- NANOG - lists.nanog.org

Those interested in NANOG governance, please read...
by Daniel Golding 24 Jan '05

24 Jan '05

I'd like to remind everyone of the Sunday evening meeting at the upcoming NANOG conference in Las Vegas. Everyone who has an interest in how NANOG is administered, be it the mailing list or conferences, should attend. Participation is vital in making the community's voice heard. If you think the status-quo is ok or if you would like to see some changes made, participation will ensure that your voice is heard. A phone bridge and IRC-cast are being worked on now. More information on these should be available by the end of the week. Also, please take a chance to visit http://www.nanog-reform.org. If you agree with the contents, please endorse it by "signing". Thanks. We will now return to our regularly scheduled thread, which seems to be intent on convincing people to violate their NDA's with a major network equipment vendor :) Thanks, Daniel Golding

3 2

ATT.NET Troubles
by Kevin Marvin 24 Jan '05

24 Jan '05

I cannot get to anyone with an email address of att.net. They claim that I am not on a BL, but give me no more information. Anyone know who I can contact there to figure this out? Thanks, Kevin

1 0

BGP AS Path Quick Poll
by Blaine Christian 24 Jan '05

24 Jan '05

If you folks could take just a minute to answer a question (off list please). Do you ever prepend AS's, other than your own or private ones, to your AS path? ---form--- YES: NO: ---endform--- ----formsample---- YES: NO:X ----endformsample----

1 0

GSLB advice
by Matt Bazan 24 Jan '05

24 Jan '05

We're looking to dip our toes into the global server load balancing arena and I'd like to get your advice on the following: 1) For those of you running a GLSB solution do you perform this 'in house' or is it outsourced? 2) If running in-house, what gear do you use and how satisfied with it have you been? Thanks group, Matt

4 3

Emergency Internet Backbone Provider Maintenance Tonight
by Darrell Kristof (CE CEN) 24 Jan '05

24 Jan '05

All: Has anyone heard about some carriers doing emergency maintenance tonight on Internet routers due to a code vulnerability? I'm trying to find out what vendor it involves and the details behind it. I understand it's still under NDA, but I'm sure someone out there knows more. Thanks, - Darrell ====================================================================== Darrell Kristof, CISSP, CCNP, TICSA Network Manager/Team Leader Whole Foods Market, Corporate Offices

11 11

Re: Emergency Internet Backbone Provider Maintenance Tonight
by Fergie (Paul Ferguson) 23 Jan '05

23 Jan '05

Agreed. I think it is *very* unlikely that a VoIP call-processing bug would be the reason for core router "emergency" code upgrades. - ferg -- Petri Helenius <pete(a)he.iki.fi> wrote: Todd Mitchell - lists wrote: > > On 22/01/2005 8:52 PM Darrell Kristof (CE CEN) wrote: > > > Has anyone heard about some carriers doing emergency maintenance > tonight > > on Internet routers due to a code vulnerability? I'm trying to find > out > > what vendor it involves and the details behind it. > > Perhaps due to the vulnerabilities mentioned below. > Very unlikely. Pete -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

4 3

RE: EPP minutia (was: Re: Gtld transfer process)
by Bruce Tonkin 23 Jan '05

23 Jan '05

Hello John, > > It appears that "REGISTRAR LOCK" has interesting > per-registrar implementation variations which do not always > put the domain holder's interests first. While the registry > does not, per se, have a direct business interest with the > domain holder, it should be possible to have a lock state > which is more oriented to the critical needs of some business > domain holders. > > For a reasonable fee (and copious amount of documentation), > it should be possible for any record holder to instruct the > registry to lock the ownership of a domain down in such a way > so as to require a similar amount of paperwork to release; > thus effectively creating an "OWNER LOCK" state. > These services are actually already available in the competitive registrar market. It is a matter of choosing a registrar that has the right business model and services to suit the registrant. Many corporates already take advantage of such services. Regards, Bruce

7 8

Re: broke Inktomi floods?
by Gadi Evron 23 Jan '05

23 Jan '05

> All Inktomi/Yahoo crawling is done from 68.142.248.0/22; the whois > entry for that block says to report issues to slurp(a)inktomi.com > > Have you tried alerting them to the problems yet? > > If yes, and if you didn't receive a response, please forward me the mail > that you sent, and I'll see to it that the right people see it. Thank you. I am now in contact with them. I must admit it is the first time I ever got any kind of abuse response from Yahoo!, but the people who contacted me seem serious. I will know more later on as to how well they handle it, but they seem like people who want to help. Gadi.

1 0

broke Inktomi floods?
by Gadi Evron 22 Jan '05

22 Jan '05

Inktomi (now Yahoo!) sends it's spiders all over the Internet. Lately some of our systems are reporting that they open many HTTP connections to our web sites, without ever sending any data and immediately disconnecting. This is getting to a level where it disturbs us. Is something broke over there? I can't seem to be able to reach them and this is becoming a real annoyance. Anyone else observing this? -- Gadi Evron, Information Security Manager, Project Tehila - Israeli Government Internet Security. Ministry of Finance, Israel. gadi(a)tehila.gov.il gadi(a)CERT.gov.il Office: +972-2-5317890 Fax: +972-2-5317801 http://www.tehila.gov.il

5 6

Multi-Router Looking Glass (MRLG) Version 5.1.0 has been released
by John Fraizer 22 Jan '05

22 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The latest release of the Multi-Router Looking Glass (MRLG) is now available at: ftp://ftp.enterzone.net/looking-glass/CURRENT/ You can see it in action at http://www.ip-guru.com/mrlg/ There are patches available to patch from version 4.3.0 to 5.0.0 and then from 5.0.0 to 5.1.0. If you are running a version of MRLG prior to 4.3.0 it is extremely important that you upgrade. Some of the updates are listed below. Multi-Router Looking Glass Version 5.1.0 Tue Jan 18 08:40:30 EST 2005 Multi-Router Looking Glass allows network administrators to execute commands on multiple routers via a nice web interface. Changes for version 5.1.0 * Implemented Net::SSH::Perl routines to allow SSH access to routers. * Added debug routines to code to aid in debugging config file when adding a new router. * Changed code to set $login_user to 'no_login_user_defined' if 'login_user' is not set in config file. *Change required by SSH routines. * Changed code to set $login_pass to 'no_login_pass_defined' if 'login_pass' is not set in config file. *Change required by SSH routines. * Cleaned up code to allow easier modification/debugging. * Added 'use_ssh' config parameter to config file to tell MRLG to use SSH. * Added 'use_port' config parameter to config file to tell MRLG to use a specific port for all connections to a specific router. If you're configuring MRLG for Cisco routers, you'll appreciate this one as it will make your config file much shorter! * Added 'debug' config parameter to config file to tell MRLG to output debug information for a specific router. * Added $::writable_directory config parameter to config file to tell MRLG where to store the known_hosts file that is created by Net::SSH::Perl when an SSH connection is used. Changes for version 5.0.0 * Integrated patch supplied by Jeff Barrow to support username/password authentication for devices that require a username to log in. * Upgraded code to use Net::Telnet::Cisco. * Added a few  tags for Google-bait so I can look and see how many people are running my code. Please leave these in place. I get a kick out of seeing all of the different networks that use this code. * More features coming soon - IE; SSH support! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB8bS1NnFN6q2MXL4RAkDrAJ4swg36K/fwqwPdQX1sBn3fy/wmiQCfTNYx Stz8zj7j+He6LzV8eH/rEHo= =aJow -----END PGP SIGNATURE-----

1 0