- NANOG - lists.nanog.org

Arguing against using public IP space
by Jason Lewis 17 Nov '11

17 Nov '11

I don't want to start a flame war, but this article seems flawed to me. It seems an IP is an IP. http://www.redtigersecurity.com/security-briefings/2011/9/16/scada-vendors-… I think I could announce private IP space, so doesn't that make this argument invalid? I've always looked at private IP space as more of a resource and management choice and not a security feature.

29 96

Last call for participation in the Arbor 2011 WISR opsec survey.
by Dobbins, Roland 17 Nov '11

17 Nov '11

[Apologies if you've already seen this message in other forums.] We'd be grateful if folks who've yet to do so would take a few minutes to participate in the 2011 WISR opsec survey - responses will be tabulated on Sunday, 20Nov11, and input from the operational community is greatly appreciated! This link redirects to the http/s-enabled survey tool: <http://www.arbornetworks.com/survey/ISR2011> Thanks much! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> The basis of optimism is sheer terror. -- Oscar Wilde

1 0

Re: OT -- seeking a knowledgable AS 701 technical contact.
by Christopher Morrow 17 Nov '11

17 Nov '11

sorry grant :( (gmail user fail) On Wed, Nov 16, 2011 at 8:12 PM, Christopher Morrow <morrowc.lists(a)gmail.com> wrote: > On Wed, Nov 16, 2011 at 8:12 PM, Christopher Morrow > <morrowc.lists(a)gmail.com> wrote: >> what are you trying to do with ftp.uu.net? is it broken in some way? >> > > is it possibly that no login info works on it? > > $ ftp ftp.uu.net > Connected to ftp.uu.net. > 220 FTP server ready. > Name (ftp.uu.net:morrowc): anonymous > 331 Guest login ok, send your complete e-mail address as password. > Password: > 530 Login incorrect. > Login failed. > ftp> quit > > >> On Wed, Nov 16, 2011 at 5:51 PM, Grant Ridder <shortdudey123(a)gmail.com> wrote: >>> Hi, >>> >>> If i remember right, Verizon Business has 3 or 4 different help desks. >>> From my experience, none of the help desks know anything about the others. >>> I dont have any numbers off hand unfortunately. >>> >>> -Grant >>> >>> On Wed, Nov 16, 2011 at 4:35 PM, Robert Bonomi <bonomi(a)mail.r-bonomi.com>wrote: >>> >>>> >>>> Apologies for the noise, but I have been absolutely unable -- despite >>>> literally *hours* of trying --to contact anyone at _any_ of the published >>>> Verizon Business phone numbers who has any comprehension of what I am >>>> talking about -- to wit: >>>> >>>> "I am looking for someone with _any_ awareness/knowledge of Verizon >>>> Business's public-access anonymous FTP server, with the hostname >>>> 'ftp.uu.net'." >>>> >>>> The published Verizon Business technical contact number -- both in 'whois' >>>> for uu.net, and Jared's NOC contact list is only the 'ticket center', and >>>> won't open a ticket for someone who is not Verizon customer. >>>> >>>> "Customer service" doesn't know what 'ftp' is, and vacillates between >>>> thinking it is a circuit problem, or that I am having a problem with -my- >>>> domain. >>>> >>>> Call-transfer to 'technical support' was answered by someone handling >>>> 'delinquent payments'. Another transfer attempt ended up on somebody's >>>> cell phone. >>>> >>>> >>>> >>>> >>> >> >

1 0

OpenSource IPTV and VoD Solution
by Meftah Tayeb 16 Nov '11

16 Nov '11

Hello Guys i'm looking for a solution to stream diferent DVB transponders through RTSP VLC look like complicated a bit i use MumuDVB for Multicasting but i didn't found anything for RTSP any help Would by welcome thank you Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information from ESET NOD32 Antivirus, version of virus signature database 6633 (20111115) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

5 6

Security Contact from k12.fl.us
by Nathan Eisenberg 16 Nov '11

16 Nov '11

Please contact me off-list.

1 2

[ISC Security Advisory] BIND 9 Resolver crashes after logging an error in query.c
by Peter Losher 16 Nov '11

