- NANOG - lists.nanog.org

Re: Security over SONET/SDH
by Larry Sheldon 24 Jun '13

24 Jun '13

On 6/23/2013 9:18 PM, Glen Turner wrote: > > On 23/06/2013, at 1:21 PM, William Allen Simpson wrote: > >> What security protocols are folks using to protect SONET/SDH? At >> what speeds? > > > "Excuse me NSA, can I have export approval for one KG-530 SDH > encryptor?" What are the odds :-) > > And how would we know that the "export model" isn't simply providing > a more convenient backdoor for the NSA? I assumed that the latter is what "NSA Approved" means. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Re: PDU recommendations
by tritran＠cox.net 24 Jun '13

24 Jun '13

Eaton have 1U UPS that provide the same runtime as a 2U APC. Are they any good? ------Original Message------ From: Nick Khamis To: Chris Dunn Cc: North American Network Operators Group Subject: Re: PDU recommendations Sent: Jun 23, 2013 4:40 PM And now for the stupid question. Is there an APC UPS in a U form factor with sufficient outlets that can act kind of like a PDU, only better? PS If it has stonith capabilities ever better!!! Kind Regards, Nick.

1 0

Re: Security over SONET/SDH
by Scott Weeks 23 Jun '13

23 Jun '13

--- william.allen.simpson(a)gmail.com wrote: From: William Allen Simpson <william.allen.simpson(a)gmail.com> On 6/23/13 12:48 AM, Scott Weeks wrote: > By security protocol do you mean encrypting the traffic? > Like what a Fastlane does? > > http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/G… > That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE? Hopefully, other folks are securing their PPP or ethernet packets? --------------------------------------------------------------- A network that's going to change very soon. :-) What I meant is that what you mean by security protocols. I didn't follow completely. scott

1 0

Re: PDU recommendations
by tritran＠cox.net 23 Jun '13

23 Jun '13

APC is solid. Their newer line can provide outlet metering. WTI is also good...they support redundant circuits. I've seen Baytech died after just unplugging a server. ------Original Message------ From: shawn wilson To: North American Network Operators Group Subject: PDU recommendations Sent: Jun 23, 2013 8:37 AM We currently use Triplite stuff but they've got an issue where after a few minutes, they stop accepting new tcp connections. We're adding a new 30A circuit and I'm thinking of going with APC (ran them in the past and never had any issues). However, I figured I'd see if there was a better brand / specific model recommendations for quality or bang / buck? Specs: 30A 24+ port 0U, managed (with ssh), lcd use display.

6 5

net neutrality and peering wars continue
by Randy Bush 22 Jun '13

22 Jun '13

good article by Stacey Higginbotham http://gigaom.com/2013/06/19/peering-pressure-the-secret-battle-to-control-…

25 44

Need AT&T Contact
by Meshier, Brent 22 Jun '13

22 Jun '13

AT&T screwed up the porting of our DIDs and we’re completely down, account rep has left for the weekend. Anyone have a contact? Brent Meshier ▪ Director Information Technology ▪ Amherst Holdings LLC 7801 North Capital of Texas Hwy ▪ Suite 300 ▪ Austin, TX 78731 512.342.3010 ▪ Fax 512.342.3097▪ Cell 650-278-3137 www.amherst.com<http://www.amherst.com/> ▪ bmeshier(a)amherst.com<mailto:bmeshier@amherst.com> **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holdings, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.

