- NANOG - lists.nanog.org

PGP Key Signing at NANOG 34
by Joe Abley 13 May '05

13 May '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In Seattle, we are going to try to replace the single/long/tedious PGP key-signing event on Monday evening (which invariably clashes with the NSP-SEC BOF, or with dinner, or with sleep, or with accidental loss of sobriety) with a series of small key-signing parties, held in the last 10-15 minutes of every break on Monday and Tuesday. The thinking behind this will be described in a brief presentation on Monday morning. More details can be found here: <http://www.nanog.org/pgp.abley.html> Briefly, if you would like to participate: 1. Paste your public key into the convenient form at <http://www.biglumber.com/x/web?keyring=2230>, and 2. Visit the terminal room during one of the meeting breaks, armed with a pen, photo ID and a trusted copy of your PGP key fingerprint. I'll be printing out one set of fingerprint sheets per day, so make sure your key is submitted the day before the key signing party you plan to attend. If you don't know much about PGP, and you'd like to participate, try to plan to attend a key signing party on Monday in order to get a feel for what is going on -- it should then be straightforward to hook up with someone who can help you install/configure PGP software, and you can then plan to attend one of the key-signing parties the following day. I will attend all the parties, and will sign every key I can verify, and will hence act as a trust-bridge between individual key signing parties. It would be excellent if one or two other people who have enthusiasm for useful PGP deployment could find the time to do the same. Drop me a note off-list if you're interested in helping out. Joe -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (Darwin) iD8DBQFChMcJ/f+PWOTbRPIRAiqMAKCHTlSvS+N0Q30TRJKt7q0pUS1uRQCfWPWE P7/tzVJXi+UdHiRXlJAKolE= =LJco -----END PGP SIGNATURE-----

1 0

Re: what will all you who work for private isp's be doing in a few years?
by Frank Coluccio 13 May '05

13 May '05

Valdis Kletnieks wrote: >there's going to be *plenty* of room for small >flexible operators in niche markets, at both >ends of the pipe. Agreed. Adding some substance to those words, see: http://www.siliconinvestor.com/readmsg.aspx?msgid=21312808 Frank A. Coluccio DTI Consulting --------- On Fri May 13 9:03 , Valdis.Kletnieks(a)vt.edu sent: >On Fri, 13 May 2005 11:23:14 BST, Michael.Dillon(a)radianz.com said: > >> Their impact can't be measured because it spread out into niche >> markets. Like blogs and wikis and all those photo sites. >> And my company's network with 1,000 customers and PoPs in >> 20 countries all doing 100% ASP traffic. ASPs businesses are >> thriving. However, the crystal ball gazers who hyped them >> back in the late 90's just got it all wrong because they >> thought ASPs would displace MS-Office desktops and SAP >> installations. > >Exactly what *I* predicted - there's going to be *plenty* of room for >small flexible operators in niche markets, at both ends of the pipe. > >In fact, there's almost certainly money to be made by leveraging the fact that >Comcast wants to do 4M/384K/$25 - the number of companies making money from >finding innovative ways to sell you electricity is *far* outweighed by the >number of companies finding new ways to make money based on the fact that >somebody *else* is selling you electricity. > >The only people who need to worry are the ones whos business model is "We made >money selling 'just pipes' in that market 5 years ago, and we're doing it now, >so it will still be OK 5-10 years from now". 98% of *those* companies are in >for a rude awakening. ;) >

1 0

RE: what will all you who work for private isp's be doing in a few years?
by Matt Bazan 13 May '05