16 Nov '11

BIND 9 Resolver crashes after logging an error in query.c Summary: Organizations across the Internet reported crashes interrupting service on BIND 9 nameservers performing recursive queries. Affected servers crashed after logging an error in query.c with the following message: "INSIST(! dns_rdataset_isassociated(sigrdataset))" Multiple versions were reported being affected, including all currently supported release versions of ISC BIND 9. ISC is actively investigating the root cause and has produced patches which prevent the crash. Further information will be made available soon. CVE: CVE-2011-4313 Document Version: 1.1 Document URL: http://www.isc.org/software/bind/advisories/cve-2011-4313 Posting date: 16 Nov 2011 Program Impacted: BIND Versions affected: All currently supported versions of BIND, 9.4-ESV, 9.6-ESV, 9.7.x, 9.8.x Severity: Serious Exploitable: Remotely Description: An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. ISC is working on determining the ultimate cause by which a record with this particular inconsistency is cached.At this time we are making available a patch which makes named recover gracefully from the inconsistency, preventing the abnormal exit. The patch has two components. When a client query is handled, the code which processes the response to the client has to ask the cache for the records for the name that is being queried. The first component of the patch prevents the cache from returning the inconsistent data. The second component prevents named from crashing if it detects that it has been given an inconsistent answer of this nature. CVSS Score: 7.8 CVSS Equation: (AV:N/AC:L/Au:N/C:N/I:N/A:C) Workarounds: No workarounds are known. The solution is to upgrade. Upgrade BIND to one of the following patched versions: BIND 9.8.1-P1, 9.7.4-P1, 9.6-ESV-R5-P1, 9.4-ESV-R5-P1 Active exploits: Under investigation Solution: Patches mitigating the issue are available at: https://www.isc.org/software/bind/981-p1 https://www.isc.org/software/bind/974-p1 https://www.isc.org/software/bind/96-esv-r5-p1 https://www.isc.org/software/bind/94-esv-r5-p1 ISC is receiving multiple reports and working with multiple customers on this issue. Please E-mail all questions, packet captures, and details to security-officer(a)isc.org We very much appreciate all reports received on this issue. Related Documents: Do you have Questions? Questions regarding this advisory should go to security-officer(a)isc.org. ISC Security Vulnerability Disclosure Policy: Details of our current security advisory policy and practice can be found here: https://www.isc.org/security-vulnerability-disclosure-policy Legal Disclaimer: Internet Systems Consortium (ISC) is providing this notice on an "AS IS" basis. No warranty or guarantee of any kind is expressed in this notice and none should be implied. ISC expressly excludes and disclaims any warranties regarding this notice or materials referred to in this notice, including, without limitation, any implied warranty of merchantability, fitness for a particular purpose, absence of hidden defects, or of non-infringement. Your use or reliance on this notice or materials referred to in this notice is at your own risk. ISC may change this notice at any time. A stand-alone copy or paraphrase of the text of this document that omits the document URL is an uncontrolled copy. Uncontrolled copies may lack important information, be out of date, or contain factual errors. -- [ plosher(a)isc.org | Senior Operations Architect | ISC | PGP E8048D08 ]

1 0

state.va.us contact on list?
by David Hiers 16 Nov '11

16 Nov '11

We are aparently being attacked from a server in state.va.us. If there is a contact for state.va.us on the list, please contact me off list. Thanks, David

1 1

Re: Arguing against using public IP space
by Eric C. Miller 16 Nov '11

16 Nov '11

Not sure if anyone has thought of it like this, but: Air Gap is still only as secure as the people with access to it. NAT and firewalls provide a compromise between security and connectivity. But remember that at a power plant, the PBX system still connects to the outside world, and there is a phone in the control room. What stops a nefarious social hacker from calling up the control room and convincing the 3rd shift operator to stop producing power (claiming to be from the regional authority)? Caller-ID can be hacked. My personal belief is that all layers of the OSI/DOD model should assume that the adjacent lower level can and will be compromised at some point and measures should be put in place to encrypt or authenticate messages. Unfortunately for us, our critical infrastructure in this country still operates on outdated security-less network architectures like ArcNET. Even most of the PLCs in use at power plants utilize no security or have simple passwords like "supervisor" and "operator." The US gov's NERC has random inspections for CIP compliance, but I feel that they happen so infrequently, that nothing will be done in time to adequately protect us from certain dangers that loom. Eric Miller Network Engineering Consultant

1 0

AS9929 - Anyone with Clue
by Mark Tinka 16 Nov '11

16 Nov '11

Hi all. If there's anyone on here from AS9929 (Chine Netcom) with some clue, kindly ping me off-list. Thanks. Cheers, Mark.

1 0

Foundry MRP cohabit with STP
by Viet-Hung Ton 16 Nov '11

16 Nov '11

Hi, We are deploying a network using MRP of Foundry (Metro Ring Protocol of Brocade now) and STP (in this case Rapid Spanning Tree Protocol-802.1W). The problem is that in some networking segment, we must enable both of protocols in the same interfaces and vlans for the correct function of our network. By the way, as MRP and STP are 2 protocols of loop prevention, the devices of Brocade force us choosing and activating just one among them that not our intention. Anybody has the same situation of some experiences in this case: how to make coexist these two protocols. (MRP and STP). Best thanks, Viet Ton.

3 2