- NANOG - lists.nanog.org

Pointer for documentation on actually delivering IPv6
by Mark Radabaugh 13 Dec '10

13 Dec '10

Probably a case of something being blindingly obvious but... I have seen plenty of information on IPv6 from a internal network standpoint. I have seen very little with respect to how a ISP is supposed to handle routing to residential consumer networks. I have seen suggestions of running RIPng. The thought of letting Belkin routers (if you can call them that) into the routing table scares me no end. Is this way easier than I think it is? Did somebody already write the book that I can't find? -- Mark Radabaugh Amplex mark(a)amplex.net 419.837.5015

24 31

Re: Amazon.co.uk, and most of Amazon Europe, appears to be down.
by andrew.wallace 12 Dec '10

12 Dec '10

Thenextweb have been quick to push out speculation - http://thenextweb.com/uk/2010/12/12/amazon-co-uk-and-de-are-down-is-anonymo… Andrew ----- Original Message ----- From:Wil Schultz <wschultz(a)bsdboy.com> To:North American Network Operators Group <nanog(a)nanog.org> Cc: Sent:Sunday, 12 December 2010, 21:33:29 Subject:Amazon.co.uk, and most of Amazon Europe, appears to be down. Unknown if this is due to the recent doings of late, but it appears as if Amazon Europe appears to be down. The anon's are definitely trying to cause disruptions, I find it difficult to believe that they are the actual cause. Time will tell. -wil

1 0

Amazon.co.uk, and most of Amazon Europe, appears to be down.
by Wil Schultz 12 Dec '10

12 Dec '10

Unknown if this is due to the recent doings of late, but it appears as if Amazon Europe appears to be down. The anon's are definitely trying to cause disruptions, I find it difficult to believe that they are the actual cause. Time will tell. -wil

2 1

cablevision?
by Ben C. 12 Dec '10

12 Dec '10

Hi all, Does anybody know anything about a large cablevision outage this morning? Their support phone lines are busy signals... Thanks Ben

2 1

Prepare for Openleaks and other copycats
by Hank Nussbacher 12 Dec '10

12 Dec '10

http://www.independent.co.uk/news/world/politics/wikileaks-splits-as-volunt… -Hank

1 0

Re: Mastercard problems
by andrew.wallace 12 Dec '10

12 Dec '10

I would say the attack falls under the jurisdiction of the US secret service since this is an attack on the financial system. "Today the agency's primary investigative mission is to safeguard the payment and financial systems of the United States." --- secretservice.gov Andrew ----- Original Message ----- From:Christopher Morrow <morrowc.lists(a)gmail.com> To:Jack Bates <jbates(a)brightok.net> Cc:"nanog(a)nanog.org" <nanog(a)nanog.org> Sent:Wednesday, 8 December 2010, 18:47:49 Subject:Re: Mastercard problems I know that the folks involved on the MC side already have this data, and that the fbi is interested in it. -chris

5 5

Re: LOIC tool used in the "Anonymous" attacks
by andrew.wallace 11 Dec '10

11 Dec '10

Like I said the other day on Cnet comments section, December 10, 2010 3:31 PM PST. "It is extremely easy to find out who everyone is, because the "anonymous" is decentralised and easy to infiltrate and manipulate." Andrew From: Leo Bicknell <bicknell(a)ufp.org> To: North American Network Operators Group <nanog(a)nanog.org> Cc: Sent: Saturday, 11 December 2010, 21:21:29 Subject: Re: LOIC tool used in the "Anonymous" attacks Perhaps the authors of the tool would rather keep the finite law enforcement busy rounding up clueless highschool kids who install this tool. In that sense it's both a network packet DDOS, and a law enforcement attacker DDOS. Brilliant in a way.

1 0

LOIC tool used in the "Anonymous" attacks
by Marshall Eubanks 11 Dec '10

11 Dec '10

Interesting analysis of the 3 "LOIC" tool variants used in the "Anonymous" Operation Payback attacks on Mastercard, Paypal, etc. http://www.simpleweb.org/reports/loic-report.pdf LOIC makes no attempt to hide the IP addresses of the attackers, making it easy to trace them if they are using their own computers. Regards Marshall

6 5

Re: Over a decade of DDOS--any progress yet?
by Arturo Servin 11 Dec '10

11 Dec '10

On 8 Dec 2010, at 13:12, nanog-request(a)nanog.org wrote: > Date: Wed, 8 Dec 2010 12:53:51 +0000 > From: "Dobbins, Roland" <rdobbins(a)arbor.net> > Subject: Re: Over a decade of DDOS--any progress yet? > To: North American Operators' Group <nanog(a)nanog.org> > Message-ID: <BF571AD7-1122-407B-B7FA-77B9BBAC48F7(a)arbor.net> > Content-Type: text/plain; charset="us-ascii" > > > On Dec 8, 2010, at 7:28 PM, Arturo Servin wrote: > >> One big problem (IMHO) of DDoS is that sources (the host of botnets) may be completely unaware that they are part of a DDoS. I do not mean the bot machine, I mean the ISP connecting those. > > The technology exists to detect and classify this attack traffic, and is deployed in production networks today. Yes, they do exist. But, is people really filtering out attacks or just watching the attacks going out? > > And of course, the legitimate owners of the botted hosts are generally unaware that their machine is being used for nefarious purposes. > >> In the other hand the target of a DDoS cannot do anything to stop to attack besides adding more BW or contacting one by one the whole path of providers to try to minimize the effect. > > Actually, there're lots of things they can do. Yes, but all of them rely on your upstreams or in mirroring your content. If 100 Mbps are reaching your input interface of 10Mbps there is not much that you can do. > >> I know that this has many security concerns, but would it be good a signalling protocol between ISPs to inform the sources of a DDoS attack in order to take semiautomatic actions to rate-limit the traffic as close as the source? Of course that this is more complex that these three or two lines, but I wonder if this has been considerer in the past. > > It already exists. If you have an URL would be good. I only found a few research papers on the topic and RSVP documents but nothing really concrete. Regards, -as

7 14

Global Crossing/GBLX tech needed - AS3549
by Matt Disuko 11 Dec '10

11 Dec '10

Can a Global Crossing IP engineer please contact me off-list? Thanks, Matt

2 1