- NANOG - lists.nanog.org

Wiltel has gone pink.
by Jo Rhett 16 Mar '06

16 Mar '06

This morning we have started receive an abundance of spam from Wiltel customers, pointing boldly back to websites hosted in Wiltel space. OrgAbuseHandle: WAC18-ARIN OrgAbuseName: Wiltel Abuse Contact OrgAbusePhone: +1-918-547-2000 OrgAbuseEmail: abuse(a)wiltel.com Messages to abuse(a)wiltel.com are being rejected. This phone number goes to their "conferencing group", which doesn't know what 'abuse' is, or even what an IP network is. I went through 4 levels of management, and was informed that they no longer had an abuse team -- that this was disbanded in a recent reorganization. In short, it would appear that Wiltel is now selling pink contracts. -- Jo Rhett senior geek SVcolo : Silicon Valley Colocation

11 14

RE: AT&T transit - thoughts?
by Chris Ranch 16 Mar '06

16 Mar '06

Umm, which backbone, AT&T (legacy), SBCIS or PBNI? I'm so confused. Chris > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of matthew zeier > Sent: Wednesday, March 15, 2006 5:13 PM > To: nanog(a)merit.edu > Subject: AT&T transit - thoughts? > > > > Anyone using AT&T for transit with any useful comments? >

1 0

DNS TTL adherence
by Thurman, Steven 15 Mar '06

15 Mar '06

Does anyone know if there is a research paper or statistics related to what percentage of DNS servers do not adhere to advertised TTL's? I am looking for some verifiable research on this topic if it is available. Thanks, Steve

7 7

Load sharing traffic over 3 circuits - 1 eBGP session
by Jeff Neuffer Jr 14 Mar '06

14 Mar '06

Hello, I need clarification; appreciate any comments on list or off list. Here is the backdrop, * Our router is a Juniper and our IP transit provider's router is a Cisco. * 1 ebgp session between us. * Between us we have the following circuits, 2 DS3's 1 OC3 (burstable) * Static routing is used with loopback addresses I've setup and used bgp multi-hop for load sharing traffic across multiple links before and I am quite comfortable with it. Here is what I'm being told and what I'm seeking clarification on. I'm told that my router can divert/stop sending traffic over the two slower links when they become saturated (reach capacity), and the remaining circuit (higher bandwidth) can continue to pass existing traffic flows and take on additional traffic flows. Can someone clarify if that is possible? Thanks, Jeff

1 0

dnsstealer.com
by Randy Bush 14 Mar '06

14 Mar '06

i think someone needs to nuke this domain randy From: "Shopping" <Shopping(a)dnsstealer.com> To: randy(a)rg.net Subject: Confirmation: JC Penney Card Date: Mon, 13 Mar 2006 20:23:05 -0600 Dear randy(a)rg.net, We are attempting to contact you about the $250 JCPenney(R) Card and request you to complete your email address below: http://pny.dnsstealer.com/clk/53708886.15.251.101 Thank you for taking your time and on this offer. My best, List Manager If you no longer wish to receive Exclusive Gift Cards emails, visit the Exclusive Gift Cards site or visit the url: http://pny.dnsstealer.com/clk/53708886.15.251.102 Or, print a copy of this email and send it along with your request to: Exclusive Gift Cards, 13900 Jog Road, Suite 203-251, Delray Beach, FL 33446. http://pny.dnsstealer.com/uns/53708886.15.251 848 N. Rainbow Blvd. #1688 Las Vegas, NV 89107 -1020468834

7 9

RE: Security problem in PPPoE connection
by James R. Cutler 13 Mar '06

13 Mar '06

At 3/13/2006 11:16 AM -0800, Bora Akyol wrote: "Any info on percentages of users that use routers vs Windows boxes? " Almost 100% of Careful Windows Users use routers. Almost 100% of Potential Victims connect directly. Now, you really meant to ask, what is the ratio of Victims to Careful. Too big, whatever it is. - James R. Cutler james.cutler(a)consultant.com

3 2

Covad contact?
by Mcintyre, Ken 13 Mar '06

13 Mar '06

Hello, Could someone from Covad please contact me off list? Thank you, Ken -

1 0

RE: Security problem in PPPoE connection
by Bora Akyol 13 Mar '06

13 Mar '06

Any info on percentages of users that use routers vs Windows boxes? > > Microsoft has some suggestions for configuring PPPOE for MS-Windows. > > http://www.microsoft.com/technet/prodtechnol/winxppro/maintain > /pppoe.mspx > > A problem is many of your customers won't follow the > directions, and may still be vulnerable to man-in-the-middle > attacks for the login if they don't disable PAP. Because > things will appear to work, i.e. Windows will use CHAP first > and fallback to PAP, your customers may not notice when an > attack does occur. > > Although PPPOE is a layer 2 protocol, the user data may be > vulnerable to many of the same ethernet CAM table, denial of > service and sniffing weaknesses even if the login credentials > are kept secret with CHAP (or more advanced EAP options). > PPPOE and PPP tend to assume the access networks are 1) > "free" and 2) "secure." This may be constrained using > point-to-point connections, but often require additional > configuration of multi-access networks. > > The configuration details will vary by equipment vendor. But > you should find some good information by doing a few web > searches for metro ethernet security, private vlan, broadcast > security. > >

1 0

Security problem in PPPoE connection
by Joe Shen 13 Mar '06

13 Mar '06

Hi, We are facing problem with PPPoE in ethernet access network. To provide high speed access, 10Mbps/100Mbps ethernet is used as access method. But, we found some guy 'steal' some other's account by listening to broadcasting packets, and they also set up 'phishing' PPPoE server to catch those PPPoE authentication packets. With ATM DSLAM,we could solve this by binding account with PVC. With ethernet, although we could seperate subscribers into VLANs there is more than 100 subscribers within one VLAN. What's your method to deal with such problem? Will CHAP in PPPoE help? thanks Joe __________________________________ Do you Yahoo!? Yahoo! Movies - Search movie info and celeb profiles and photos. http://sg.movies.yahoo.com/

7 9

Need remote hands in Marin (San Rafael, CA)
by chuck goolsbee 13 Mar '06

13 Mar '06

Familiarity with Copper Mountain Copper Edge 150 DSLAM a bonus. Will exchange cash or <insert adult beverages of choice> at a future NANOG meeting for assistance. Call or email if available: p. 206-838-1630, option 1, ext 2001 e. cg(a)forest.net Thanks, --chuck goolsbee, digital.forest, seattle

1 0