2) : http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml [snip] -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: what will all you who work for private isp's be doing in a few years?
by Ross Hosman 12 May '05

12 May '05

Not pointing any fingers but many of you think these small ISP's are just going to die off instead of adapt. Wireless is becoming a better and more reliable technology that in the future will be able to provide faster service then FTTH. I know of atleast one small ISP in Michigan that went from dial-up to deploying wireless. With WiMAX coming out I think you will see a number of smaller ISPs switching to it as a service. It is also much cheaper to deploy a wireless network. Me personally, I think wireless is the future for residential internet/tv/phone. Ross Hosman Charter Communcations > --- Steve Sobol <sjsobol(a)JustThe.net> wrote: > > > > Fred Heutte wrote: > > > (1) There will be a market for independent ISPs > as > > long CLECs > > > > I think a more appropriate term would be ALEC > > > > (anti-competitive local exchange carrier) > > > > ...That having been said, the problem with the > small > > guys providing access is > > they can't generally achieve the economies of > scale > > that allow them to compete > > with the big guys. > > > > I'm on a Charter cablemodem, 3mbps down x 256kbps > > up, $39.95/month. Verizon is > > building out FTTH in this area and they're going > to > > be offering 5x2 for $39.95 > > or 10x5 for $49.95, IIRC. Those are all > residential > > prices, but Charter's > > actually pretty competitive on business rates too. > > > > And yes, there are people who value service over > > price, but the price > > differential is only going to get worse. > > > > > > -- > > JustThe.net - Apple Valley, CA - > http://JustThe.net/ > > - 888.480.4NET (4638) > > Steven J. Sobol, Geek In Charge / > > sjsobol(a)JustThe.net / PGP: 0xE3AE35ED > > > > "The wisdom of a fool won't set you free" > > --New Order, "Bizarre Love Triangle" > > > Ross Hosman rosshosman(a)yahoo.com

1 0

Re: what will all you who work for private isp's be doing in a few years?
by Ross Hosman 12 May '05

12 May '05

Not pointing any fingers but many of you think these small ISP's are just going to die off instead of adapt. Wireless is becoming a better and more reliable technology that in the future will be able to provide faster service then FTTH. I know of atleast one small ISP in Michigan that went from dial-up to deploying wireless. With WiMAX coming out I think you will see a number of smaller ISPs switching to it as a service. It is also much cheaper to deploy a wireless network. Me personally, I think wireless is the future for residential internet/tv/phone. Ross Hosman Charter Communcations --- Steve Sobol <sjsobol(a)JustThe.net> wrote: > > Fred Heutte wrote: > > (1) There will be a market for independent ISPs as > long CLECs > > I think a more appropriate term would be ALEC > > (anti-competitive local exchange carrier) > > ...That having been said, the problem with the small > guys providing access is > they can't generally achieve the economies of scale > that allow them to compete > with the big guys. > > I'm on a Charter cablemodem, 3mbps down x 256kbps > up, $39.95/month. Verizon is > building out FTTH in this area and they're going to > be offering 5x2 for $39.95 > or 10x5 for $49.95, IIRC. Those are all residential > prices, but Charter's > actually pretty competitive on business rates too. > > And yes, there are people who value service over > price, but the price > differential is only going to get worse. > > > -- > JustThe.net - Apple Valley, CA - http://JustThe.net/ > - 888.480.4NET (4638) > Steven J. Sobol, Geek In Charge / > sjsobol(a)JustThe.net / PGP: 0xE3AE35ED > > "The wisdom of a fool won't set you free" > --New Order, "Bizarre Love Triangle" >

1 0

Vonage To Make 911 An 'Opt-Out' Option
by Fergie (Paul Ferguson) 12 May '05

12 May '05

Just as an FYI: In an interesting turn of events (e.g. multiple states suing Vongae, multiple RBOC's now offering to make their E911 infrastructure available to VoIP providers in the face of ineveitable FCC madates to do so, etc.), Vonage is saying that they will make their E911 "service" and "opt-out" option, instead of an "opt-in" option. http://www.advancedippipeline.com/163101312 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

NYT: Internet attack called broad and long lasting
by Sean Donelan 12 May '05

12 May '05

Internet Attack Called Broad and Long Lasting by Investigators By JOHN MARKOFF and LOWELL BERGMAN Published: May 10, 2005 SAN FRANCISCO, May 9 - The incident seemed alarming enough: a breach of a Cisco Systems network in which an intruder seized programming instructions for many of the computers that control the flow of the Internet. [...] See the New York Times for the rest of the story.

5 11

Malicious DNS request?
by Joe Shen 12 May '05

12 May '05

Hi, In past days I noticed the nxdomain statistics in named.stats keeps increasing.( I run it every 5 min) By tcpdump, it's found a remote computer keep asking address for record like 999d38e693b9e6293b450.0existence.com, 60d38e693b9e6293b450.0be6c1xfa.net. is that a virus affacted computer? How could such request be filtered or minimize its affaction on DNS server? regards Joe __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

5 5

Re: competitive network overbuilds
by Frank Coluccio 12 May '05

12 May '05

David Barak noted: >>It should be noted that the same statement applies to DSL, FTTH, or RFC-1419 service as well: anyone who wants to CAN do an overbuild, and in fact that would probably be the best for customers in the long-run. A very timely comment, and IMO you are correct. Especially with respect to "that would probably be the best for customers in the long-run." ;) But there obviously are limits. I have at times been involved with, and seen the work of others who have attempted to come up with a number that defines just how many horizontal service providers - at the various layers of the stack -- with glass-wireless at 1, gigabit Ethernet at 2, and Internet at 3 -- a given service territory could support. Analysis must take into account the needs of the citizens being served; the SPs' viability and financial sustainability; and the sheer logistics of the situation, given the limitations of time, space and the need for elegant hand offs to customers through the use of a minimal set of channel interfaces and speeds. Given an area where poles and underground conduits are already occupied with at least two wireline heavyweights, namely the duopoly players who are happily dancing to the tune of "inter-modal" competition that was given a blessing by the FCC, plus the electric company on the ground, and three-to-four wireless providers who already are renting space on existing tower structures for WiMAX, how may more trenches, poles and towers can the support structures and rights of way in many populated areas support? Consider a simple example, albeit, one that is more easily stated than accomplished, granted: A fiber condominium builder receives permission and a franchise to overbuild glass onto an entire town's existing copper footprint, resulting in a shared Layer 1 resource that allows upper layer Service Providers to rent fiber from them in the forms of feeder, distribution and drop cables right up to each end point. Go! frank(a)fttx.org --------- On Wed May 11 17:08 , David Barak sent: > > >--- "Sam Hayes Merritt, III" sam(a)themerritts.org> >wrote: > >> You are always free to obtain a franchise and run >> your own coax. Just >> because the incumbent cable company does not allow >> every tom dick and >> harry ISP to use their copper doesn't mean you can't >> provide the same >> service. > >It should be noted that the same statement applies to >DSL, FTTH, or RFC-1419 service as well: anyone who >wants to CAN do an overbuild, and in fact that would >probably be the best for customers in the long-run. > > > >David Barak >Need Geek Rock? Try The Franchise: >http://www.listentothefranchise.com > > > >__________________________________ >Yahoo! Mail Mobile >Take Yahoo! Mail with you! Check email on your mobile phone. >http://mobile.yahoo.com/learn/mail

1 0