2 1

Re: net neutrality and peering wars continue
by Randy Bush 22 Jun '13

22 Jun '13

>> i have not been able to find it easily, but some years back rexford >> and others published on a crypto method for peers to negotiate >> traffic adjustment between multiple peering points with minimal >> disclosure. it was a cool paper. > I don't know Jen's work on this off the top of my head, but Ratul > Mahajan had some papers on this too (for his dissertation). One is > called Wiser. good stuff. but i thought the paper i had in mind was normal bgp and the exchanges were negotiations of prefix and med policies at mutual peering points using crypto to cloak one's internals. but i could easily be wrong. randy

1 0

This is a coordinated hacking. (Was Re: Need help in flushing DNS)
by jamie rishaw 22 Jun '13

22 Jun '13

This is most definitely a coordinated and planned attack. And by 'attack' I mean hijacking of domain names. I show as of this morning nearly fifty thousand domain names that appear suspicious. I'm tempted to call uscentcom and/or related agencies (which agencies, who the hell knows, as ICE seems to have some sort of authority over domains (nearly two hundred fifty of them as I type this in COM alone and another thirty-some in NET). Anyone credentialed (credentialed /n/., "I know you or know of you,") wanting data, e-mail me off-list for some TLD goodness. On Thu, Jun 20, 2013 at 12:29 PM, Phil Fagan <philfagan(a)gmail.com> wrote: > Agree'd in these "smaller" scenario's I just wonder if in a larger scale > scenario, whatever that might look like, if its necessary. Whereby many > organizations who provide "services" are effected. Perhaps the result of a > State led campaign ....topic for another day. > > > > > On Thu, Jun 20, 2013 at 11:25 AM, Paul Ferguson <fergdawgster(a)gmail.com > >wrote: > > > I am betting that Netsol doesn't need any more "coordination" at the > > moment -- their phones are probably ringing off-the-hook. There are > > still ~400 domains still pointing to the ztomy NS: > > > > > > ; <<>> DiG 9.7.3 <<>> @foohost parsonstech.com NS > > ; (1 server found) > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49064 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 > > > > ;; QUESTION SECTION: > > ;parsonstech.com. IN NS > > > > ;; ANSWER SECTION: > > parsonstech.com. 172800 IN NS ns2617.ztomy.com. > > parsonstech.com. 172800 IN NS ns1617.ztomy.com. > > > > ;; Query time: 286 msec > > ;; SERVER: 127.0.0.1#53(127.0.0.1) > > ;; WHEN: Thu Jun 20 19:16:25 2013 > > ;; MSG SIZE rcvd: 81 > > > > - ferg > > > > On Thu, Jun 20, 2013 at 10:13 AM, Phil Fagan <philfagan(a)gmail.com> > wrote: > > > > > I should caveat.....coordinate the "recovery" of. > > > > > > > > > On Thu, Jun 20, 2013 at 11:10 AM, Brandon Butterworth > > > <brandon(a)rd.bbc.co.uk>wrote: > > > > > >> > Is there an organization that coordinates outages like this amongst > > the > > >> > industry? > > >> > > >> No, usually they are surprise outages though Anonymous have tried > > >> coordinating a few > > >> > > >> brandon > > >> > > > > > > > > > > > > -- > > > Phil Fagan > > > Denver, CO > > > 970-480-7618 > > > > > > > > -- > > "Fergie", a.k.a. Paul Ferguson > > fergdawgster(at)gmail.com > > > > > > -- > Phil Fagan > Denver, CO > 970-480-7618 > -- Jamie Rishaw // .com.arpa@j <- reverse it. ish. [Impressive C-level Title Here], arpa / arpa labs

23 33

PRISM: NSA/FBI Internet data mining project
by Jay Ashworth 22 Jun '13

22 Jun '13

Has fingers directly in servers of top Internet content companies, dates to 2007. Happily, none of the companies listed are transport networks: http://www.washingtonpost.com/investigations/us-intelligence-mining-data-fr… Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

48 108

Need help in flushing DNS
by Zaid Ali Kahn 22 Jun '13

22 Jun '13

Reaching out to DNS operators around the globe. Linkedin.com has had some issues with DNS and would like DNS operators to flush their DNS. If you see www.linkedin.com resolving NS to ns1617.ztomy.com or ns2617.ztomy.com then please flush your DNS. Any other info please reach out to me off-list. Zaid

20 29