13 May '05

bottom line is that in a few years everything will be virtualized and cosolodation will rule the land. there will be single turnkey solutions for the end user / corporate environment that will be infinitely configurable to meet the latest trends and needs. there will be no use for the small time 'innovator' or 'player' except in a purely academic environment. > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Mark D. Bodley > Sent: Wednesday, May 11, 2005 2:44 PM > To: 'Stephen J. Wilcox'; Matt Bazan > Cc: nanog(a)nanog.org > Subject: RE: what will all you who work for private isp's be > doing in a few years? > > > > Matt, your questions seem extremely prejudiced to a > determined outcome. In my opinion resellers are in the long > run going to lose because of lack of tangible assets (there > is my Bias, on the table. I have my own facilities, and > equipment). However because pure resellers lack the > facilities they can be resellers(and often are) of whatever > the technology of the day is. Strangely, many resellers, grow > into facilities based carriers, but if they do not, then they > can always move to the next thing. If you sold ISDN, in the > 90's, and you knew how to walk someone through configuring > their pipeline, you were better than Bell (read PSI Net). If > you could accurately test, and deliver DSL, to a client 3-5 > years ago, (read COVAD) you were better than Bell. In the > future, who knows what it will be, (my bet is wireless, and > we all cook like chickens in a Showtime rotisserie) the > prevailing trait of those that have been in this for a long > time is adaptation. There was a day when selling access off > an ISDN connection was doable. I got out of the straight > access market in the late 90's. I provide, and resell > connectivity, with static routes to applications I host, or > maintain. Hopefully the straight resellers of today will be > selling microwave, or implant connectivity, or whatever in a > few years. Bottom-line public or not, Mom, and Pop, or not no > matter what you do in this business you have to be ready to > adapt. If you are huge and don't catch the next wave you > could be just as dead as the smaller guys that don't catch that next > wave. > > > Mark D. Bodley > President > Cyrix Systems > m(a)cyrixsys.com > www.cyrixsys.com > > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Stephen J. Wilcox > Sent: Wednesday, May 11, 2005 4:12 PM > To: Matt Bazan > Cc: nanog(a)nanog.org > Subject: Re: what will all you who work for private isp's be > doing in a few years? > > > On Wed, 11 May 2005, Matt Bazan wrote: > > > why in the world would anyone want to purchase dsl from a private > > reseller when i can get 4mb down 384 up from comcast for > $25? think > > you dsl resellers out there are doomed. in fact, just a matter of > > time before most of you isps are down the toilet. im > reminded of the > > mom and pop grocery store phenomenon that has now been > replaced by the > > kohls, a&p, whole foods etc. of course there will always be niche > > markets but this is less applicable for a pure commodity like > > bandwidth. yeah, i suppose you'll say something about value added > > services and such and you may have a point but i doubt that > will keep the > ship afloat for long. > > Matt, > first whats your affiliation and experience in this arena? That these > markets exist and more profitably so than the large carriers > suggest the > problems you are raising dont exist. > > What is your theory based on, you only cite your personal > preference to buy > from Comcast which cannot be said to be indicative of the > market. Grocery > stores are not comparable, this is a different industry and different > market. Also bandwidth is not a pure commodity, and DSL is not pure > bandwidth. > > I think your argument is at best uninformed, at worst > non-existent.. you > need to provide some references, examples, figures, > whatever.. else this is > little more than trolling. > > Steve > > > >

9 9

The Cidr Report
by cidr-report＠potaroo.net 13 May '05

13 May '05

This report has been generated at Fri May 13 21:44:55 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 06-05-05 157716 108341 07-05-05 157747 108272 08-05-05 157845 108355 09-05-05 157874 107939 10-05-05 157991 107998 11-05-05 158104 108225 12-05-05 158263 108345 13-05-05 158437 108294 AS Summary 19548 Number of ASes in routing system 8018 Number of ASes announcing only one prefix 1475 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90463488 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 13May05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 158472 108345 50127 31.6% All ASes AS4323 1099 221 878 79.9% TWTC - Time Warner Telecom AS18566 806 8 798 99.0% COVAD - Covad Communications AS4134 894 220 674 75.4% CHINANET-BACKBONE No.31,Jin-rong Street AS721 1113 562 551 49.5% DLA-ASNBLOCK-AS - DoD Network Information Center AS27364 565 22 543 96.1% ACS-INTERNET - Armstrong Cable Services AS7018 1475 941 534 36.2% ATT-INTERNET4 - AT&T WorldNet Services AS22773 483 23 460 95.2% CCINET-2 - Cox Communications Inc. AS7725 449 50 399 88.9% CCH-AS7 - Comcast Cable Communications Holdings, Inc AS6197 901 513 388 43.1% BATI-ATL - BellSouth Network Solutions, Inc AS3602 513 142 371 72.3% SPRINT-CA-AS - Sprint Canada Inc. AS17676 431 78 353 81.9% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS9929 349 46 303 86.8% CNCNET-CN China Netcom Corp. AS4766 575 280 295 51.3% KIXS-AS-KR Korea Telecom AS6478 415 126 289 69.6% ATT-INTERNET3 - AT&T WorldNet Services AS6140 401 138 263 65.6% IMPSAT-USA - ImpSat AS14654 266 6 260 97.7% WAYPORT - Wayport AS9443 374 123 251 67.1% INTERNETPRIMUS-AS-AP Primus Telecommunications AS1239 893 650 243 27.2% SPRINTLINK - Sprint AS7545 493 252 241 48.9% TPG-INTERNET-AP TPG Internet Pty Ltd AS23126 254 18 236 92.9% KMCTELCOM-DIA - KMC Telecom, Inc. AS15270 272 38 234 86.0% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS9583 733 501 232 31.7% SIFY-AS-IN Sify Limited AS6198 464 236 228 49.1% BATI-MIA - BellSouth Network Solutions, Inc AS5668 487 262 225 46.2% AS-5668 - CenturyTel Internet Holdings, Inc. AS2386 851 633 218 25.6% INS-AS - AT&T Data Communications Services AS9498 297 79 218 73.4% BBIL-AP BHARTI BT INTERNET LTD. AS11456 318 109 209 65.7% NUVOX - NuVox Communications, Inc. AS6167 264 67 197 74.6% CELLCO-PART - Cellco Partnership AS6517 321 128 193 60.1% YIPESCOM - Yipes Communications, Inc. AS812 209 21 188 90.0% ROGERS-CABLE - Rogers Cable Inc. Total 16965 6493 10472 61.7% Top 30 total Possible Bogus Routes 172.1.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.2.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.3.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.4.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.5.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.6.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.7.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.8.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.9.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.10.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.11.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.12.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.13.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.14.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.15.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.32.0.0/24 AS7011 CITLINK - Citizens Utilities 172.50.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.51.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.52.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.74.0.0/16 AS12956 TELEFONICA Telefonica Backbone Autonomous System 172.122.28.0/24 AS210 WEST-NET-WEST - Utah Education Network 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.200.100.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 196.3.162.0/24 AS6083 AFRINIC African Network Information Center 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.88.0/24 AS89 NUSC-CSTLNET-AS - Naval Underwater Systems Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.247.0/24 AS3475 LANT-AFLOAT - Department of the Navy 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET - CityNet, Inc. 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM - GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MBNET-AS - Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.96.44.0/23 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.156.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 202.86.252.0/22 AS4748 RESOLINK-AS Resources Linke Network Limited 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 TELEONE-HK TeleTeleOne (HK) Limited 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT - Exobit Networks Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 208.53.224.0/19 AS13576 SDNET - SOUTH DAKOTA NETWORK 208.138.48.0/20 AS7955 SOURCENET - SourceNet Corporation 209.134.0.0/18 AS8082 WORLDSITE - Worldsite Networks 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INTERPAC - Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL - Telesat International Ltd. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.82.160.0/20 AS13823 CALYX-USA - Calyx Internet Access Corp. 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.145.200.0/21 AS20304 JVLNET - JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.194.112.0/20 AS29738 UVNET-ASN1 - UVNET 216.194.113.0/24 AS29738 UVNET-ASN1 - UVNET 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

1 0

Subject : RE: ACL Monitoring
by J. Oquendo 13 May '05

13 May '05

On Thu, 12 May 2005, Glynn Stanton wrote: > > > If you anticipate doing a lot of this kind of monitoring in the future you > may want to take a look at the "expect" programming language > http://expect.nist.gov/ , which has very simple "send"/"expect" constructs. > E.g. send "show acl 101/r" expect "access-list .." etc. Perl also allows > similar although is probably not quite as easy to pick up if you've never > done this kind of thing before. > > Essentially you'd write a quick script to telnet or ssh to the router "send" > your commands, expect a result and do something based on that result. As I > said, its worth the time investment and you'll find once you get the script > done you can just reuse it for many other tasks. Kind of silly to state using an expect script or any other "script" for that matter considering the assumption that, it seems he is not trusting someone (as mentioned in another post), so I would take it that this script would run from where? Not only that, you would go through hell configuring encrypting the password on an expect script for the script to decrypt, then send. Now, not only that, but then what? How would you configure it to monitor something say in real time? You would likely have to use the diff and grep commands for parsing, and a whole bunch of other things to get it to just monitor a change, not a guarantee you will find out who changed it without some major scripting as opposed to using accounting ala TACACS+ spawn ssh username(a)router.company.org.net.whatever expect "Password: " send "secret\r" expect "something" send "something\r" expect $RESPONSE_FROM_ROUTER spawn $WHAT_DO_YOU_SPAWN_TO_COPY_WHAT_YOU_SEE Expect would be worthless in my opinion. Why reinvent the "kick their asses to accounting mode" wheel. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x0D99C05C http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0D99C05C sil @ infiltrated . net http://www.infiltrated.net "How a man plays the game shows something of his character - how he loses shows all" - Mr. Luckey

2 1

RE: ACL Monitoring
by Jim McBurnett 13 May '05

13 May '05

Paul, I think a better solution maybe to implement TACACS+ and resrict rights on who can do that.. Sounds like you don't trust someone..... I'd try that first... Later, Jim -----Original Message----- From: Paul Ryan [mailto:pryan@rogers.wave.ca] Sent: Thursday, May 12, 2005 5:15 PM To: nanog(a)merit.edu Subject: ACL Monitoring Importance: High All - I am looking for a solution (open source, scripts) to allow me to monitor ACL's on Cisco routers. So if for example a line dissapears from an ACL or the entire ACL is removed - I am alerted via pager/e-mail etc. regards, Paul R

3 2

ACL Monitoring
by Paul Ryan 13 May '05

13 May '05

All - I am looking for a solution (open source, scripts) to allow me to monitor ACL's on Cisco routers. So if for example a line dissapears from an ACL or the entire ACL is removed - I am alerted via pager/e-mail etc. regards, Paul R

4 3

Windows OneCare: managed support for unmanaged PCs
by Sean Donelan 13 May '05

13 May '05

Microsoft is announcing a new subscription-based computer fix-it service to automatically patch security holes, virus, spyware and automate maintaining unmanaged PCs such as those found at home. Most importantly it includes live support calls as part of the subscription fee. http://news.com.com/Security+gripes+Microsoft+feels+your+pain/2100-7355_3-5… No pricing was announced, but historically the people who most need such a service are the least likely to pay for it.

1 0

Need tech contact at Akamai
by William Caban 12 May '05

12 May '05

Need tech contact at Akamai for troubleshooting access to some domains hosted by them. --William Caban Net. Admin - HPCf University of Puerto Rico

2 1

Blocking port udp/tcp 1433/1434
by Joe Maimon 12 May '05

12 May '05

Is there still justification for denying transit for ms-sql slammer ports? Thanks, Joe

11 16